--- description: Detailed reviews on SonarQube based on features, pricing, usability, and ratings. Get a quick overview advantages and disadvantages. Compare SonarQube with similar products. image: https://gdm-localsites-assets-gfprod.imgix.net/images/getapp/og_logo-94fd2a03a6c7a0e54fc0c9e21a1c0ce9.png title: SonarQube Reviews, Prices & Ratings | GetApp Canada 2026 --- Breadcrumb: [Home](/) > [AI Governance Tools](/directory/5257/ai-governance-tools/software) > [SonarQube](/software/2034691/sonarqube) # SonarQube Canonical: https://www.getapp.ca/software/2034691/sonarqube Page: 1 / 4\ Next: [Next page](https://www.getapp.ca/software/2034691/sonarqube?page=2) > SonarQube is a cloud-based and self-hosted code quality and security platform that detects bugs, vulnerabilities, and architecture. > > Verdict: Rated **4.5/5** by 68 users. Top-rated for **Likelihood to recommend**. ----- ## Overview ### Key benefits of SonarQube \* Detects bugs, vulnerabilities, and code smells early in the development lifecycle via SAST across 40+ languages, reducing costly late-stage remediation and post-deployment risk. \* Enforces consistent code quality standards across all contributors through centralized Quality Gates and rule synchronization between the IDE and CI/CD pipeline, blocking non-compliant code from merging. \* Provides compliance reporting for NIST SSDF, OWASP, CWE, STIG, CASA, PCI DSS, and MISRA C++:2023, reducing manual audit effort for regulated industries. \* Supports AI-generated code review through AI Code Assurance, applying specialized static analysis rules and a dedicated Quality Gate to maintain governance over AI-assisted development. \* Offers self-hosted deployment on-premises or in a private cloud, maintaining full data sovereignty for organizations in financial services, healthcare, government, and other regulated sectors. \* Scales from individual developers to large distributed enterprises monitoring billions of lines of code, with editions tailored to team size and project complexity. \* Reduces rollbacks and rework by preventing issues from reaching production, increasing developer velocity through earlier, automated feedback. \* Delivers context-aware fix suggestions via AI CodeFix directly in the developer workflow, and automates verified-fix pull requests through the Remediation Agent (Enterprise plan, beta). \* Integrates natively with GitHub, GitLab, Azure DevOps, Bitbucket, Jenkins, and JFrog, and provides IDE plugins for VS Code, IntelliJ, Visual Studio, and Eclipse, fitting into existing development toolchains. \* Supports agentic workflows via the SonarQube MCP Server, CLI, and agent plugins for Claude Code, Gemini, and Kiro, extending code quality and security analysis to AI-native development environments. \* Provides customizable dashboards and portfolio management for engineering managers, offering visibility into code quality trends across multiple projects and teams. ## Quick Stats & Ratings | Metric | Rating | Detail | | **Overall** | **4.5/5** | 68 Reviews | | Ease of Use | 4.2/5 | Based on overall reviews | | Customer Support Software | 4.0/5 | Based on overall reviews | | Value for Money | 4.4/5 | Based on overall reviews | | Features | 4.4/5 | Based on overall reviews | | Recommendation percentage | 90% | (9/10 Likelihood to recommend) | ## About the vendor - **Company**: SonarSource Sàrl - **Location**: Geneva, Switzerland ## Commercial Context - **Starting Price**: US$720.00 - **Pricing model**: Other (Free version available) (Free Trial) - **Pricing Details**: SonarQube has 3 pricing plans for self-hosted editions for automated code review. - **Target Audience**: Self Employed, 2–10, 11–50, 51–200, 201–500, 501–1,000, 1,001–5,000, 5,001–10,000, 10,000+ - **Deployment & Platforms**: Cloud, SaaS, Web-based, Mac (Desktop), Windows (Desktop), Linux (Desktop), Windows (On-Premise), Linux (On-Premise) - **Supported Languages**: English - **Available Countries**: Switzerland ## Features - AI/Machine Learning - API - Access Controls/Permissions - Activity Dashboard - Application Security - Audit Trail - Bug Tracking Software - Collaboration Tools - Compliance Management - Configurable Workflow - Continuous Delivery - Continuous Deployment - Continuous Integration Software - Custom Development - Dashboard Software - Data Import/Export - Debugging - Decision Support Software - Deployment Management - For Developers ## Integrations (50 total) - AWS CodeBuild - AWS CodePipeline - AWS CodePipeline for CI/CD Automation - Android Studio - Apache Maven - Azure DevOps Server - Azure Pipelines - Backstage - Bitbucket - ChatGPT - CircleCI - Claude - Codemagic - Copado DevOps - Cortex ... and 35 more integrations ## Support Options - Email/Help Desk - FAQs/Forum - Knowledge Base Software - Phone Support - 24/7 (Live rep) - Chat ## Category - [AI Governance Tools](https://www.getapp.ca/directory/5257/ai-governance-tools/software) ## Related Categories - [AI Governance Tools](https://www.getapp.ca/directory/5257/ai-governance-tools/software) - [Continuous Integration Software](https://www.getapp.ca/directory/1327/continuous-integration/software) - [Static Application Security Testing (SAST) Software](https://www.getapp.ca/directory/3785/static-application-security-testing-sast/software) - [Bug Tracking Software](https://www.getapp.ca/directory/1003/bug-tracking/software) - [Artificial Intelligence Software](https://www.getapp.ca/directory/1397/artificial-intelligence/software) ## Alternatives 1. [GitHub](https://www.getapp.ca/software/90537/github) — 4.8/5 (6206 reviews) 2. [Jenkins](https://www.getapp.ca/software/125307/jenkins) — 4.5/5 (574 reviews) 3. [GitLab](https://www.getapp.ca/software/112635/gitlab) — 4.6/5 (1226 reviews) 4. [Bitbucket](https://www.getapp.ca/software/91554/bitbucket) — 4.6/5 (1350 reviews) 5. [Jira](https://www.getapp.ca/software/9953/jira) — 4.4/5 (15488 reviews) ## Reviews ### "Measure the quality of your software" — 5.0/5 > **Verified Reviewer** | *December 24, 2022* | Information Technology & Services | Recommendation rating: 10.0/10 > > **Pros**: I like sonarqube dashboard and the flexibility that quality gates provide to measure your software quality. You can set up you own thresholds for maintenance, reliability, security, code coverage and many other metrics, and allow only versions passing this quality gate to be deployed. > > **Cons**: Unfortunately it lacks an easy way to see trends and go deep into which developers are the best/the worst. Also, it is paid if you need to analyse software in some languages, available only on the cloud. ----- ### "Code Quality Assurance" — 4.0/5 > **Verified Reviewer** | *March 21, 2024* | Banking | Recommendation rating: 8.0/10 > > **Pros**: - It supports almost all commonly used languages like JAVA, Python, Javascript, etc. - Integrates well with CI/CD pipeline established in tools like Jenkins and GitHub. - Detects code duplication, bugs and vulnerabilities in code. > > **Cons**: - May be complex to understand the reports for new users. - May block delivery/deployment if hard gates are enabled by DevOps team which may delay project delivery. > > Overall, impressed by this tool that supports multiple languages, monitoring code quality, bugs and vulnerability detection. Also, integrates well with Jenkins, GitHub, etc. ----- ### "Great tool to drive Coding Quality standards" — 3.0/5 > **Chandramouli** | *August 12, 2021* | Hospital & Health Care | Recommendation rating: 7.0/10 > > **Pros**: PR analysis and Integration with Bitbucket are most helpful. > > **Cons**: 1. Number of rules should be increased. 2. Few rules should have custom exclusions. Ex: Naming conventions =\> Organisation-specific words will be there which should be in Capital. 3. Generating a lot of false positives 4. Executive reports should generate based on scheduled triggers. We have 20 projects which are assigned to a Portfolio. if you are going to generate a report and send an email for the first portfolio calculation then the rest of the 19 projects info for that day will be missed. Higher management will think that the generated report is the latest but it is not. 5. PR analysis reports should be generated Quickly > > PR analysis and Integration with Bitbucket are most in avoiding the new issues. The tool needs a lot of improvements 1. Number of rules should be increased. 2. Few rules should have custom exclusions. Ex: Naming conventions =\> Organisation-specific words will be there which should be in Capital. 3. Generating a lot of false positives 4. Executive reports should generate based on scheduled triggers. We have 20 projects which are assigned to a Portfolio. if you are going to generate a report and send an email for the first portfolio calculation then the rest of the 19 projects info for that day will be missed. Higher management will think that the generated report is the latest but it is not. 5. PR analysis reports should be generated Quickly ----- ### "Elevate your code quality to the next level" — 4.0/5 > **Verified Reviewer** | *March 30, 2024* | Information Technology & Services | Recommendation rating: 9.0/10 > > **Pros**: The main feature of SonarQube is that it detects code complexities within the code so that the developer can optimize it. It also detects accessibility and security issues; code smells and suggests changes. > > **Cons**: It is a bit difficult to integrate with existing services and the quality checks may also conflict with other integrations. > > The development process has been a bit slower than usual after SonarQube integration, but the quality and readability of the code is much better. ----- ### "The least you can do for software quality" — 5.0/5 > **Verified Reviewer** | *November 30, 2022* | Information Technology & Services | Recommendation rating: 10.0/10 > > **Pros**: Sonarqube allows anyone to run a scan for code smells, bugs or vulnerabilities. There is no reason not to use it or integrate it into your CI/CD pipelines. Even if you do not enforce passing the quality gate, it helps a lot in tracking and highlighting where are your weaknesses. Code duplication and Code coverage are very useful tools to understand the overall quality of your development. > > **Cons**: It is hard to view historic data, and once you run a new analysis you cannot see the previous ones anymore from the same unified dashboard, you have to enter into each metric and check the history link. Please bring back the history dashboard from sonar 5\! ----- Page: 1 / 4\ Next: [Next page](https://www.getapp.ca/software/2034691/sonarqube?page=2) ## Links - [View on GetApp](https://www.getapp.ca/software/2034691/sonarqube) ## This page is available in the following languages | Locale | URL | | de | | | de-AT | | | en | | | en-AE | | | en-AU | | | en-CA | | | en-GB | | | en-IE | | | en-NZ | | | en-SG | | | en-ZA | | | es | | | es-CL | | | es-CO | | | es-MX | | | fr | | | fr-BE | | | fr-CA | | | nl | | | nl-BE | | | pt | | | pt-PT | | ----- ## Structured Data