SonarQube Advanced Security
by SonarSourceVerified
SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products.
- Product Type
- Software Composition Analysis & Advanced SAST
- Deployment
- Cloud
- Industries
- 5+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About SonarQube Advanced Security
SonarQube Advanced Security is an add-on for SonarQube Server and SonarQube Cloud Enterprise that extends Sonar's code quality platform with deeper application security testing. Launched in 2025, it brings first-party code and open source dependency risk into the same developer workflow, so teams do not need a separate security scanner for these checks.
Categories & Subcategories
Categories
Subcategories
Key Features
7 capabilities that SonarQube Advanced Security offers.
Vulnerable and malicious package detection
License compliance
SBOM generation
Advanced SAST with third-party data flow
Secrets detection
Pull request and quality gate enforcement
Use Cases
Open source dependency risk
Supply chain security
Deep code vulnerability detection
SBOM reporting
Industries Served
SonarQube Advanced Security is used across 5+ industries.
Cross-industry
Software & Technology
Financial Services
Healthcare
Public Sector
Regions
Global
Integrations
Works with the tools teams already use
GitHub
GitLab
Azure DevOps
Bitbucket
Jenkins
SonarQube for IDE
Deployment Options
Flexible deployment to meet your needs
Cloud
Platform & Access
What SonarQube Advanced Security supports, at a glance.
- API accessYes
- Single sign-on (SSO)Yes
- Role-based access (RBAC)Yes
- Multi-tenantYes
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
Supports OWASP Top 10, CWE Top 25, SBOM (CycloneDX and SPDX) and secure development requirements
- Supported platforms
- WindowsLinuxmacOSDockerKubernetes
- Operating systems
- WindowsLinuxmacOS
- Browser support
- ChromeEdgeFirefoxSafari
- Languages supported
- English
- Data residency
- Customer-controlled (Server); EU or US region (Cloud)
- Deployment details
- Self-managed (SonarQube Server); Cloud (SonarQube Cloud); Add-on for SonarQube Server Enterprise and SonarQube Cloud Enterprise
SonarQube Advanced Security Reviews
No reviews yet
Be the first to share your experience with SonarQube Advanced Security.
More Products from SonarSource
View all →SonarQube for IDE
SonarQube for IDE by SonarSource is an IDE code analysis extension. Key features include AI CodeFix. Compare deployment, integrations and top SAST alternatives.
SonarQube Server
SonarQube Server is a self-managed code quality & security platform for on-premises code quality and secure development lifecycle. See features and SAST alternatives.
SonarQube Cloud
Looking for Application Security software? SonarQube Cloud by SonarSource provides quality gates and taint analysis for secure coding. Compare features and alternatives.
Product Resources
Explore More Products
Other cybersecurity products listed on Cyber Rank.
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.
DevSecOps & Software Supply ChainView details
Checkmarx One
Free trial available. Checkmarx One by Checkmarx offers SAST, SCA, DAST, API security, IaC. Compare features, use cases and leading Application Security alternatives.
Application SecurityView details
Mend.io Platform
byMend
Mend.io Platform covers unified application & supply chain security and SAST, SCA, secrets, container for DevSecOps. Compare top Application Security tools.
Application SecurityView details
Veracode Platform
byVeracode
What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details