--- title: SonarQube Reviews meta_title: 'SonarQube Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 11 reviews by the users' company size, role or industry to find out how SonarQube works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 11 scale: '5' date_modified: '2026-07-12' parent_category: name: Marketplace Apps url: https://www.g2.com/categories/marketplace-apps --- # SonarQube Reviews **Vendor:** Kurian **Category:** [AWS Marketplace Software](https://www.g2.com/categories/aws-marketplace) **Average Rating:** 4.6/5.0 **Total Reviews:** 11 ## About SonarQube SonarQube is an automated code scanning tool that can be integrated with CI/CD pipeline to detect security vulnerabilities and defects in the application code. It can integrate with your existing workflow to enable continuous code inspection across your project branches and pull requests. The single node SonarQube AMI by Kurian has pre-configured the community edition of SonarQube with PostgreSQL as the backend database. When an EC2 instance is spun up from this AMI the SonarQube service would be up and running on that machine for your immediate use. ## SonarQube Reviews ### 1. Finds Key Security Issues and Delivers Broad Code Coverage **Rating:** 5.0/5.0 stars **Reviewed by:** Wicky W. | Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** April 16, 2026 **What do you like best about SonarQube?** It find most of security concern in code like hardcoded username password etc and also it provide code coverage including all area **What do you dislike about SonarQube?** I need to mark manually for fixe bug like that and at one point of time it reffer only one branch **What problems is SonarQube solving and how is that benefiting you?** It solve major security concern like all linting issue and hardcoded code problems ### 2. An automated QA - SonarQube **Rating:** 5.0/5.0 stars **Reviewed by:** Vipul P. | Azure Administrator, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** August 15, 2023 **What do you like best about SonarQube?** I have used this as AMI in my AWS environment for this version of the React application and found it to be fond of worthy. This integrated approach helped save time tha manual work. **What do you dislike about SonarQube?** Working in the AWS environment itself has cost factors involved I find this smooth integration I found it to be worthwhile but got to pay as well for using it apart from aws service cost. **What problems is SonarQube solving and how is that benefiting you?** I got to use it for enhanced security as it is a concern for the React application to be and I found it to be useful the direction and extensive information which Sonarqube provided and the best part is integration with the pipeline In CICD for the further future changes. Because AMI access at port resulted in time-saving also. Worthy enough! ### 3. Great tool for Code Quality Analysis **Rating:** 5.0/5.0 stars **Reviewed by:** Deepa S. | Senior Programming Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** August 26, 2023 **What do you like best about SonarQube?** SonarQube helps me in showing the issues in the code while developing itself. Many times it showed me the security related issues thus helps a lot in my day to day development. **What do you dislike about SonarQube?** Sometimes, you want to go for a specific piece of code that is not correct analysed by sonarqube. In such cases you have no option incase you have sonar checked enabled in your project. **What problems is SonarQube solving and how is that benefiting you?** SonarQube is a great tool that provides solutions to maintaining the code quality and standards. I helps a lot in my development by highlighting the issues and also suggest fix to them. ### 4. SonarQube - Best tool for CI/CD integrations for detecting security vulnerabilities **Rating:** 5.0/5.0 stars **Reviewed by:** Soumya T. | AVP, Enterprise (> 1000 emp.) **Reviewed Date:** March 03, 2022 **What do you like best about SonarQube?** Sonarqube standalone helps detect security vulnerabilities and various bugs via integrations on CI/CD pipeline to ensure 100% code control. The preconfigured apps via support system ( Kurian ) helps make wholesome management easy to go like - Jenkins, CMS, DB support, Ansible, and many others, making DevOps job easy. It's also cost-effective so you just need to pick the EC2 instance as per your requirements, and game is on !! **What do you dislike about SonarQube?** While going through the automated test cases, If dynamic injection of support is obtained then the whole experience would be much more beneficial from QA perspective. **Recommendations to others considering SonarQube:** To help team have control 100% of code coverage, bugs and other analysis with supports, Sonarqube helps detect security vulnerabilities via integrations on CI/CD pipeline to ensure 100% code control **What problems is SonarQube solving and how is that benefiting you?** The ability and agileness is the integration ability and gets various outputs in various formats. Categories DevSecOps, static code analysis, SAST, and developer workflow integration is a boon to app integration. ### 5. SonarQube: Best Community Tool for Code Quality **Rating:** 4.5/5.0 stars **Reviewed by:** Pranay J. | Senior DevOps Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** March 06, 2022 **What do you like best about SonarQube?** 1. It can be self-host on-prem or can be hosted in the cloud with the help pre-configured OS image 2. Can be easily integrated with any CICD pipeline with help of inline scan command or docker-cli scan **What do you dislike about SonarQube?** 1. It supports only static scan which always forces us to use some other tool with dynamic scanning support 2. For now scanning is available for some common languages, I am expecting the support of IaC scan in future updates **What problems is SonarQube solving and how is that benefiting you?** We are working on multiple projects where checking the code quality can be very tedious, With SoanrQube we can get the report on the SonarQube dashboard after every commit and improve the code in the next release. ### 6. One of the best tools to improve code quality and code security **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Oil & Energy | Mid-Market (51-1000 emp.) **Reviewed Date:** December 17, 2021 **What do you like best about SonarQube?** Quick informative and easy to understand dashboards and reports and best part the security concerns It is an easy tool that you can deploy and configure. After that you can measure the history of your obligation and integrate it with other tools like GitLab or GitHub or Azure DevOps to do quality code analysis. **What do you dislike about SonarQube?** SonarQube could be improved with more dynamic testing—basically, now, it's a static code analysis scan. For example, when the developer writes the code and does the corresponding unit test, he can cover functional and non-functional. So the SonarQube could be improved by helping to execute unit tests and test dynamically, using various parameters, and to help detect any vulnerabilities. Currently, it'll just give the test case and say whether it passes or fails—it won't give you any other input or dynamic testing **What problems is SonarQube solving and how is that benefiting you?** The static code analysis of the solution is the most important aspect for us. When it comes to security breaches within the code, we can leverage some rules to allow us to identify the repetition in our code and the possible targets that we may have. It makes it very easy to review our code for security purposes ### 7. Very good code quality tool for enterprise applications. **Rating:** 4.5/5.0 stars **Reviewed by:** Trisaiteja N. | Technical Lead, Enterprise (> 1000 emp.) **Reviewed Date:** March 08, 2022 **What do you like best about SonarQube?** 1. Supported plugins to multiple IDEs, Easy integration with GitLab etc. 2. Easy to add custom rules as needed for the project requirements. **What do you dislike about SonarQube?** May be a free version for a limited period of time to the developers would give good market value. **What problems is SonarQube solving and how is that benefiting you?** * Easy identification of boilerplate code. * Create custom rules for what we needed for the projects. * Speed and ability to integrate with several tools. ### 8. Decent tool that helped us achieve shiftleft to an extent..! **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** March 05, 2022 **What do you like best about SonarQube?** Offered features helped us to deliver bug free code with quality. Customisations like quality gates and many other helped us take baby steps in improving the standards in one of our legacy application. **What do you dislike about SonarQube?** Looking at the history of this tool, it is offering much better in the recent past but still a lot to do to catch up with modern tools who are offering features to catch runtime issues. **What problems is SonarQube solving and how is that benefiting you?** As I mentioned in my title and other notes sections, offered features helped us achieve shiftleft to an extent by finding quality gaps in early days of the software development lifecycle. ### 9. Code Review Tool For SonarQube **Rating:** 3.5/5.0 stars **Reviewed by:** Monali P. | Solutions Architect, Enterprise (> 1000 emp.) **Reviewed Date:** March 14, 2022 **What do you like best about SonarQube?** it shows review comments as per rule selection which help to avoid security scan **What do you dislike about SonarQube?** Too many rules for selection hence it is complex for selection **What problems is SonarQube solving and how is that benefiting you?** code review comments ### 10. Code quality at its max **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** March 12, 2022 **What do you like best about SonarQube?** Compatible with all operating systems and technology languages. Easy to Configure and reporting helps bringing team maturity and value delivery to customers. **What do you dislike about SonarQube?** Few aspects on shell script and other niche are not covered well. **What problems is SonarQube solving and how is that benefiting you?** Consistency in coding by team of developers is helping maintaining code quality and documentation. This enabling faster to market product delivery ### 11. A very useful product **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** December 15, 2021 **What do you like best about SonarQube?** The recommendations are very usefull, identifies problem areas and helps manage large code bases. Scores can estimate the quality of the code **What do you dislike about SonarQube?** sometimes the recommendations are useless, does not help in any meaningful way and makes development mone tedious. However, this is not the case most of the time **What problems is SonarQube solving and how is that benefiting you?** keeping the codebase tidy and identifying possible security issues or problem areas. ## SonarQube Discussions - [What is SonarQube Community Edition for Red Hat Enterprise Linux 8 with support used for?](https://www.g2.com/discussions/what-is-sonarqube-community-edition-for-red-hat-enterprise-linux-8-with-support-used-for) - [View SonarQube pricing details and edition comparison](https://www.g2.com/products/sonarqube-2026-02-03/reviews?section=pricing&secure%5Bexpires_at%5D=2026-07-31+04%3A45%3A56+-0500&secure%5Bsession_id%5D=9edb869b-1c06-4580-9fad-eff90a03f0f8&secure%5Btoken%5D=c63927aba75cbe5576e00d71f504e3980a5aba2a16170d0700d7cd45110eb6f5&format=llm_user) ## SonarQube Features **Agentic AI - AWS Marketplace** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration