SonarSource

SonarSource develops Sonar, a code verification platform that analyzes code written by developers, AI-generated code, and code leveraged from third parties such as open source libraries. Its core offering, SonarQube, is described as a zero trust code verification platform providing multi-layered review of all code. The company states its platform is trusted by over 7 million developers and 75% of the Fortune 100.

SonarSource develops Sonar, a code verification platform. Sonar analyzes code written by developers, AI-generated code, and code leveraged from third parties like open source libraries, with the goal of catching issues before they reach production and helping developers reduce technical debt and code complexity over time. The company's core offering, SonarQube, is described as the verification platform relied on by over 7 million developers. SonarSource states it is committed to an open core principle and to transparency, security, and continuous improvement of its open source solution.

The trust layer for the AI coding era; a zero trust code verification platform.

• SonarQube

  The most comprehensive and accurate zero trust code verification platform, providing multi-layered review of all code.

• SonarQube Advanced Security

  Add-on for SonarQube providing precise, efficient software supply chain and dependency assessment (SCA).

• Gitar

  AI code review tool that commits fixes, diagnoses CI failures, and iterates until the pipeline is green and the PR is ready to merge.

• 2020.05.14

  Reported2020.05.14

  SonarSource acquires RIPS Technologies[5]SonarSource收购RIPS Technologiessecurityweek.com

  SonarSource acquired RIPS Technologies. Following the acquisition, the teams planned to work together on developing Static Application Security Testing products.

• 2020.05.13

  Reported2020.05.13

  SonarSource announced its acquisition of RIPS Technologies[6]SonarSource 宣布收购 RIPS Technologiesprnewswire.com

  SonarSource announced the acquisition of German startup RIPS Technologies. The companies said their teams would combine to build static application security testing products, and RIPS employees would join SonarSource teams.

Read more

1. 1Sonar AI Code Verification Platform | SonarSource | Sonarsonarsource.com
2. 2About - Sonar and SonarSource | Sonarsonarsource.com
3. 3Agentic AI Code Review Tool: Gitar Native Reasoning | Sonarsonarsource.com
4. 4Careers | Sonarsonarsource.com
5. 5SonarSource收购RIPS Technologiessecurityweek.com
6. 6SonarSource 宣布收购 RIPS Technologiesprnewswire.com