Sonar's latest blog posts
Welcoming Gitar to Sonar
Sonar has acquired Gitar, adding a new, critical layer to its multilayer, zero-trust code verification platform. Gitar is an AI code review solution, and it doesn’t just flag issues; it also generates the fix, validates it against the CI, and commits to the branch.
Category
More than just data: The hidden security risks in Jupyter notebooks
Are your data science tools safe? Sonar researchers uncover vulnerabilities leading to code execution in JupyterLab Desktop and PyCharm.
Read article >
SonarQube plugins bring trusted verification
Eliminate verification debt with plugins & how to secure AI coding agents across Claude, Copilot, and Cursor using SonarQube. Reduce code outages by up to 44%.
Read article >
Introducing Sonar Vortex and the SonarQube Remediation Agent
Sonar Vortex guides and verifies AI agent output in real time. SonarQube Remediation Agent is now GA. 92% fewer issues. Up to 36% lower token costs.
Read article >
Cut your coding agent's cost with Sonar Vortex
New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more efficiently.
Read article >
Model-agnostic AI is key to business continuity as models keep changing
In a fast-moving AI market, model-agnosticism is discussed as a technical preference. It sounds like an architecture choice: avoid vendor lock-in, keep interfaces flexible, support multiple providers, route tasks based on cost, latency, or capability.
Read article >
Now available: SonarQube plugin for Cursor
Learn how the SonarQube plugin for Cursor brings code quality coverage insights and security checks directly into agent workflows.
Read article >
Get new blogs delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.