--- title: "SonarQube Reviews, Pros and Cons - 2026 Software Advice" description: "Reviews of SonarQube. Learn how real users rate this software's ease-of-use, functionality, overall quality and customer support. Talk to our advisors to see if SonarQube is a good fit for you!" source_url: "https://www.softwareadvice.com/continuous-integration/sonarqube-profile/reviews/" page_type: "reviews" language: "en" --- 1 million+ businesses helped. Get advice Get Free Advice [Home](https://www.softwareadvice.com/) / [AI Governance Tools Software](https://www.softwareadvice.com/category/5373-ai-governance-tools/) / [SonarQube](https://www.softwareadvice.com/continuous-integration/sonarqube-profile/) / SonarQube Reviews Software Advice offers objective insights based on verified user reviews and independent product and market research. When our advisors match you to a software provider, we may earn a referral fee. [Overview](https://www.softwareadvice.com/continuous-integration/sonarqube-profile/) Reviews [Alternatives](https://www.softwareadvice.com/continuous-integration/sonarqube-profile/alternatives/) # SonarQube User Reviews ## Reviews summary - Overall rating: 4.5/5 - Total reviews: 78 ### Secondary ratings - Ease of use: 4.3/5 - Customer support: 4.0/5 - Value for money: 4.4/5 - Functionality: 4.4/5 ### Rating distribution - 5 stars: 44 reviews (56%) - 4 stars: 29 reviews (37%) - 3 stars: 4 reviews (5%) - 2 stars: 0 reviews (0%) - 1 star: 1 reviews (1%) ### Most mentioned pros - It also integrates well with source code management and CI/CD pipelines, which makes it easier to include code analysis as part of the normal development workflow. - The platform has a bit of a learning curve in the beginning, especially when configuring rules and understanding reports, but after some use it becomes much easier to manage. - Overall, SonarQube is very powerful tool to catch bugs and potential security issues in order to improve our code quality even though setting it up can be a little bit of challenges at the beginning. ### Most mentioned cons - Scans on bigger projects can also be a bit slow at times, which can affect development speed during heavy usage. - Sometimes it flags things that aren´t really problems and you end up wasting time researching for nothing - It's unbelievable that their system cannot be canceled and yet somehow it's my fault and I continue to get billed while their support team takes weeks to respond. ## SonarQube customer reviews Showing reviews 1-25 of 78 (page 1). ### SonarQube automates code quality gates in our deployment pipelines - Overall rating: 4/5 - Reviewer: Verified Reviewer - Industry: Computer Software - Company size: 11-50 employees - Product usage: 1-3 years · daily - Reviewed: November 2026 - Review source details: This review was submitted organically. No incentive was offered It provides great value for money by catching technical debt early. Initial setup takes effort, but their technical customer support is responsive when we need help troubleshooting runner configurations or IDE sync errors with SonarLint. #### Ratings breakdown - Ease of use: 3/5 - Value for money: 4/5 - Customer support: 4/5 - Functionality: 5/5 #### Pros The vulnerability detection is excellent. Integrating it directly into our source code management pipeline like GitLab keeps our collaboration high by instantly blocking bad pull requests before they hit the main branch. #### Cons The learning curve for configuring custom quality gates is steep. We often hit weird bugs and issues where the scanner crashes due to memory limits on large Java repos. --- ### The guardian I needed for my code - Overall rating: 3/5 - Reviewer: Philip J. - Industry: Computer Software - Company size: 11-50 employees - Product usage: less than 1 year · daily - Reviewed: June 2026 - Review source details: This review was submitted organically. No incentive was offered It´s fantastic, I´m calmer. I avoid unpleasant surprises and broken code in production. The investment is profitable #### Ratings breakdown - Ease of use: 4/5 - Value for money: 4/5 - Customer support: 4/5 - Functionality: 5/5 #### Pros Detects vulnerabilities and serious issues before they reach production. Blocks bad code and prevents broken things from hitting the streets. That´s reassuring #### Cons False positives are annoying. Sometimes it flags things that aren´t really problems and you end up wasting time researching for nothing --- ### Great tool for improving code quality - Overall rating: 4/5 - Reviewer: Verified Reviewer - Industry: Information Technology and Services - Company size: 501-1000 employees - Product usage: 3-5 years · daily - Reviewed: May 2026 - Review source details: This review was submitted organically. No incentive was offered #### Ratings breakdown - Ease of use: 4/5 - Functionality: 4/5 #### Pros What I liked most about SonarQube is how helpful it is for improving code quality and catching issues early in development. The vulnerability detection is one of its strongest features because it points out security risks, bugs, and code smells before they become bigger problems. It also integrates well with source code management and CI/CD pipelines, which makes it easier to include code analysis as part of the normal development workflow. That saves time and helps maintain cleaner code across projects. The platform has a bit of a learning curve in the beginning, especially when configuring rules and understanding reports, but after some use it becomes much easier to manage. The dashboard is detailed and gives a clear overview of code health. From a value for money perspective, it feels worth it for teams that care about code quality and security. It helps reduce issues before deployment, which can save a lot of time later. #### Cons One thing I liked least about SonarQube is that the initial setup can take time, especially when configuring quality rules and integrating it with existing workflows. It is not something that feels fully plug and play. Scans on bigger projects can also be a bit slow at times, which can affect development speed during heavy usage. Another small issue is that some warnings feel too strict or unnecessary, so developers still need to manually review results instead of trusting every suggestion directly. For new users, understanding all the settings and customization options can also take a while, so there is definitely a learning curve before getting the most out of the tool. --- ### Smooth experience for code reviewers - Overall rating: 4/5 - Reviewer: Verified Reviewer - Industry: Health, Wellness and Fitness - Company size: 11-50 employees - Product usage: 3-5 years · weekly - Reviewed: April 2026 - Review source details: This review was submitted organically. No incentive was offered Overall, it's made our team much more consistent and efficient.PRs are a smoother process because the code smells are already fixed. #### Ratings breakdown - Ease of use: 4/5 - Value for money: 4/5 - Customer support: 3/5 - Functionality: 4/5 #### Pros It makes our team consistent. For example, one of our devs was notorious for PRs with high cognitive complexity in their functions. Now, all we need to do in our azure pipelines is ensure that all sonarqube code smells are solved before they can merge their work to main. #### Cons Sometimes it can create a loop in code smells. For example, if there are many commands in a Dockerfile, it will ensure that commands are merged together (but not necessarily correctly), which causes the dev to break the commands apart again. And the loop goes on until it is silenced. --- ### Cybersecurity Analyst - Overall rating: 4/5 - Reviewed: November 2026 - Industry: Information Technology and Services - Company size: 51-200 employees The reviewer appreciates the ability to catch code quality issues and vulnerabilities early, which improves overall security. They noted that the licensing structure forces them to manage repositories actively to stay within limits, impacting their scanning capabilities. Full review available after login on Software Advice --- ### Développeur Full Stack - Overall rating: 5/5 - Reviewed: November 2026 - Industry: Sporting Goods - Company size: 10000+ employees Onboarding with SonarQube is straightforward due to its automated scanning profiles and clear documentation, making it easy for teams to adopt. While the web interface is detailed, managing custom Quality Gate rules across complex projects can be time-consuming. Full review available after login on Software Advice --- ### SonarCloud is a must have in your stack - Overall rating: 5/5 - Reviewer: Dimitri Alexander K. - Industry: Computer Software - Company size: 2-10 employees - Product usage: 3-5 years · weekly - Reviewed: August 2022 - Review source details: This review was submitted organically. No incentive was offered It's still a good tool that help the dev teams to increase their knowledge in a specific language, it's still gives good indicator, overall it's still a good companion #### Ratings breakdown - Ease of use: 5/5 - Customer support: 5/5 - Functionality: 5/5 #### Pros It's free, as a Self hosted instance with sonarqube, and it's free for open source project. I like the advice they give that my IDE doesn't #### Cons It's a bit using a lot of RAM as it is written in Java --- ### The best bugs exterminator - Overall rating: 5/5 - Reviewer: Verified Reviewer - Industry: Telecommunications - Company size: 10000+ employees - Product usage: 3-5 years · daily - Reviewed: May 2022 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. We can't live anymore without Sonarqube. When we started using it 5 years ago, the teams adoption was very fast. #### Ratings breakdown - Ease of use: 5/5 - Customer support: 5/5 - Functionality: 5/5 #### Pros Code review could be more focused on the new features implementation than trying to identify silly basic faults. #### Cons The Eclipse Sonarqube plugin was not easy to make it work in the same manner was it was setup in the CI/CD machines. --- ### Essential tool for professional code delivery - Overall rating: 5/5 - Reviewer: Verified Reviewer - Industry: Computer Software - Company size: 51-200 employees - Product usage: less than 1 year · daily - Reviewed: September 2022 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. SonarCloud improves software quality and developers' skills since it shows where the bugs and security hotspots are and how to correct them. #### Ratings breakdown - Ease of use: 5/5 - Value for money: 5/5 - Functionality: 5/5 #### Pros I use GitHub integration to run analysis on Pull Requests via GitHub workflows. Pull Request decoration is a great feature, it adds analysis results directly to GitHub PR's page. #### Cons SonarCloud reports also the code coverage by automated test, but it does not execute the report itself. You have to configure an external plugin (based on the nature of the project) that produces a report that SonarCloud can read and include in its dashboard and PR decoration. --- ### Best code scanning and monitoring tools - Overall rating: 5/5 - Reviewer: Verified Reviewer - Industry: Computer Software - Company size: 10000+ employees - Product usage: 1-3 years · daily - Reviewed: April 2022 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. Used sonarqube in multiple web development project where we used this tool and found very useful and checkpoints #### Ratings breakdown - Ease of use: 3/5 - Value for money: 5/5 - Customer support: 4/5 - Functionality: 5/5 #### Pros Reports it generates and grades on vulnerabilities and highlights the scanned code #### Cons Integration with Visual Studio. Net code was not simple and easier. --- ### Never use SonarQube - Overall rating: 1/5 - Reviewer: Zach R. - Industry: Computer & Network Security - Company size: 11-50 employees - Product usage: 1-3 years · monthly - Reviewed: February 2025 - Review source details: This review was submitted organically. No incentive was offered This service is a complete scam. Let's start with how it ended. I canceled my account, only to find out that it did not actually cancel. So I contacted support. It took them 2 months to resolve my request and they continued billing my card when the account was 100% not in use and I had no access to it. Now they refuse to refund my money. This is after they increased the cost of my plan by 3x without my approval (which is what prompted me to want to leave). In order to try to reduce my cost, our engineering team attempted to discsonnect some unused repos... nope, not possible. NEVER use this service. You absolutely cannot trust them. It's unbelievable that their system cannot be canceled and yet somehow it's my fault and I continue to get billed while their support team takes weeks to respond. #### Ratings breakdown - Ease of use: 1/5 - Value for money: 1/5 - Customer support: 1/5 - Functionality: 1/5 #### Pros There is nothing about this company that I would ever recommend. #### Cons Of all the terrible things about this service and company, it's their customer support that takes the cake! --- ### SonarCloud one of the cloud-based code quality and security analysis tools - Overall rating: 3/5 - Reviewer: Verified Reviewer - Industry: Computer Software - Company size: 2-10 employees - Product usage: 1-3 years · weekly - Reviewed: May 2023 - Review source details: This review was submitted organically. No incentive was offered #### Ratings breakdown - Ease of use: 4/5 - Value for money: 3/5 - Customer support: 3/5 - Functionality: 4/5 #### Pros SonarCloud has a strong focus on security and compliance, with features such as vulnerability detection, security hotspots, and compliance reporting. #### Cons A potential drawback is the complexity of SonarCloud. While SonarCloud's comprehensive feature set can be a strength, it can also make the platform more challenging to use and configure --- ### Improve code quality with sonarQube - Overall rating: 5/5 - Reviewer: Pinki K. - Industry: Computer Software - Company size: 51-200 employees - Product usage: 1-3 years · daily - Reviewed: December 2022 - Review source details: This review was submitted organically. No incentive was offered Its very good tool for scanning code and improving code quality by using this tool now we are able to improve code quality which reduces the review time and issues on production. #### Ratings breakdown - Ease of use: 5/5 - Value for money: 5/5 - Customer support: 5/5 - Functionality: 5/5 #### Pros Its very helpful tool for improving code quality and find vulnerabilities in code which reduces the security issue as well as reduce issue on production. It check duplicate code, logical bug and many more. #### Cons Custom role adding is difficult rest all good. --- ### Good tool, easy to setup, cloud means limited in customisation - Overall rating: 5/5 - Reviewer: Dono G. - Industry: Printing - Company size: 51-200 employees - Product usage: 1-3 years · daily - Reviewed: March 2022 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. Overall it was great #### Ratings breakdown - Ease of use: 5/5 - Value for money: 4/5 - Customer support: 3/5 - Functionality: 4/5 #### Pros Super easy to setup. Took literally minutes to do and then maybe another hour to tweak to fully operational. Gives community standard results very quickly. #### Cons The inability to add in some extra key scanners/rules is quite limiting. --- ### Simple and powerful tool to improve your delivery process - Overall rating: 4/5 - Reviewer: David Felipe C. - Industry: Information Technology and Services - Company size: 51-200 employees - Product usage: 3-5 years · monthly - Reviewed: October 2022 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. We have more than 45 repos, and we practice continuous delivery, Sonar help us reduce the overhead by automating some tasks that previously were executed by a developer. They gain more control over their time, without sacrificing code quality #### Ratings breakdown - Ease of use: 4/5 - Value for money: 4/5 - Functionality: 4/5 #### Pros Helps my team to reduce time on checking several controls that are very standard in our projects, like code coverage, code smells, complexity, and security. #### Cons I used to like one functionality they had on the open source version (Sonarqube) in which the software commented the code directly on GitHub, helping the developer to notice their mistakes; I haven´t been able to use it again.Sometimes the configuration and customization are not very straightforward, and developers spend a lot of time trying to tune the tools. --- ### One of the Best tools to incorporate Security into Pipeline - Overall rating: 5/5 - Reviewer: Mohammed F. - Industry: Information Technology and Services - Company size: 10000+ employees - Product usage: 1-3 years · daily - Reviewed: October 2021 - Review source details: This reviewer was invited by the software vendor to submit an honest review and offered a nominal incentive as a thank you. Sonar cube has been used for Static code analysis and Has been built to Jenkins Pipeline, It allowed to identify huge amount vulnerabilities and helped us to improve our code quality to a great instant. #### Ratings breakdown - Ease of use: 5/5 - Value for money: 5/5 - Customer support: 5/5 - Functionality: 5/5 #### Pros Great knowledgebase in understanding the bugs and vulnerabilities and fixing them. Highly informational dashboard and tools to filter huge amount of repos. #### Cons Customizing rules are difficult. Certain times they will catch comments and rule engine still needs tweaking #### Vendor response Thank you for your review & feedback, Mohammed! Replied October 2021 --- ### Code Quality for just about Anything - Overall rating: 4/5 - Reviewer: Verified Reviewer - Industry: Health, Wellness and Fitness - Company size: 1001-5000 employees - Product usage: 3-5 years · monthly - Reviewed: June 2022 - Review source details: This review was submitted organically. No incentive was offered We've seen a large increase in our code coverage and quality over the past two years of using SonarCloud. Some of our software had 0% coverage or less than 30% and a large majority of our code repositories have over 80% coverage now. #### Ratings breakdown - Ease of use: 4/5 - Value for money: 5/5 - Functionality: 5/5 #### Pros It tracks code quality over time. It does static analysis to look for duplicate code blocks, code smells, cyclomatic complexity, security issues, and more. It will also ingest code coverage reports to track test coverage over time. Integrates with GitHub (and other tools) so you can gate PR's based on the percent of code coverage and absence of flaws. We utilize it on mobile Xamarin projects, Kotlin projects, React web projects. It's a pretty mature product that has been around for a while. Its available in a free form, SonarQube, for you to test it out and run things locally. Static analysis helps ease the burden of code reviewers since it finds many common issues such as not null checking a parameter. It shoes metrics over time so you can see how your code base is improving over time. It basically automates code quality checking and metrics. #### Cons It can be a pain to set up your CI/CD pipeline to download and run all the necessary things to integrate with SonarCloud. It requires running some commands before you do a build and then some more after you do a build. SonarQube helps a lot with setting things up and testing your workflow locally though. --- ### SonarQube: Code Quality and Code Security - Overall rating: 5/5 - Reviewer: Prateek J. - Industry: Computer Software - Company size: 51-200 employees - Product usage: 1-3 years · weekly - Reviewed: July 2021 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. SonarQube is one of the best open-source tools I have used for SAST testing but I feel there are so many features that are still missing. #### Ratings breakdown - Ease of use: 4/5 - Functionality: 5/5 #### Pros 1. Provides a detailed review of the code 2. It highlights suspicious code snippets 3. Strong integration with popular CI pipelines #### Cons 1. Installation process should be smooth 2. Reporting is poor 3. Integration with IDE is not available #### Vendor response Thank you for your review, Prateek! Replied October 2021 --- ### A simple and easy way to integrate sonarcube code analysis solution - Overall rating: 4/5 - Reviewer: Verified Reviewer - Industry: Marketing and Advertising - Company size: 51-200 employees - Product usage: less than 1 year · monthly - Reviewed: November 2022 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. very good and super useful #### Ratings breakdown - Ease of use: 5/5 - Value for money: 5/5 - Customer support: 3/5 - Functionality: 4/5 #### Pros easiness and robustness of integration with cloud. #### Cons a bit costly in sonarcloud but when you compare management cost ,its okey --- ### Clean code the right way - Overall rating: 5/5 - Reviewer: Silas M. - Industry: Computer Software - Company size: 2-10 employees - Product usage: less than 1 year · weekly - Reviewed: September 2022 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. #### Ratings breakdown - Ease of use: 4/5 - Value for money: 4/5 - Customer support: 3/5 - Functionality: 4/5 #### Pros Code review automation, in addition to analyzing the code details that sometimes goes unnoticed, increases the degree of confidence and security of your code. #### Cons I find it a bit complicated to implement. --- ### Review for Sonar Qube - Overall rating: 5/5 - Reviewer: Verified Reviewer - Industry: Information Technology and Services - Company size: 201-500 employees - Product usage: less than 1 year · daily - Reviewed: April 2023 - Review source details: This review was submitted organically. No incentive was offered #### Ratings breakdown - Ease of use: 5/5 - Value for money: 5/5 - Customer support: 5/5 - Functionality: 5/5 #### Pros This is very good and user friendly application. #### Cons As such i didn't found any con for this application. --- ### Essential tool to guarantee quality and safety - Overall rating: 4/5 - Reviewer: Raul Antonio Z. - Industry: Music - Company size: 2-10 employees - Product usage: a free trial · weekly - Reviewed: July 2023 - Review source details: This review was submitted organically. No incentive was offered As a developer, it has been an invaluable tool in improving the quality and security of my code. It has helped me proactively identify and address issues, allowing me to run cleaner, less bug-prone software. #### Ratings breakdown - Ease of use: 4/5 - Value for money: 3/5 - Customer support: 5/5 - Functionality: 4/5 #### Pros I love its ability to provide a clear and concise view of code quality. #### Cons At first, I found it a bit overwhelming to understand all the available features and settings. Although the documentation and support help, I think there could be a better guide for new users. --- ### SonarQube is a very good tool - Overall rating: 4/5 - Reviewer: Verified Reviewer - Industry: Broadcast Media - Company size: 5001-10000 employees - Product usage: 3-5 years · monthly - Reviewed: September 2021 - Review source details: This reviewer was invited by the software vendor to submit an honest review and offered a nominal incentive as a thank you. #### Ratings breakdown - Ease of use: 5/5 - Functionality: 3/5 #### Pros I like how code duplication, smell code and cognitive complexity are detected #### Cons I wish that SonarQube would work on a multi module project, the way it works for a single module one. #### Vendor response Thank you for your review, Houssem! Replied October 2021 --- ### Un super outil pour améliorer la qualité de code et la maintenir - Overall rating: 5/5 - Reviewer: Verified Reviewer - Industry: Internet - Company size: Self-Employed - Product usage: 1-3 years · monthly - Reviewed: January 2024 - Review source details: This review was submitted organically. No incentive was offered J'ai utilisé SonarQube sur des repositories contenant des applications Angular, .NET et des scripts SQL. A chaque fois les recommandations étaient pertinentes et ont pu améliorer la qualité du code. #### Ratings breakdown - Ease of use: 4/5 - Value for money: 3/5 - Functionality: 5/5 #### Pros SonarQube est complet. Il permet l'analyse de nombreux langages de développement sur plusieurs projets. Il propose de base plusieurs jeux de règles de qualité à appliquer et permet d'en ajouter d'autre. Pour chaque règle un exemple est fourni et des explications assez claire. Certaines règles concernent la qualité du code, mais pas que. Certaines touchent à la sécurité et d'autres aux performances. L'intégration dans un process de build via des tâches ou des jobs est assez facile. #### Cons Le plus gros inconvénient de SonarQube est son coût qui peut s'avérer, selon les projets, un peu élevé. L'outil est néanmoins très facile à utiliser et à mettre en place. --- ### Staple in the CI/CD pipelined quality gate solutions - Overall rating: 4/5 - Reviewer: Verified Reviewer - Industry: Information Technology and Services - Company size: 10000+ employees - Product usage: less than 1 year · daily - Reviewed: December 2022 - Review source details: This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you. It allows our dev teams to keep consistent level of code quality and known issues proof in code and used target platforms so as to provide to end users/customers highest quality products delivered in CI/CD methodology. #### Ratings breakdown - Ease of use: 3/5 - Value for money: 2/5 - Customer support: 2/5 - Functionality: 3/5 #### Pros Easily add source code analysis for potential bugs and pitfalls to warrant against developers' errors or just not efficient coding by novices, projects dependencies on vulnerable platforms and potential long-term support issues due to how your code is structured. Simple deployment of binaries needed for scans for major target build environments OSes, plus easy to use APIs, all for the benefit of easy integration into CI/CD pipelines. #### Cons Caps and limits on key server instance component required when obtaining config for project and preset rules, when sending analysis results or getting quality gate results may make the pipelines seem to fail without easier discerning real reasons. ---