SonarQube

By Sonar ยท Code review

About SonarQube

Code quality and security analysis for many languages, with AI-suggested fixes for issues it finds, in the cloud or self-managed.

SonarQube analyzes source code for bugs, code smells, security issues and test coverage across dozens of languages. It runs in your CI pipeline, reports on each pull request, and can block merges that fail a quality gate you define. It comes as a cloud service and as a server you run yourself, including a free community build.

Its AI features include suggested fixes for issues it detects and checks aimed at AI-generated code, so teams using coding assistants can hold that code to the same standard as the rest. The SonarQube IDE extension shows the same findings while you type.

Rules need tuning to your codebase, or the noise drowns the real findings. Agree on a quality gate before switching on merge blocking.

Details

  • Free plan or free version

    Yes

  • Can run on your own servers or machine

    Yes

  • Works in VS Code

    Yes

  • Works in JetBrains IDEs

    Yes

Not enough info yet on open source. Check the tool's own site.

Listing written by CodeBan, checked 2026-11-03. Report a correction or request removal. Back to code review.

More tools in code review

CodeRabbit

AI code reviewer that comments line by line on pull requests in GitHub, GitLab and other platforms and summarizes the changes.

  • Free plan or free version

Qodo

AI code review and test generation in the IDE and on pull requests, previously known as CodiumAI.

  • Free plan or free version
  • Works in VS Code
  • Works in JetBrains IDEs

Greptile

AI code reviewer that indexes your whole codebase so its pull request comments take related code into account.

Sourcery

AI code reviewer for pull requests and the IDE that flags bugs and suggests clearer code.

  • Free plan or free version
  • Works in VS Code

DeepSource

Static analysis platform that reviews pull requests for bugs and security issues and suggests automatic fixes.

  • Free plan or free version

Codacy

Code quality and security platform that checks pull requests and IDE code, including code written with AI assistants.

  • Free plan or free version