SonarSource
Sonar provides a platform that verifies code quality and security for developers.
- Based in
- Geneva, Switzerland
- Founded
- 2008
- Ownership
- Private
- Certifications
- ISO 27001, SOC 2 Type II
About SonarSource
SonarSource sells code verification and review tools. Its main product is SonarQube, a platform that checks code for quality and security issues. It also offers Gitar, an AI code review tool, and Sonar Vortex, which helps AI coding agents. The company serves software development teams, from open source projects and startups to large enterprises. It says over seven million developers use its tools and that seventy five percent of the Fortune 100 are customers. SonarQube is available as a cloud service, a self managed server, and an IDE extension. The company also provides add ons such as Advanced Security for dependency checks and AI CodeFix for automated fixes. SonarSource describes its approach as independent and multi layered verification. It aims to give consistent, explainable and auditable results. The tools integrate with CI CD pipelines and popular development platforms. SonarSource also offers agents that find security flaws and fix technical debt.
Products
- SonarQubeA platform for static code analysis that checks quality and security across many languages.
- SonarQube CloudA SaaS version of SonarQube for cloud based CI CD workflows.
- SonarQube ServerA self managed version of SonarQube for teams that need full control.
- SonarQube for IDEAn IDE extension that gives real time feedback on code as it is written.
- SonarQube Advanced SecurityAn add on that assesses software supply chain and dependencies for security risks.
- GitarAn AI code review tool that reviews pull requests, diagnoses CI failures, and applies fixes.
Ownership and deals
- Raised $412mInvestors Advent International and General CatalystReport on the SonarSource funding round of April 2022 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.