SonarQube
Code quality and security analysis for human and AI code
SonarQube is a code quality and security platform from SonarSource that checks code for bugs, vulnerabilities and maintainability issues, whether a developer or an AI agent wrote it. It applies quality gates and runs in IDEs, coding agents, pull requests and CI/CD pipelines, covering more than 45 languages, frameworks and infrastructure-as-code platforms. AI CodeFix uses large language models to suggest fixes for issues it finds, and a Remediation Agent opens verified pull requests to clear technical debt. The product comes as a free open-source Community Build, the hosted SonarQube Cloud, and the self-managed SonarQube Server, including air-gapped deployments. Enterprise editions add security reports and Advanced Security adds software composition analysis.
- Filed under
- Code Assistance
- Pricing
- Freemium
- Platforms
- web · desktop
- Last updated
- November 10, 2026
What SonarQube does
- Quality gates. Applies pass/fail gates and records results across IDE, pull request and CI/CD.
- AI CodeFix. Uses large language models to suggest fixes, reviewed in the IDE.
- Remediation Agent. Opens verified pull requests to clear existing technical debt.
- Hunter Agent. Looks for access control, business logic and authentication flaws.
- Advanced Security. Adds software composition analysis and Advanced SAST for third-party code.
Who it’s for
- Teams gating pull requests on code quality and security
- Organizations needing self-managed or air-gapped analysis
SonarQube pricing
Community Build free; Cloud Free to 50k LOC; Cloud Team from $34/mo (100k LOC); Enterprise and Server by quote
As listed on November 9, 2026. Check sonarsource.com for current prices.
Things to know
- Free Cloud tier covers private projects up to 50k lines of code
- Server editions are priced per instance per year based on lines of code
Quick answers
- What is SonarQube?
- SonarQube is a code quality and security platform from SonarSource that checks code for bugs, vulnerabilities and maintainability issues, whether a developer or an AI agent wrote it.
- Is SonarQube free?
- SonarQube has a free plan. Paid plans start at $34 a month. (As listed on November 9, 2026.)
- Who makes SonarQube?
- SonarQube is made by SonarSource.
- Where can you use SonarQube?
- SonarQube is available on the web and desktop (apps, editor plugins or browser extensions).
- What are some alternatives to SonarQube?
- Other tools filed in the same section include Datadog Static Code Analysis, Snyk Code and Refact.ai.
Tags
#static-analysis#quality-gates#ai-codefix#sast#ci-cd#self-hosted
See also
Cross-referenced entriesDatadog Static Code Analysis
Static code analysis (SAST) with AI-suggested fixes
saststatic-analysiscode-security
Snyk Code
SAST scanner with AI-generated fixes for source code
sastsecurityvulnerability-scanning
Refact.ai
Open-source, self-hostable AI coding agent for IDEs
coding-agentopen-sourceself-hosted
Tabby
Open-source, self-hosted AI coding assistant
open-sourceself-hostedcode-completion