SonarCloud

0(0 reviews)

Software Status:Active

About SonarCloud

SonarCloud is a cloud-based code quality and security analysis platform from SonarSource that provides continuous inspection of code bases. It combines static code analysis, security vulnerabilities detection, and code coverage measurement so that developers can maintain high-quality code. SonarCloud supports multiple programming languages and integrates with various CI/CD tools for automated analysis, ensuring that code quality is monitored throughout the development lifecycle. With features like pull request analysis, technical debt tracking, and project management dashboards, teams can identify issues early and make informed decisions. Key capabilities: static code analysis security vulnerabilities detection code coverage measurement pull request analysis technical debt tracking Best for: software development teams that need to ensure code quality and security in their projects.

SonarCloud Details

Vendor

SonarSource

Year Launched

2008

Location

Route de Pré-Bois 1, Vernier, Geneva 1214, CH

Deployment

cloud

Training Options

documentation, videos

Countries Served

Switzerland

Languages

English, French, German, Spanish, Brazilian Portuguese, Japanese, Simplified Chinese, Korean

Users

Developers, Quality Assurance Engineers, Software Architects, DevOps Engineers, Project Managers

Industries Served

Healthcare, Education, Finance, Retail, Manufacturing, Technology, Government.

SonarCloud's In-App Market Place

Does SonarCloud have an in-app market place?

Yes

How many Mini-Apps in the marketplace?

Mini Apps

N.A

Pricing Options

Free trial

Free version

Request a quote

Promo Offer

Accepted Payment Currencies

USD ($), EUR (€), GBP (£), JPY (¥), AUD (A$), CAD (C$), CHF (Fr), CNY (¥), SEK (kr), NOK (kr), DKK (kr), INR (₹)

Pros & Cons

Combines bug detection and vulnerability scanning in one platform.
Covers many popular languages, frameworks, and IaC.
Seamlessly works with major CI/CD platforms for automated reviews.
Provides clear, precise results to focus on real issues.
Offers AI for code verification and fix suggestions.

Advanced features and support are locked behind paid plans.
While aiming for simplicity, setup and configuration for complex projects might require learning.
Requires an internet connection and data is processed externally.
Like any static analysis tool, some false positives might still occur.
Some potentially valuable features (e.g., AI CodeFix early access) are limited to specific tiers.