Introduction to SonarQube Hunter Agent

Overview

In this course, you'll learn how SonarQube Hunter Agent detects intent-based security flaws that traditional static analysis can't catch, and how its findings fit into your existing SonarQube workflow.

Learning objectives

After completing this course, you’ll be able to:

• Distinguish the Hunter Agent’s deeper intent-based project verification from SonarQube’s static analysis.
• Identify the types of vulnerabilities that Hunter Agent detects.
• Explain the way Hunter Agent handles issue management, including the Hunter Agent page.

Key topics

• SonarQube Hunter Agent
• Intent-based vulnerability detection
• Broken access control
• Business-logic and authentication flaws

Target audience

• Administrators
• Analysts
• Developers
• DevOps engineers
• Engineering leaders

Prerequisites

• SonarQube Cloud
• Authentication with your SonarQube organization
• SonarQube project key