sonar logo
Products

SonarQube Cloud

Cloud-based static analysis tool for your CI/CD workflows

SonarQube Server

Self-managed static analysis tool for continuous codebase inspection

SonarQube for IDE

Free IDE extension that provides on-the-fly analysis and coding guidance

SonarQube Advanced Security

Secure use of open source code with advanced SAST and SCA

GitarNew

AI code review that fixes issues and commits until your build passes

Sonar VortexNew

Context before the agent writes. Verification as it writes.

SonarQube Remediation Agent

Fix code issues at scale, on demand.

SonarQube Hunter AgentNew

The AI security agent that hunts logic flaws

MCP Server / SonarQube CLI

Bring code quality and security into your AI and agentic workflows

SonarSweepEarly access

Improve code produced by LLMs

Products

SonarQube Cloud

Cloud-based static analysis tool for your CI/CD workflows

SonarQube Server

Self-managed static analysis tool for continuous codebase inspection

SonarQube for IDE

Free IDE extension that provides on-the-fly analysis and coding guidance

SonarQube Advanced Security

Secure use of open source code with advanced SAST and SCA

GitarNew

AI code review that fixes issues and commits until your build passes

Sonar VortexNew

Context before the agent writes. Verification as it writes.

SonarQube Remediation Agent

Fix code issues at scale, on demand.

SonarQube Hunter AgentNew

The AI security agent that hunts logic flaws

MCP Server / SonarQube CLI

Bring code quality and security into your AI and agentic workflows

SonarSweepEarly access

Improve code produced by LLMs

Use cases

AI code quality

Validate AI code for security and quality

Developer-led security

Secure apps and prevent vulnerabilities

Automated code review

Ensure secure, high-quality code

Platform engineering

Remove friction and boost productivity

Compliance & reporting

Automate proof of code compliance

SDLC governance

Align AI and developer standards

Secrets detection

Catch code secrets in development

Supply chain security

Secure your software supply chain

Token optimization

Make AI-assisted development economically effective

All use cases

Explore

Agent Centric Development Cycle (ACDC)

AI solutions

Architecture management

Security solutions

Code quality solutions

ROI calculator

LLM leaderboard

SonarQube vs GitHub Code Quality

Industries

Healthcare

Financial services

Retail

Federal government

Customer recognition

Our customers

Customer stories

Use cases

AI code quality

Validate AI code for security and quality

Developer-led security

Secure apps and prevent vulnerabilities

Automated code review

Ensure secure, high-quality code

Platform engineering

Remove friction and boost productivity

Compliance & reporting

Automate proof of code compliance

SDLC governance

Align AI and developer standards

Secrets detection

Catch code secrets in development

Supply chain security

Secure your software supply chain

Token optimization

Make AI-assisted development economically effective

All use cases

Explore

Agent Centric Development Cycle (ACDC)

AI solutions

Architecture management

Security solutions

Code quality solutions

ROI calculator

LLM leaderboard

SonarQube vs GitHub Code Quality

Industries

Healthcare

Financial services

Retail

Federal government

Customer recognition

Our customers

Customer stories

Pricing

For developers

Developer hub

Learning center

Commitment to open source

Community

Developer guides

Documentation

SonarQube Server

SonarQube Cloud

SonarQube for IDE

Sonar Vulnerability database

Integrations

GitHub

Bitbucket

Azure DevOps

GitLab

See all

40+ languages & frameworks

Java

JavaScript

Python

C#

See all

For developers

Developer hub

Learning center

Commitment to open source

Community

Developer guides

Documentation

SonarQube Server

SonarQube Cloud

SonarQube for IDE

Sonar Vulnerability database

Integrations

GitHub

Bitbucket

Azure DevOps

GitLab

See all

40+ languages & frameworks

Java

JavaScript

Python

C#

See all

Explore

Blog

ROI calculator

Solution briefs

White papers

Get started

Onboarding hub

Learning center

Interactive demos

Community

SonarQube update hub

Research

Developer Survey report

The State of Code

Coding Personalities of Leading LLMs

LLM leaderboard

Explore

Blog

ROI calculator

Solution briefs

White papers

Get started

Onboarding hub

Learning center

Interactive demos

Community

SonarQube update hub

Research

Developer Survey report

The State of Code

Coding Personalities of Leading LLMs

LLM leaderboard

Learn about Sonar

About Us

Our customers

Partners

Events hub

Newsroom

CareersJoin us!

Contact us

Learn about Sonar

About Us

Our customers

Partners

Events hub

Newsroom

CareersJoin us!

Contact us

Start for free
Products

SonarQube Cloud

Cloud-based static analysis tool for your CI/CD workflows

SonarQube Server

Self-managed static analysis tool for continuous codebase inspection

SonarQube for IDE

Free IDE extension that provides on-the-fly analysis and coding guidance

SonarQube Advanced Security

Secure use of open source code with advanced SAST and SCA

GitarNew

AI code review that fixes issues and commits until your build passes

Sonar VortexNew

Context before the agent writes. Verification as it writes.

SonarQube Remediation Agent

Fix code issues at scale, on demand.

SonarQube Hunter AgentNew

The AI security agent that hunts logic flaws

MCP Server / SonarQube CLI

Bring code quality and security into your AI and agentic workflows

SonarSweepEarly access

Improve code produced by LLMs

Products

SonarQube Cloud

Cloud-based static analysis tool for your CI/CD workflows

SonarQube Server

Self-managed static analysis tool for continuous codebase inspection

SonarQube for IDE

Free IDE extension that provides on-the-fly analysis and coding guidance

SonarQube Advanced Security

Secure use of open source code with advanced SAST and SCA

GitarNew

AI code review that fixes issues and commits until your build passes

Sonar VortexNew

Context before the agent writes. Verification as it writes.

SonarQube Remediation Agent

Fix code issues at scale, on demand.

SonarQube Hunter AgentNew

The AI security agent that hunts logic flaws

MCP Server / SonarQube CLI

Bring code quality and security into your AI and agentic workflows

SonarSweepEarly access

Improve code produced by LLMs

Use cases

AI code quality

Validate AI code for security and quality

Developer-led security

Secure apps and prevent vulnerabilities

Automated code review

Ensure secure, high-quality code

Platform engineering

Remove friction and boost productivity

Compliance & reporting

Automate proof of code compliance

SDLC governance

Align AI and developer standards

Secrets detection

Catch code secrets in development

Supply chain security

Secure your software supply chain

Token optimization

Make AI-assisted development economically effective

All use cases

Explore

Agent Centric Development Cycle (ACDC)

AI solutions

Architecture management

Security solutions

Code quality solutions

ROI calculator

LLM leaderboard

SonarQube vs GitHub Code Quality

Industries

Healthcare

Financial services

Retail

Federal government

Customer recognition

Our customers

Customer stories

Use cases

AI code quality

Validate AI code for security and quality

Developer-led security

Secure apps and prevent vulnerabilities

Automated code review

Ensure secure, high-quality code

Platform engineering

Remove friction and boost productivity

Compliance & reporting

Automate proof of code compliance

SDLC governance

Align AI and developer standards

Secrets detection

Catch code secrets in development

Supply chain security

Secure your software supply chain

Token optimization

Make AI-assisted development economically effective

All use cases

Explore

Agent Centric Development Cycle (ACDC)

AI solutions

Architecture management

Security solutions

Code quality solutions

ROI calculator

LLM leaderboard

SonarQube vs GitHub Code Quality

Industries

Healthcare

Financial services

Retail

Federal government

Customer recognition

Our customers

Customer stories

Pricing

For developers

Developer hub

Learning center

Commitment to open source

Community

Developer guides

Documentation

SonarQube Server

SonarQube Cloud

SonarQube for IDE

Sonar Vulnerability database

Integrations

GitHub

Bitbucket

Azure DevOps

GitLab

See all

40+ languages & frameworks

Java

JavaScript

Python

C#

See all

For developers

Developer hub

Learning center

Commitment to open source

Community

Developer guides

Documentation

SonarQube Server

SonarQube Cloud

SonarQube for IDE

Sonar Vulnerability database

Integrations

GitHub

Bitbucket

Azure DevOps

GitLab

See all

40+ languages & frameworks

Java

JavaScript

Python

C#

See all

Explore

Blog

ROI calculator

Solution briefs

White papers

Get started

Onboarding hub

Learning center

Interactive demos

Community

SonarQube update hub

Research

Developer Survey report

The State of Code

Coding Personalities of Leading LLMs

LLM leaderboard

Explore

Blog

ROI calculator

Solution briefs

White papers

Get started

Onboarding hub

Learning center

Interactive demos

Community

SonarQube update hub

Research

Developer Survey report

The State of Code

Coding Personalities of Leading LLMs

LLM leaderboard

Learn about Sonar

About Us

Our customers

Partners

Events hub

Newsroom

CareersJoin us!

Contact us

Learn about Sonar

About Us

Our customers

Partners

Events hub

Newsroom

CareersJoin us!

Contact us

Start for free

Last updated June 30, 2026

Frequently Asked Questions

The purpose of this FAQ is to answer common questions that customers ask about SonarSource agreements. This FAQ is for informational purposes only.

How do we provide legal notices to Sonar?

+

For general notices please email contact@sonarsource.com.

For claims of breach, infringement of IP, or termination for cause, please send physical notice to:

SonarSource
Capitol Tower, 206 E 9th St, Suite 1800
Austin, TX 78701

And a digital copy to legal@sonarsource.com.

Does the SonarSource Primary Customer Agreement apply if we have purchased through a reseller partner?

+

Yes, the SonarSource Primary Customer Agreement governs a customer's use of Sonar products even if they have purchased through a channel partner.

How can we be notified if Sonar updates its terms and policies?

+

Sonar will provide at least thirty days' advance notice of any material updates to its terms or policies. Notices will be published on Sonar's Legal Documentation page.

What are Support and Advisory Services?

+

Sonar provides support and premium support via an online helpdesk for customers who purchase or are otherwise eligible for support. This support does not involve on-site visits or remote access.

Sonar provides advisory services to help select SonarQube Server customers optimize their use of the product. Sonar does not provide hands-on-keyboard professional services or any customized software.

Why do Sonar agreements contain arbitration clauses?

+

Sonar products are provided via the Internet by our parent company, SonarSource SA, from Switzerland. For this reason, our agreement contains an expedited arbitration clause. Expedited arbitration allows for cost-efficient outcomes that are automatically recognized and enforceable in different countries, unlike national court judgments.

How can we sign a Data Processing Addendum (DPA) with Sonar?

+

The Sonar DPA supplements the SonarSource Primary Customer Agreement, so it does not need to be signed separately.

How does the Sonar DPA apply?

+

The DPA applies automatically when your organization accepts the SonarSource Primary Customer Agreement. The DPA covers SonarSource's processing of Customer Personal Data in connection with the Products and related Support, as further described in the DPA.

Why won't Sonar sign a customer's DPA?

+

The Sonar DPA is drafted to reflect how Sonar provides its products and related support to hundreds of thousands of customers worldwide. This scale requires that we maintain a uniform privacy and security program without operationalizing individual customers' specific requirements.

What is the scope of the Sonar DPA?

+

The Sonar DPA defines Sonar's legal obligations with respect to the processing of personal data. It covers customers worldwide.

What is Sonar's role under the DPA?

+

The Sonar DPA provides that Sonar will act as a Processor with respect to Customer Personal Data (as defined in the DPA), processing it solely on behalf of and in accordance with Customer's instructions.

Sonar's role as Controller for personal data it processes for its own purposes — such as account administration and billing — is addressed in the SonarSource Privacy Notice.

Who are Sonar's sub-processors?

+

Sonar's Trust Center contains a list of our Sub-processors.

What transfer mechanisms does Sonar use for international transfers of personal data?

+

Sonar offers Standard Contractual Clauses as the transfer mechanism to facilitate the transfer of personal data. Please see Schedule 2 of the DPA.

Go to SonarSource homepagesonar logo
  • Solutions

    • Code security
    • SAST
    • SCA
    • Secrets detection
    • Software supply chain security
    • Developer security
    • AI solutions
    • AI code quality
    • Code quality
    • Code review
    • Automated review
    • AI code review
    • Code coverage
    • Platform engineering
    • Code compliance
    • SDLC governance
    • For developers
    • For enterprise
    • IaC scanning
    • Architecture management
  • Products

    • SonarQube Cloud
    • SonarQube Server
    • SonarQube for IDE
    • Advanced Security
    • Gitar
    • MCP Server
    • SonarSweep

    Pricing

    • Start for free
    • Explore pricing
  • Company

    • About
    • Careers
    • Commitment to open source
    • Customers
    • Partners
    • Contact us
    • Accessibility
    • Brand identity

    Media

    • Coverage
    • Press releases
  • Resources

    • Product demos
    • Events hub
    • Customer stories
    • White papers
    • Developer guides
    • Onboarding hub
    • Community
    • Support
    • ROI calculator
    • Legal documentation

    Compare

    • SonarQube vs. GitHub Advanced Security
    • SonarQube vs. GitHub Code Quality
    • SonarQube vs. Semgrep
    • SonarQube vs. Veracode
    • SonarQube vs. Checkmarx
    • SonarQube vs. Snyk
    • SonarQube vs. Coverity
  • Knowledge

    • Blog
    • Languages
    • Learning center
    • SonarQube Server documentation
    • SonarQube Cloud documentation
    • SonarQube for IDE documentation
  • Follow SonarSource on Twitter
  • Follow SonarSource on Linkedin
  • Website Terms of Use
  • Privacy Notice
  • Cookie Policy
  • Trust center
  • UK Modern Slavery Act Statement
  • Unsubscribe

© 2026 SonarSource Sàrl. All rights reserved.