Home / IT & software development / SonarQube
SonarSource Sarl (Switzerland - EU-equivalent)SonarQube
Leading Swiss platform for static code analysis, security scanning and code quality control. The Community edition is free and fully self-hosted. Used by 7 million developers worldwide.
Shared spot1of 24 professional tools with a GDPR profileOur summary of what the provider itself publishes about your data: whether the data is stored in the EU (2 points), whether there is a certification or GDPR guarantee (1) and whether the provider is based in the NL or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure in IT & software development
GDPR: Strong
- Provider based outside the EU
- Data in the EU according to the provider
- Publishes certification/GDPR safeguards
Pricefree up to 50,000 lines; Team from $34/monthSonarQube Cloud Free: free up to 50,000 lines of code; Team from $34/month (14 days trial); Enterprise on request; Server (self-hosted) on request; Community Build free (self-hosted)
Free trialYes
Based inSwitzerland - EU-equivalentOutside the EU
Last checked: 27 October 2026 · How we check
Is this your tool? Fill in missing detailsWhat it does
Static code analysis for many languagesQuality Gates in the CI/CD pipeline
SAST with taint analysis and secrets detectionInfrastructure as Code scanning
Detection of bugs, duplications and code smells
AI CodeFix for remediation suggestions
SonarQube for IDE with real-time feedback
Integration with GitHub, GitLab, Azure DevOpsSimilar in IT & software development
Crowdinfree plan
Figmafree (Starter)
Phrase Localization PlatformFreelancer $27/mo
JetBrains AI Assistantfree tier (limited credits)
Penpotfree (Professional)
Aikido SecurityDeveloper free (2 users, 1…SonarQube compared
Questions about SonarQube
- Which AI model does SonarQube use?
- SonarQube runs (partly) on Claude, ChatGPT. Static code analysis with its own rules; only AI CodeFix sends code to an external language model: Anthropic Claude or OpenAI GPT in SonarQube Cloud, OpenAI GPT or a proprietary Azure OpenAI model in SonarQube Server (according to the provider); agreements with the LLM providers prohibit training on your code (according to the provider); Community Build is fully self-hosted with no external data transfer; SonarQube Cloud has an EU region (AWS Frankfurt, backups in Ireland) and a US region (according to the provider); ISO 27001:2022 and SOC 2 Type II for all products (according to the provider); data processing agreement (DPA) part of the customer agreement (according to the provider); Swiss company.
- How much does SonarQube cost?
- SonarQube Cloud Free: free up to 50,000 lines of code; Team from $34/month (14 days trial); Enterprise on request; Server (self-hosted) on request; Community Build free (self-hosted). Check the current price on the provider's website; rates change often.
- Who is SonarQube for?
- SonarQube is aimed at IT & software development. It supports tasks such as generating, completing and debugging code with AI assistance, automatically reviewing pull requests and detecting security vulnerabilities, and automatically creating technical documentation and API specs.
- What should I watch out for with AI in IT & software development?
- Source code is trade secret and intellectual property. Check whether AI coding assistants store your code or use it for model training (an opt-out or business plan is required). Use on-premises or privacy-compliant variants for sensitive projects. AI-generated code sometimes contains security vulnerabilities or errors, so always have a developer review it, especially production code.
Every Friday: what changed in AI for IT & software development
New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.