--- title: SonarQube Reviews meta\_title: 'SonarQube Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 154 reviews by the users' company size, role or industry to find out how SonarQube works for a business like yours. aggregate\_rating: rating\_value: 4.4 review\_count: 154 scale: '5' date\_modified: '2026-08-27' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # SonarQube Reviews & Product Details Visit Website Sonar, the industry standard for code verification and automated code review, helps reduce outages, improve security, and lower risks associated with AI and agentic coding. As an independent verification platform, Sonar enables organizations to securely develop at the speed of AI. Sonar is the foundation for high-performance software engineering, analyzing over 750 billion lines of code daily to ensure applications are secure, reliable, and maintainable. Rooted in the open source community, Sonar is trusted by 7M+ developers globally, including teams at ServiceNow, Booking.com, Deutsche Bank, AstraZeneca, and Ford Motor Company. * * * Product Website SonarQube Seller [SonarSource Sàrl](https://www.g2.com/sellers/sonarsource-sarl) Discussions [SonarQube Community](https://www.g2.com/products/sonarqube/discuss) Languages Supported English Solution Type All-in-One Overview by London Sarabia ![Infosys](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Infosys") Used by Infosys and 2 others ##### Featured Companies [ ![Infosys](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Infosys") Infosys](https://www.g2.com/products/infosys/reviews)[ ![Cognizant](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cognizant") Cognizant](https://www.g2.com/products/cognizant/reviews)[ ![Tata Consultancy Services](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Tata Consultancy Services") Tata Consultancy Services](https://www.g2.com/products/tata-consultancy-services/reviews) Beta Show More ## Pricing Pricing provided by SonarQube. ### Free Free [ View More Pricing Information ](https://www.g2.com/products/sonarqube/pricing) ## SonarQube Integrations (51) What do users say about integrations? Verified by SonarQube [Show More Integrations](https://www.g2.com/products/sonarqube/integrations) ![Divyarajsinh C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Divyarajsinh C.") DC Divyarajsinh C. Software Engineer Information Technology and Services Mid-Market (51-1000 emp.) 6/18/2026 "SonarQube: Easy Integration, Simple UI, and Solid Free Code Quality Scanning" 4.5/5 What do you like best about SonarQube? I’ve been using SonarQube for more than three years, and overall it has been an amazing experience. I use the free version for code quality scanning, and the best part is how easily it integrates with our project and fits into our workflow. The UI is simple and straightforward, which makes the learning curve feel very manageable. On top of that, the free version includes almost all the features I need, so it covers my day-to-day requirements well. And the code scanning and quality check speed is good enough in the free version as well. Review collected by and hosted on G2.com. What do you dislike about SonarQube? In the free version, only 5 users are allowed across the organization account, which feels too limited. It should allow at least 10 users. Also, the free version doesn’t include PR analysis; it would be much more useful if it allowed at least one PR/branch analysis per account. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? In our organization, we set up a local server where we configured SonarQube and integrated it into every local project in the company. This has been beneficial for everyone, since we can run code-quality checks and catch syntax errors early, which helps us deploy more optimized and cleaner code. Review collected by and hosted on G2.com. Show More 6/24/2026 Current UserValidated ReviewerIncentivizedSource: G2 invite ![Kewin M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Kewin M.") KM Kewin M. Credit Card Specialist Banking Small-Business (50 or fewer emp.) 8/4/2026 "SonarQube Catches Issues Early with Clear, Actionable Reports" 4/5 What do you like best about SonarQube? What I like most about SonarQube is that it catches code quality issues early and clearly shows what needs attention. The reports are easy to understand, and it helps us fix bugs and maintain cleaner code before changes move further along. It also saves time during code reviews because some common issues are already flagged. Review collected by and hosted on G2.com. What do you dislike about SonarQube? Sometimes SonarQube flags issues that aren’t really a problem for our specific codebase, so we end up spending extra time reviewing them or dismissing them as not applicable. The initial setup and configuration can also take a bit of time to get right. Aside from those points, it works well for what we need. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarQube helps us catch bugs and code-quality issues early, before they grow into bigger problems. It makes it easier to spot what needs to be fixed and helps keep our code consistent across the team. As a result, we spend less time in code reviews and are better able to prevent issues later in development. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite KG Kishor G. Cloud Engineer Mid-Market (51-1000 emp.) 7/22/2026 "SonarQube Makes Code Quality Clear with Strong Quality Gates and CI/CD Integration" 4.5/5 What do you like best about SonarQube? What I like best about SonarQube is how it makes code quality easy to understand and improve. Instead of just pointing out bugs, it also highlights security vulnerabilities, code smells, and maintainability issues in a clear and organized way. The quality gates are especially useful because they help catch problems before code is merged, encouraging better coding practices across the team. It also integrates well with CI/CD pipelines, making code reviews more efficient and helping developers build cleaner, more reliable software from the start. Review collected by and hosted on G2.com. What do you dislike about SonarQube? One thing I dislike about SonarQube is that it can sometimes produce false positives or flag issues that are not very relevant to the project. It also takes some time to fine-tune the rules so they match a team's coding standards, especially for larger codebases. For beginners, the number of reported issues can feel overwhelming at first, making it hard to know what to prioritize. While it's a powerful tool, it works best when its recommendations are reviewed with context rather than treated as absolute. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarQube helps solve the challenge of maintaining consistent code quality by automatically identifying bugs, security vulnerabilities, and code smells before they make it into production. This has made my development process more efficient because I can catch issues early instead of discovering them during testing or after deployment. It also encourages better coding practices by providing clear, actionable feedback, which has improved the overall maintainability of my code and reduced the time spent on fixing avoidable problems later. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Thank You page ![chaithanya r.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "chaithanya r.") CR chaithanya r. Quality Analyst Mid-Market (51-1000 emp.) 7/15/2026 "Powerful Tool for Clean and Maintainable Code" 4/5 What do you like best about SonarQube? I like SonarQube because it provides continuous feedback on code quality. It helps me spot bugs, security issues, code smells, and code duplication early in the development process. The Quality Gates and CI/CD integration also make it easier to ensure that only clean, maintainable code gets merged into the project. Review collected by and hosted on G2.com. What do you dislike about SonarQube? One thing I don’t like is that SonarQube can sometimes generate false positives, which then require a manual review. The analysis can also take longer on large projects, and setting up the rules the first time takes some effort. Still, overall I find it a valuable tool for maintaining code quality. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarQube addresses poor code quality by automatically detecting bugs, security issues, code smells, and duplicate code. It helps our team catch problems early, reduce production defects, improve maintainability, and keep coding standards consistent across everyone. As a result, we spend less time on development and debugging, and the software we deliver is more reliable. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Srinidhi H.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Srinidhi H.") SH Srinidhi H. Senior Product Manager – Enterprise Integrations and Data Solutions Small-Business (50 or fewer emp.) 7/9/2026 Business partner of the seller or seller's competitor, not included in G2 scores. "Catches bugs early, saves us time" 5/5 What do you like best about SonarQube? What I like best is that SonarQube catches issues before they ever reach production. The static analysis runs automatically in our CI pipeline, so every pull request gets flagged for code smells, bugs, and security vulnerabilities without anyone having to remember to check manually. The Quality Gate feature is the standout for us — it blocks merges that don't meet our thresholds, which has cut down on the "we'll fix it later" tech debt that used to pile up. I also lean on the detailed rule explanations; instead of just saying "this is wrong," it explains why and how to fix it, which has genuinely helped level up our more junior developers. An unexpected benefit was the coverage tracking over time — being able to see the trend line has made it much easier to justify testing investments to leadership. Review collected by and hosted on G2.com. What do you dislike about SonarQube? Setup can be a pain honestly. Getting the initial config right with our CI took longer than expected and the docs arent always clear. Also the false positives can be annoying sometimes, you end up marking stuff as wont fix pretty often. Wish the integrations were a bit more plug and play. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Before SonarQube we were catching bugs way too late, usually in code review or worse after something shipped. Now it runs in our pipeline and flags stuff early so we spend less time cleaning up messes later. Code quality across the team is more consistent too since everyones held to the same rules. Cut down our review time noticeably, maybe a few hours a week. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Gaurav V.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Gaurav V.") GV Gaurav V. Member Of Technical Staff Enterprise (\> 1000 emp.) 6/23/2026 "SonarQube improves the code quality" 4/5 What do you like best about SonarQube? SonarQube does a great job of continuously identifying code quality issues, bugs, security vulnerabilities, and technical debt all in one place. This helps teams keep their codebase cleaner, more reliable, and more secure throughout the development process. I also think the coding standards it defines are very well chosen. Review collected by and hosted on G2.com. What do you dislike about SonarQube? It takes a lot of time to run it, running locally is very difficult for each type of project. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? It helps catch bugs, security vulnerabilities, and code quality issues early in the development process, reducing rework, improving maintainability, and increasing confidence in code releases. Code maintenance becomes easy, coding quality improves Review collected by and hosted on G2.com. Show More 7/23/2026 Current UserValidated ReviewerIncentivizedSource: G2 invite ![Shailja S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shailja S.") SS Shailja S. Product Management Enterprise (\> 1000 emp.) 6/17/2026 "Automated Code Quality Gatekeeper That Catches Sneaky Bugs Early" 5/5 What do you like best about SonarQube? It’s a standalone and automated gatekeeper of my code quality and security that reduces dependency on peer reviews to discover a critical bug. It helps me catch those sneaky bugs and code smells thus preventing poor code from moving to production. Review collected by and hosted on G2.com. What do you dislike about SonarQube? We’ve observed little bit of false positive fatigue that kicks in sometimes owing to perfectly written code being flagged as a bug thus causing team to spend lots of time arguing with the tool, and eventually commenting few things out. CPU utilisation is typically seen to be high when CI/CD pipeline is undergoing Sonarqube checks. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Sonarqube helps me solve the messiness and the friction that typically occurs when my team of 10+ engineers are all writing the code together. A common quality gate of 95+ ensure my team’s only delivering the best of code in production. Review collected by and hosted on G2.com. Show More 7/7/2026 Validated ReviewerSource: G2 invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") UC Verified User in Computer Software Mid-Market (51-1000 emp.) 6/23/2026 "SonarQube: Actionable Code Quality Insights That Fit Seamlessly into CI/CD" 4/5 What do you like best about SonarQube? "I like SonarQube because it integrates well into CI/CD pipelines and provides actionable insights on code quality. It helps catch issues early, improves maintainability of automation scripts, and ensures consistent coding practices across the team." Review collected by and hosted on G2.com. What do you dislike about SonarQube? "For automation projects, some rules may not always align perfectly with test code patterns, so customization is often needed to avoid noise and focus on meaningful quality issues." Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? "SonarQube helps solve problems related to code quality, maintainability, security vulnerabilities, and technical debt by identifying issues early in the development lifecycle. It catches bugs, code smells, duplicate code, and potential security risks before they move to production. This benefits me by improving the reliability and readability of automation code, reducing rework, and helping maintain consistent coding standards across the team. It also supports faster reviews and better confidence during releases." Review collected by and hosted on G2.com. Show More 6/26/2026 Current UserValidated ReviewerIncentivizedSource: G2 invite ![Atharva P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Atharva P.") AP Atharva P. Cloud BI Engineer Enterprise (\> 1000 emp.) 5/14/2026 "Centralized Code Quality Mastery with SonarQube" 4/5 What do you like best about SonarQube? I really like SonarQube for its ability to continuously analyze code quality, security issues, and technical data in a centralized way. The dashboards and code quality metrics are fantastic, making it easier to identify issues early during development. The quality gates are great for preventing poor quality code from deployment. I also find the security vulnerability detection feature very important as it significantly improves application security. The technical debt tracking feature helps us maintain visibility and manage maintainability. The CICD integration and detailed dashboards enhance automated quality enforcement and make code quality monitoring easier. Review collected by and hosted on G2.com. What do you dislike about SonarQube? Initial configuration rule customization can take some time, especially for large projects with multiple repositories. Some scans can also become slower for very large code bases. Also, the vulnerability insights are good, but the examples mentioned in the vulnerability details are very generic. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? I use SonarQube to improve code quality by identifying bugs, vulnerabilities, code smells, and duplication before deployment. It reduces production issues and enforces code quality gates in CICD workflows, enhancing our overall development standards. Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise. G2 IconValidated ReviewerIncentivizedSource: G2 invite ![Om Dhar G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Om Dhar G.") OG Om Dhar G. Senior System Engineer Mid-Market (51-1000 emp.) 5/11/2026 "Robust Code Quality and Security, Needs Smoother Setup" 4.5/5 What do you like best about SonarQube? I like SonarQube for its real-time code analysis, detailed issue reporting, and security vulnerability detection. The easy integration with CI/CD pipelines like Jenkins and GitHub Actions is particularly beneficial. It helps us catch issues early in development, reduce production bugs, improve code maintainability, and save review time. The CI/CD integration automates quality checks, which boosts deployment confidence and team productivity. We switched to SonarQube because it provided better code quality analysis, stronger security checks, and smoother CI/CD integration than our previous tools. Overall, I would rate SonarQube around 8/10 because of its strong code quality analysis, security features, and CI/CD integration capabilities. Review collected by and hosted on G2.com. What do you dislike about SonarQube? Some areas where SonarQube could improve are occasional false positives, high resource usage for large projects, and a slightly complex setup and configuration process for beginners. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? I use SonarQube to analyze code quality, detect bugs and security vulnerabilities, and maintain coding standards. It helps us catch issues early, reduce production bugs, improve code maintainability, and save review time. The CI/CD integration automates checks, increasing deployment confidence and team productivity. Review collected by and hosted on G2.com. Show More 5/14/2026 Validated ReviewerIncentivizedSource: G2 invite ## Questions about SonarQube? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about SonarQube ](https://www.g2.com/products/sonarqube/discussions/new) GU Guest User What is SonarLint used for? 0 Upvotes 0 [ Join the conversation ](https://www.g2.com/discussions/what-is-sonarlint-used-for) [ View all Discussions ](https://www.g2.com/products/sonarqube/discuss) ## Pricing Options Pricing provided by SonarQube. ### Free Free ### Team Starting at $34.00 Per Month ### Enterprise Contact Us Per Year [ View More Pricing Information ](https://www.g2.com/products/sonarqube/pricing) SonarQube Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_0ed7381e20c0334f74a7e4920d6de717/resharper.png "Product Avatar Image") ReSharper 4.5/5(84) [ Compare Now ](https://www.g2.com/compare/resharper-vs-sonarqube) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_9c1730ad68b323f13e6809169d249245/checkmarx%282%29.png "Product Avatar Image") Checkmarx 4.2/5(48) [ Compare Now ](https://www.g2.com/compare/checkmarx-vs-sonarqube) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1690e90d3b34e5682247349555a8ab59/opentext-core-application-security.jpeg "Product Avatar Image") OpenText Core Application... 4.1/5(34) [ Compare Now ](https://www.g2.com/compare/opentext-core-application-security-vs-sonarqube) ##### ##### SonarQube Features Administration API / Integrations Analysis Real-Time Analytics Static Code Analysis Code Analysis Testing False Positives Management Testing Integration [ View More Features ](https://www.g2.com/products/sonarqube/features) ## Top-Rated Alternatives [ ![GitHub](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitHub") GitHub 4.7/5(2,402) ](https://www.g2.com/products/github/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(902) ](https://www.g2.com/products/gitlab/reviews) [ ![Veracode Application Security Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Veracode Application Security Platform") Veracode Application Security Platform 3.8/5(26) ](https://www.g2.com/products/veracode-application-security-platform/reviews) [ View All Alternatives ](https://www.g2.com/products/sonarqube/competitors/alternatives) ##### Categories on G2 [Bug Tracking](https://www.g2.com/categories/bug-tracking)[AI Governance Tools](https://www.g2.com/categories/ai-governance-tools)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis) [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Software Development Analytics Tools](https://www.g2.com/categories/software-development-analytics-tools)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Application Security Posture Management (ASPM)](https://www.g2.com/categories/application-security-posture-management-aspm)[Software Bill of Materials (SBOM)](https://www.g2.com/categories/software-bill-of-materials-sbom) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Best tools for integrating client portals into websites](https://www.g2.com/discussions/what-are-the-best-tools-for-integrating-client-portals-on-websites)[Most recommended marketing analytics app](https://www.g2.com/discussions/most-recommended-marketing-analytics-app)[Which sales onboarding app is rated highest](https://www.g2.com/discussions/which-sales-onboarding-app-is-rated-highest) [Best tools for multi-environment deployment automation](https://www.g2.com/discussions/best-tools-for-multi-environment-deployment-automation)[Which tool is best for location-based market expansion planning?](https://www.g2.com/discussions/which-tool-is-best-for-location-based-market-expansion-planning)[Pros and Cons Details](https://www.g2.com/products/sonarqube/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)