SonarQube

Code quality and SAST platform with AI Code Assurance and AI CodeFix

About SonarQube

SonarQube is a code quality and security platform that scans 30+ languages for bugs, vulnerabilities, and code smells. AI Code Assurance detects AI-generated code and applies enhanced verification rules, while AI CodeFix uses GPT-5.1, GPT-4o, or a customer-supplied Azure OpenAI deployment to suggest fixes for eligible issues. SonarQube Server has a free Community Build, with Enterprise and Data Center editions for larger orgs.