TL;DR overview
- Sonar has earned ISO 27001:2022 certification, the latest version of the international standard for information security management systems (ISMS), reaffirming its commitment to protecting customer data across all products.
- The 2022 update to the standard includes stronger requirements for cybersecurity threat intelligence, cloud security, and secure software development lifecycle controls compared to the prior ISO 27001:2013 version.
- This certification, combined with Sonar's SOC 2 Type II attestation, provides enterprise customers and prospects with audited assurance that Sonar applies mature, repeatable security controls across SonarQube Server, SonarQube Cloud, and SonarQube for IDE.
- Full compliance documentation is available from Sonar's Trust Center, and the SOC 2 Type II report is accessible under NDA via the Security Profile.
At Sonar, we believe that adhering to the highest quality and security standards shouldn't just be rooted in finding problems once they’ve already occurred, but should also be about preventing problems in the first place. Of course, this is at the core of our Code Quality mission, but it also extends to the way we operate our information security team internally. Our security team works diligently to make the prevention of cyber events and the reduction of risk a top priority. Most recently, this commitment has been demonstrated by our certification to the ISO27001:2022 standard.
As part of our continuously advancing and improving security practice, we are pleased to announce that Sonar and its products are now certified to the latest version of the ISO72001 standard. Version 2022 is designed to address the evolving information security and cybersecurity landscape and includes new controls for areas such as Threat Intelligence and Information security for the use of cloud services. Plus we are particularly pleased to see a stronger focus on Secure coding.
As the digital landscape continues to expand, so too do we have to expand the systems that we have set up to safeguard the data we collect, store, and manage, and increasingly so. Especially as the adoption of AI continues to increase in a number of ways, from content gen and synthesis, to chat and customer service, and more. Every industry is evolving, quickly, and more and more customers are moving through different channels that can possibly put sensitive information in harm's way. This is why our internal security team and overall company, which values quality and security, are excited to be certified with the ISO27001:2022 standard, giving our customers confidence in our security measures to protect and defend their data.
Certification ISO 27001:2022 doesn’t just recognize our ISMS efforts, it reflects our values — transparency and continuous improvement to support our community and make tomorrow's innovations possible. Completing the rigorous certification also reflects our proactivity to maintain security and prevent risk.
To meet your Vendor Management requirements, the latest certificates can be downloaded from our Trust Center.
