Audience

Developers searching for a software solution designed to eliminate bugs and vulnerabilities

About SonarQube Cloud

Maximize your throughput and only release clean code SonarQube Cloud (formerly SonarCloud) automatically analyzes branches and decorates pull requests. Catch tricky bugs to prevent undefined behavior from impacting end-users. Fix vulnerabilities that compromise your app, and learn AppSec along the way with Security Hotspots. With just a few clicks you're up and running right where your code lives. Immediate access to the latest features and enhancements. Project dashboards keep teams and stakeholders informed on code quality and releasability. Display project badges and show your communities you're all about awesome. Code Quality and Code Security is a concern for your entire stack, from front-end to back-end. That’s why we cover 24 languages including Python, Java, C++, and many others. Transparency makes sense and that's why the trend is growing. Come join the fun, it's entirely free for open-source projects!

Other Popular Alternatives & Related Software
Mend.io
Mend.io
(1 Rating)
Mend.io offers the first AI native application security platform, empowering organizations to build and run a proactive AppSec program tuned for AI powered development. The unified platform secures AI generated code and embedded AI components, drives risk reduction through AI powered remediation, automates compliance, and provides a holistic enterprise scale view of risks and clear actions for developers across your entire codebase.
Learn more
GitLab
GitLab
(14 Ratings)
GitLab is a complete DevOps platform. With GitLab, you get a complete CI/CD toolchain out-of-the-box. One interface. One conversation. One permission model. GitLab is a complete DevOps platform, delivered as a single application, fundamentally changing the way Development, Security, and Ops teams collaborate. GitLab helps teams accelerate software delivery from weeks to minutes, reduce development costs, and reduce the risk of application vulnerabilities while increasing developer productivity. Source code management enables coordination, sharing and collaboration across the entire software development team. Track and merge branches, audit changes and enable concurrent work, to accelerate software delivery. Review code, discuss changes, share knowledge, and identify defects in code among distributed teams via asynchronous review and commenting. Automate, track and report code reviews.
Learn more
Kiuwan Code Security
Kiuwan Code Security
(11 Ratings)
Kiuwan is an end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Governance and Code Quality, empowering your team to quickly identify and remediate vulnerabilities. Integrating into your CI/CD pipeline, Kiuwan enables early detection and remediation of security issues. Kiuwan supports strict compliance with industry standards including OWASP, CWE, MISRA, NIST, PCI DSS, and CERT, among others. ✅ Large language support: 30+ programming languages. ✅ Detailed action plans: Prioritize remediation with tailored action plans. ✅ Code Security: Seamless Static Application Security Testing (SAST) integration. ✅ Insights: On-demand or continuous scanning Software Composition Analysis (SCA) to help reduce third-party threats. ✅ One-click Software Bill of Materials (SBOM) generation Code Smarter. Secure Faster. Ship Sooner.
Learn more
ZeroPath
ZeroPath
(1 Rating)
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with advanced program analysis to find and automatically fix vulnerabilities. ZeroPath provides complete security coverage: 1. AI-powered SAST for business logic flaws & broken authentication 2. SCA with reachability analysis 3. Secrets detection and validation 4. Infrastructure as Code 5. Automated patch generation. any more... ZeroPath delivers 2x more real vulnerabilities with 75% fewer false positives. Our research team has been successful in finding vulns like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce. Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more

Pricing

Free Version:
Free Version available.

Integrations

See Integrations

Ratings/Reviews

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Company Information

SonarSource
Founded: 2008
Switzerland
www.sonarsource.com/products/sonarcloud/

Videos and Screen Captures

SonarQube Cloud Screenshot 1
SonarQube Cloud Screenshot 1
Other Useful Business Software
$300 Free Credits to Build on Google Cloud Icon
$300 Free Credits to Build on Google Cloud

New customers can spin up VMs, build with AI, and query data at no cost.

Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
Start Free

Product Details

Platforms Supported
Cloud
Training
Documentation
Support
Online

SonarQube Cloud Frequently Asked Questions

Q: What kinds of users and organization types does SonarQube Cloud work with?
Q: What languages does SonarQube Cloud support in their product?
Q: What kind of support options does SonarQube Cloud offer?
Q: What other applications or services does SonarQube Cloud integrate with?
Q: What type of training does SonarQube Cloud provide?

SonarQube Cloud Product Features

Enterprise Architecture

Application Portfolio Management Not Supported
Architecture Governance Not Supported
Capability Mapping Not Supported
Diagramming Not Supported
Idea Management Not Supported
Modeling & Simulation Not Supported
Project Management Not Supported
Risk Assessment Not Supported
Transformation Roadmapping Not Supported
Version Control Not Supported

Source Code Management

Change Management Not Supported
Build Automation Not Supported
Repository Management Not Supported
Access Controls/Permissions Not Supported
Continuous Integration Not Supported
Code Review Not Supported
Collaboration Not Supported
Version Control Not Supported
Bug Tracking Not Supported

Static Application Security Testing (SAST)

Application Security Not Supported
Dashboard Not Supported
Debugging Not Supported
Deployment Management Not Supported
IDE Not Supported
Multi-Language Scanning Not Supported
Real-Time Analytics Not Supported
Source Code Scanning Not Supported
Vulnerability Scanning Not Supported

Static Code Analysis

Multiple Programming Language Support Not Supported
Standard Security/Industry Libraries Not Supported
Code Standardization / Validation Not Supported
Analytics / Reporting Not Supported
Provides Recommendations Not Supported
Vulnerability Management Not Supported