SonarQube Hunter Agent Supplemental Terms

Last Update August 27 2026

These Supplemental Terms (“Terms”) govern Customer’s access to and use of SonarQube Hunter Agent (“Hunter Agent”).

These Terms are incorporated into the Agreement between SonarSource and Customer. All capitalized terms used in the Terms but not otherwise defined have the meanings given to them in the Agreement.

Hunter Agent is an AI-powered security analysis Product that performs full-codebase analysis to identify logical vulnerabilities that are not detectable through standard static analysis.

Hunter Agent is an add-on Product, available as an add-on to SonarQube Server Enterprise Edition, SonarQube Server Data Center Edition, or SonarQube Cloud Enterprise Plan. It requires a current subscription to one of those underlying offerings.

1. Definitions

  1. “Agreement” means the SonarSource Primary Customer Agreement set forth at sonarsource.com/legal/primary-agreement/ or other agreement between Customer and SonarSource governing Customer’s use of Sonar Products.
  2. “Scan” means a single execution by Hunter Agent of an analysis run over a project that Customer designates for analysis, whether initiated manually, on a schedule, or automatically by an event in a nonparty platform Customer has connected under Section 9.3 (Nonparty Platform Integrations) of the Agreement.
  3. “Scan Unit” means the unit of usage by which Hunter Agent is metered, and is the Billable Unit for Hunter Agent. A Scan consumes a number of Scan Units determined by (a) the size band of the project scanned, measured in lines of code, and (b) the provider of the LLM Technologies used for that Scan. The number of Scan Units consumed per Scan for each combination of size band and provider is set forth in the Order.
  4. “Findings” means the vulnerability identifications, descriptions, severity assessments, locations, and supporting explanations that Hunter Agent generates from Input Data and Sonar Proprietary Logic and makes available to Customer for incorporation into Customer’s source code or development workflows. Findings are Suggestions, as defined in the AI Annex, and are not Alerts.
  5. “Measurement Period” has the meaning given in Section 7.1 of the AI Annex, as specified for Hunter Agent in the Order.

2. Grants and Conditions

  1. Software Grants. SonarSource grants Customer and its Affiliates a limited, non-exclusive, non-transferable, non-sublicensable (i) right to access and use the SaaS Components of Hunter Agent; and (ii) license to download, deploy, and use any Self-Managed Components of Hunter Agent.
  2. Conditions. The grant of rights in Section 2.1 is conditioned on Customer’s and its Affiliates’ continuous compliance with the Agreement, the AI Annex, these Terms, and the SonarSource Acceptable Use Policy set forth at sonarsource.com/legal/aup/, including continuous payment of fees for the underlying SonarQube subscription required for Hunter Agent, and use of Hunter Agent solely for Customer’s internal development purposes.
  3. Use of Findings. Customer shall not use Hunter Agent or the Findings to identify, develop, disclose, or exploit vulnerabilities in software or systems that Customer neither owns nor is authorized to test, and shall not run Scans against codebases for which it lacks authorization from the rights holder. Customer is responsible for handling Findings with the confidentiality appropriate to unremediated security vulnerabilities.

3. Sonar AI Software

  1. Sonar AI Software. Hunter Agent is Sonar AI Software, as defined in the AI Annex set forth at sonarsource.com/legal/ai/, and does not perform Automated Updates. Customer’s acknowledgements and responsibilities under Section 5 (Customer’s Acknowledgements and Responsibilities) of the AI Annex apply, including Customer’s responsibility to independently review, test, and evaluate Findings before relying on them.
  2. Disclaimer Regarding Findings. WITHOUT LIMITING SECTION 12.2 OF THE AGREEMENT: SONARSOURCE MAKES NO WARRANTIES OR REPRESENTATIONS REGARDING THE ACCURACY, RELIABILITY, OR COMPLETENESS OF FINDINGS. WITHOUT LIMITING THE FOREGOING, SONARSOURCE DOES NOT WARRANT OR REPRESENT THAT HUNTER AGENT WILL FIND, IDENTIFY, OR REPORT ALL VULNERABILITIES IN A SCANNED PROJECT, OR THAT A PROJECT SCANNED BY HUNTER AGENT IS SECURE OR FREE OF VULNERABILITIES. CUSTOMER IS SOLELY RESPONSIBLE FOR ITS USE OF AND RELIANCE ON FINDINGS.
  3. Nature of Findings. Customer acknowledges that, given the inherent characteristics and limitations of LLM Technologies, Findings may be incomplete, inaccurate, or non-reproducible between Scans, may report vulnerabilities that do not exist (“false positives”), and may fail to report vulnerabilities that do exist (“false negatives”). SonarSource is not liable for any false positive or false negative.
  4. No Sole Reliance. Hunter Agent is not a substitute for Customer’s own security program, penetration testing, or human security review. Customer agrees not to rely solely on Hunter Agent or the Findings in developing or operating its security strategy, and is solely responsible for assessing each Finding against its own circumstances, environment, and risk assessment, and for deciding whether and how to remediate.
  5. LLM Technology Provisioning. For purposes of Section 4 of the AI Annex, the LLM Technologies used by Hunter Agent may be provided by nonparties under contract to SonarSource, or by Customer, as specified in the Order. Section 4.1 of the AI Annex (Nonparty LLM Technologies) and Section 4.2 (Customer-provided LLM Technologies) apply accordingly.

4. Fees and Usage

  1. Metered Product. Hunter Agent is a usage-based Product for purposes of Section 7 of the AI Annex (Usage-Based Fees; Overages). The Billable Unit for Hunter Agent is a Scan Unit.
  2. Usage Allowance. The Usage Allowance of Scan Units per Measurement Period, the Measurement Period, and the price and bundling of Scan Units are specified in the Order. Unused Scan Units do not roll over to a subsequent Measurement Period.
  3. Consumption. SonarSource will make the Scan Unit balance available to Customer.
  4. Counting. A Scan consumes Scan Units when Hunter Agent completes the Scan and makes the resulting Findings available to Customer, whether or not any Finding is subsequently reviewed, acted on, or remediated by a User. A Scan that fails, or that SonarSource cancels, does not consume Scan Units. A Scan that Customer cancels after Hunter Agent has begun analysis consumes the Scan Units applicable to that Scan.
  5. Overage. If the Order specifies no Overage rate, SonarSource is not obligated to perform Scans beyond the Usage Allowance for the current Measurement Period, and additional capacity is available only by amending the Order or by Customer’s purchase of additional Scan Units through the Products.
  6. Included Allowance. Where SonarSource makes a no-cost allowance of Scan Units available to Customer, that allowance is subject to any separate limit on the number of Scans stated with it, expires at the end of the period for which it is provided, and is not refundable, creditable, or convertible into purchased Scan Units.

5. Term

  1. Term. These Terms will apply until the expiration or termination of the Agreement.
  2. Effect of Termination. Termination of these Terms will not affect any liability or obligations incurred by Customer (such as obligations related to Confidential Information), or licenses and waivers granted by Customer, prior to the effective date of such termination.

6. General

Except as supplemented or modified by these Terms, the Agreement remains in full force and effect.