SonarQube Server
by SonarSourceVerified
SonarQube Server is a self-managed code quality & security platform for on-premises code quality and secure development lifecycle. See features and SAST alternatives.
- Product Type
- Self-Managed Code Quality & Security Platform
- Deployment
- Cloud / On-Premise
- Industries
- 6+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About SonarQube Server
SonarQube Server, formerly SonarQube Enterprise and other commercial editions, is Sonar's self-managed platform for continuous code quality and security inspection. Organizations install it on their own infrastructure or private cloud, which keeps source code and analysis results under their control.
Categories & Subcategories
Categories
Subcategories
Where SonarQube Server is ranked
Featured in 1 Cyber Rank ranking.
Key Features
7 capabilities that SonarQube Server offers.
Branch and pull request analysis
Quality gates
Taint analysis and SAST
Security reports (OWASP, CWE, PCI DSS, STIG)
Portfolio dashboards
High availability (Data Center Edition)
Use Cases
On-premises code quality
Secure development lifecycle
Portfolio code health
Regulated software development
Industries Served
SonarQube Server is used across 6+ industries.
Cross-industry
Financial Services
Automotive
Government
Software & Technology
Public Sector
Regions
Global
Integrations
Works with the tools teams already use
GitHub
GitLab
Bitbucket
Azure DevOps
Jenkins
LDAP
SAML identity providers
SonarQube for IDE
Deployment Options
Flexible deployment to meet your needs
CloudOn-Premise
Platform & Access
What SonarQube Server supports, at a glance.
- API accessYes
- Single sign-on (SSO)Yes
- Role-based access (RBAC)Yes
- Multi-tenantYes
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
Supports OWASP Top 10, CWE Top 25, PCI DSS, OWASP ASVS and STIG reporting
- Supported platforms
- WindowsLinuxDockerKubernetes
- Operating systems
- Windows ServerLinux
- Browser support
- ChromeEdgeFirefoxSafari
- Languages supported
- English
- Data residency
- Customer-controlled
- Deployment details
- Self-managed (on-premises or private cloud); Self-managed on Windows, Linux, Docker or Kubernetes
SonarQube Server Reviews
No reviews yet
Be the first to share your experience with SonarQube Server.
More Products from SonarSource
View all →SonarQube for IDE
SonarQube for IDE by SonarSource is an IDE code analysis extension. Key features include AI CodeFix. Compare deployment, integrations and top SAST alternatives.
SonarQube Cloud
Looking for Application Security software? SonarQube Cloud by SonarSource provides quality gates and taint analysis for secure coding. Compare features and alternatives.
SonarQube Advanced Security
SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products.
Product Resources
Explore More Products
Other cybersecurity products listed on Cyber Rank.
Checkmarx One
Free trial available. Checkmarx One by Checkmarx offers SAST, SCA, DAST, API security, IaC. Compare features, use cases and leading Application Security alternatives.
Application SecurityView details
Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.
Application SecurityView details
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.
DevSecOps & Software Supply ChainView details
Apiiro SAST
byApiiro
What does Apiiro SAST do? It covers context-aware static analysis and AST false-positive reduction. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details