Featured Post
Uncovering hidden security vulnerabilities with deeper SAST
Security vulnerabilities can be hidden in your third-party dependency code. Uncover them with deeper SAST.
Read more -->
Blog
Featured Post
Security vulnerabilities can be hidden in your third-party dependency code. Uncover them with deeper SAST.
Read more -->PHP analysis gets faster and better with new rules, fixed false-positives, and much more in SonarQube 9.9 LTS.
Read article >
Read about our key takeaways from the TROOPERS 2023 including our favorite talks and overall experience during the two days conference.
Read article >
Last week, our Vulnerability Researchers traveled to TyphoonCon 2023 in Seoul to present their talk "Patches, collisions and root shells: a Pwn2Own Adventure".
Read article >
We always assume prepared statements and ORMs are enough to protect us from SQL injection, but be careful not to misuse their APIs! Let's look into a real-world case and see what we can learn from it.
Read article >
Read about the new features of SonarQube 9.9 LTS which help JavaScript and TypeScript developers to write Clean Code.
Read article >
Smoother centralized access management with GitHub, multiple code variant analysis for C/C+, a big coverage boost in Java security, and more in the latest from SonarQube.
Read article >
The Sonar culture is the shared vision, mission, values, and behaviors that make up our day-to-day experience at Sonar. Our goal as an organization is that our culture will unite and motivate SonarSourcers to work and grow together and achieve company goals while creating meaningful benevolent relationships. Discover more about our Smarter Together core value in this blog post.
Read Blog post >
We take a look at our highlights from JSNation 2023 in Amsterdam, including our favourite talks, memorable conversations and key takeaways.
Read Blog post >
Just like it's not enough to simply practice karate for Mr. Miyagi, it's not enough for Sonar to find and fix issues when guiding developers to practice Clean Code. Developers should be able to find, understand, and fix issues to write Clean Code optimally.
Read blog post >
Explore the game-changing features of SonarQube 9.9 LTS, empowering Java developers to write Clean Code with enhanced speed and precision.
Read article >
Node.js released an experimental test runner in version 18 and made that test runner stable in version 20. What does that mean for us as JavaScript developers?
Read article >
Our Vulnerability Researchers are just returning from their trip to Berlin where they attended OffensiveCon 2023! Here's what they loved about the event.
Read blog post >