--- description: Review of SonarQube Software: system overview, features, price and cost information. Get free demos and compare to similar programs on Software Advice Ireland. image: https://gdm-localsites-assets-gfprod.imgix.net/images/software_advice/og_logo-55146305bbe7b450bea05c18e9be9c9a.png title: SonarQube | Reviews, Pricing & Demos - SoftwareAdvice IE --- Breadcrumb: [Home](/) > [AI Governance Tools](/directory/5373/ai-governance-tools/software) > [SonarQube](/software/182719/sonarqube) # SonarQube Canonical: https://www.softwareadvice.ie/software/182719/sonarqube Page: 1 / 4\ Next: [Next page](https://www.softwareadvice.ie/software/182719/sonarqube?page=2) > SonarQube is an automated code quality and security platform that serves individual developers, small teams, and large enterprises across financial services, healthcare, government, and other industries. It continuously analyzes source code to detect bugs, security vulnerabilities, code smells, and architecture issues across 40+ programming languages and Infrastructure as Code platforms. The software can be deployed cloud-based via SonarQube Cloud, or self-managed on-premises or in a private cloud for organizations with strict data policies. Docker and Kubernetes deployments are also supported. Core features include static application security testing with a library covering over 7,000 issue types, pull request analysis with Quality Gates that block non-compliant code from merging, secrets detection, test coverage tracking, and compliance reporting for standards including OWASP, PCI DSS, NIST SSDF, and MISRA C++:2023. Customizable dashboards and portfolio views help engineering managers monitor code health at scale. Native integrations connect with GitHub, GitLab, Azure DevOps, Jenkins, and major IDEs. AI-generated code can be automatically detected and reviewed using dedicated analysis rules, and a Remediation Agent can open verified-fix pull requests automatically. Support is available through documentation and a knowledge base. > > Verdict: Rated **4.5/5** by 68 users. Top-rated for **Likelihood to recommend**. ----- ## Quick Stats & Ratings | Metric | Rating | Detail | | **Overall** | **4.5/5** | 68 Reviews | | Ease of Use | 4.2/5 | Based on overall reviews | | Customer Support | 4.0/5 | Based on overall reviews | | Value for Money | 4.4/5 | Based on overall reviews | | Features | 4.4/5 | Based on overall reviews | | Recommendation percentage | 90% | (9/10 Likelihood to recommend) | ## About the vendor - **Company**: SonarSource Sàrl - **Location**: Geneva, Switzerland ## Commercial Context - **Starting Price**: US$720.00 - **Pricing model**: Other (Free version available) (Free Trial) - **Pricing Details**: SonarQube has 3 pricing plans for self-hosted editions for automated code review. - **Target Audience**: Self Employed, 2–10, 11–50, 51–200, 201–500, 501–1,000, 1,001–5,000, 5,001–10,000, 10,000+ - **Deployment & Platforms**: Cloud, SaaS, Web-based, Mac (Desktop), Windows (Desktop), Linux (Desktop), Windows (On-Premise), Linux (On-Premise) - **Supported Languages**: English - **Available Countries**: Switzerland ## Features - AI/Machine Learning - API - Access Controls/Permissions - Activity Dashboard - Application Security - Audit Trail - Bug Tracking - Collaboration Tools - Compliance Management - Configurable Workflow - Continuous Delivery - Continuous Deployment - Continuous Integration - Custom Development - Dashboard - Data Import/Export - Debugging - Decision Support Systems - Deployment Management - For Developers ## Integrations (49 total) - AWS CodeBuild - AWS CodePipeline - AWS CodePipeline for CI/CD Automation - Android Studio - Apache Maven - Azure DevOps Server - Azure Pipelines - Backstage - Bitbucket - ChatGPT - CircleCI - Claude - Codemagic - Copado DevOps - Cortex ... and 34 more integrations ## Support Options - Email/Help Desk - FAQs/Forum - Knowledge Base - Phone Support - 24/7 (Live rep) - Chat ## Category - [AI Governance Tools](https://www.softwareadvice.ie/directory/5373/ai-governance-tools/software) ## Related Categories - [AI Governance Tools](https://www.softwareadvice.ie/directory/5373/ai-governance-tools/software) - [Bug Tracking Software](https://www.softwareadvice.ie/directory/4721/bug-tracking/software) - [Continuous Integration Tools](https://www.softwareadvice.ie/directory/4694/continuous-integration/software) - [Static Application Security Testing (SAST) Tools](https://www.softwareadvice.ie/directory/4429/sast/software) - [Artificial Intelligence (AI) Software](https://www.softwareadvice.ie/directory/4360/artificial-intelligence/software) ## Alternatives 1. [GitHub](https://www.softwareadvice.ie/software/397820/github) — 4.8/5 (6206 reviews) 2. [Jenkins](https://www.softwareadvice.ie/software/189661/jenkins) — 4.5/5 (574 reviews) 3. [GitLab](https://www.softwareadvice.ie/software/28004/gitlab) — 4.6/5 (1226 reviews) 4. [Bitbucket](https://www.softwareadvice.ie/software/126451/bitbucket) — 4.6/5 (1350 reviews) 5. [AWS CloudFormation](https://www.softwareadvice.ie/software/390371/aws-cloudformation) — 4.5/5 (112 reviews) ## Reviews ### "The best bugs exterminator" — 5.0/5 > **Flavio** | *29 May 2022* | Telecommunications | Recommendation rating: 10.0/10 > > **Pros**: Code review could be more focused on the new features implementation than trying to identify silly basic faults. > > **Cons**: The Eclipse Sonarqube plugin was not easy to make it work in the same manner was it was setup in the CI/CD machines. > > We can't live anymore without Sonarqube. When we started using it 5 years ago, the teams adoption was very fast. ----- ### "Best code scanning and monitoring tools" — 5.0/5 > **Verified Reviewer** | *26 April 2022* | Computer Software | Recommendation rating: 10.0/10 > > **Pros**: Reports it generates and grades on vulnerabilities and highlights the scanned code > > **Cons**: Integration with Visual Studio. Net code was not simple and easier. > > Used sonarqube in multiple web development project where we used this tool and found very useful and checkpoints ----- ### "Never use SonarQube" — 1.0/5 > **Zach** | *13 February 2025* | Computer & Network Security | Recommendation rating: 0.0/10 > > **Pros**: There is nothing about this company that I would ever recommend. > > **Cons**: Of all the terrible things about this service and company, it's their customer support that takes the cake\! > > This service is a complete scam. Let's start with how it ended. I canceled my account, only to find out that it did not actually cancel. So I contacted support. It took them 2 months to resolve my request and they continued billing my card when the account was 100% not in use and I had no access to it. Now they refuse to refund my money. This is after they increased the cost of my plan by 3x without my approval (which is what prompted me to want to leave). In order to try to reduce my cost, our engineering team attempted to discsonnect some unused repos... nope, not possible. NEVER use this service. You absolutely cannot trust them. It's unbelievable that their system cannot be canceled and yet somehow it's my fault and I continue to get billed while their support team takes weeks to respond. ----- ### "Improve code quality with sonarQube" — 5.0/5 > **Pinki** | *31 December 2022* | Computer Software | Recommendation rating: 10.0/10 > > **Pros**: Its very helpful tool for improving code quality and find vulnerabilities in code which reduces the security issue as well as reduce issue on production. It check duplicate code, logical bug and many more. > > **Cons**: Custom role adding is difficult rest all good. > > Its very good tool for scanning code and improving code quality by using this tool now we are able to improve code quality which reduces the review time and issues on production. ----- ### "One of the Best tools to incorporate Security into Pipeline" — 5.0/5 > **Mohammed** | *2 October 2021* | Information Technology & Services | Recommendation rating: 9.0/10 > > **Pros**: Great knowledgebase in understanding the bugs and vulnerabilities and fixing them. Highly informational dashboard and tools to filter huge amount of repos. > > **Cons**: Customizing rules are difficult. Certain times they will catch comments and rule engine still needs tweaking > > Sonar cube has been used for Static code analysis and Has been built to Jenkins Pipeline, It allowed to identify huge amount vulnerabilities and helped us to improve our code quality to a great instant. ----- Page: 1 / 4\ Next: [Next page](https://www.softwareadvice.ie/software/182719/sonarqube?page=2) ## Links - [View on SoftwareAdvice](https://www.softwareadvice.ie/software/182719/sonarqube) ## This page is available in the following languages | Locale | URL | | de | | | en | | | en-AU | | | en-GB | | | en-IE | | | en-NZ | | | fr | | ----- ## Structured Data