Built for developers by developers
Start your free 14 day Developer Edition trial and get:
the tooling you and your team need to systematically deliver code that meets the highest quality standard for every project at every step in the developer workflow
Analyze the quality of the code in your preferred language. Patch bugs, close vulnerabilities, and follow best practices with a single source of truth.
Easy project onboarding with integration to GitHub, GitLab, Azure and Bitbucket; in-cloud & on-prem. Plus a Jenkins plugin and easy integration with popular CI tools and build systems.
Making sure user-provided data is sanitized before it hits critical systems (database, file system, OS, etc.) helps ensure the security of your code. Taint analysis tracks untrusted user input throughout the execution flow - across not just methods but also from file to file.
The UI is crafted for clarity so developers easily understand the problem flow from the vulnerability source to the code location (‘sink’) where the compromise occurs
Super-fast analysis helps you quickly assess where the code stands in pull requests and branches so you can remediate issues while your code is still fresh in mind.
Receive actionable, high-precision feedback at the right place and time. Benefit from 5,000+ coding rules and industry-leading taint analysis of Java, C#, PHP, Python, TypeScript & JavaScript.
Align your team with a consistent definition of code health. Collaborate efficiently in making your code clean and meeting your team's code quality expectations.
Add the SonarLint extension to your favorite IDE and find code issues on the fly. SonarQube rules and analysis settings synchronize to SonarLint, aligning teams around a single standard of Clean Code.
Whether you're self-hosted or SaaS, on-prem or in-cloud, we have you covered. Import repositories and provision projects from Bitbucket, and easily navigate your environment’s analysis configuration with built-in wizards. Automatically differentiate between main branch and PR - no extra config required.
Whether you're self-hosted or SaaS, on-prem or in-cloud, we have you covered. Import repositories and provision projects from Github, and easily navigate your environment’s analysis configuration with built-in wizards. Automatically differentiate between main branch and PR - no extra config required.
Whether you're self-hosted or SaaS, on-prem or in-cloud, we have you covered. Import repositories and provision projects from Azure DevOps, and easily navigate your environment’s analysis configuration with built-in wizards. Automatically differentiate between main branch and PR - no extra config required.
Whether you're self-hosted or SaaS, on-prem or in-cloud, we have you covered. Import repositories and provision projects from Gitlab, and easily navigate your environment’s analysis configuration with built-in wizards. Automatically differentiate between main branch and PR - no extra config required.
An Application is a synthetic project composed of projects that ship together; if one isn't ready to ship, none of them are. SonarQube Developer Edition provides you with:
- Aggregate quality gate
- One place to know if your project set is shippable
- Easily visualize the pieces of the projects that work together
Commercial Editions (Developer, Enterprise, and Data Center) are priced per instance per year and based on your lines of code (LOC). An instance is an installation of SonarQube. You pay per instance for a maximum number of LOC to be analyzed.
Developer Edition pricing starts at $160/yr for a maximum analysis of 100,000 LOC and can extend to $68,580/yr for a maximum analysis of 20M LOC.
Enterprise Edition pricing starts at $21,000/yr for a maximum analysis of 1M LOC and can extend to $252,000/yr for a maximum analysis of 100M LOC.
Need to analyze more lines of code? Check out our Data Center Edition, and discover the horizontal scalability and high availability for global deployments! Get in touch with sales for detailed pricing.
Used and loved by 400,000+ organizations
