Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

SonarQube helps improve software quality by identifying bugs, vulnerabilities, and code smells, resulting in better code and fewer issues.
The tool integrates seamlessly into continuous integration pipelines and supports multiple languages for comprehensive code analysis.
The customizable Quality Gate feature allows teams to benchmark coding standards and ensure code quality is maintained.
SonarQube's security-focused features, including vulnerability detection and security hotspot identification, enhance code security.
Developers benefit from SonarQube's static code analysis capabilities, helping them grow technically and produce high-quality, secure code.

CONS

SonarQube lacks support for additional languages and ease of use in adding new rules.
Issues with false positives and insufficient security scanning capabilities are reported frequently.
Numerous users suggest improvements to the current support model and documentation updates.
Installation and initial setup of SonarQube can be complex, requiring significant effort and technical knowledge.
There is a need for better integration with third-party platforms and enhanced scalability.
 

SonarQube Pros review quotes

it_user344817 - PeerSpot reviewer
Service Line Leader at a tech services company with 10,001+ employees
Aug 25, 2017
It's enabled us to improve software quality and help us to disseminate best practices.
it_user697038 - PeerSpot reviewer
DevOps at a tech company with 10,001+ employees
Jul 6, 2017
We can create a Quality Gate in order to fail Jenkins jobs where the code coverage is lower than the set percentage.
it_user697050 - PeerSpot reviewer
SW Automation Team Leader at a tech services company with 201-500 employees
Jul 5, 2017
SonarQube: Recording of issues over a period of time, with an indication of the addition in the new issues or the reduction of existing issues (which were fixed).
Learn what your peers think about SonarQube. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,422 professionals have used our research since 2012.
it_user697056 - PeerSpot reviewer
Senior Software Developer at a tech vendor
Jul 5, 2017
Issue Explanations: Documentation with detailed samples. Helps in growing technical knowledge and re-writing logic to conforming solutions.
it_user700128 - PeerSpot reviewer
Director at a consultancy with 10,001+ employees
Jul 10, 2017
The customizable dashboard and ability to include results and coverage from unit test and other static analysis code tools.
it_user718230 - PeerSpot reviewer
Devops Engineer at a healthcare company with 10,001+ employees
Aug 13, 2017
I follow Quality Gate's graduation model within organization, and it is extremely helpful for me to benchmark products.
it_user727500 - PeerSpot reviewer
Senior Java Developer at a financial services firm
Aug 29, 2017
Code Convention: Using the tool to implement some sort of coding convention is really useful and ensures that the code is consistent no matter how many contributors.
JI
Automation Tool Specialist at a comms service provider with 1,001-5,000 employees
Jul 30, 2018
It is very good at identifying technical debt.
SM
Manager at Dassault Systèmes
May 6, 2019
This has improved our organization because it has helped to find Security Vulnerabilities.
DH
Technical Architect at Dwr Cymru Welsh Water
May 9, 2019
The most valuable features are the wide array of languages, multiple languages per project, the breakdown of bugs, and the description of vulnerabilities and code smells (best practices).
 

SonarQube Cons review quotes

it_user344817 - PeerSpot reviewer
Service Line Leader at a tech services company with 10,001+ employees
Aug 25, 2017
A better design of the interface and add some new rules.
it_user697038 - PeerSpot reviewer
DevOps at a tech company with 10,001+ employees
Jul 6, 2017
We had some issues where the Quality Gate check sometimes gets stuck and it is unclear.
it_user697050 - PeerSpot reviewer
SW Automation Team Leader at a tech services company with 201-500 employees
Jul 5, 2017
There is need for support for the additional languages and ease of use in adding new rules for detecting issues.
Learn what your peers think about SonarQube. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,422 professionals have used our research since 2012.
it_user697056 - PeerSpot reviewer
Senior Software Developer at a tech vendor
Jul 5, 2017
It requires advanced heuristics to recognize more complex constructs that could be disregarded as issues.
it_user700128 - PeerSpot reviewer
Director at a consultancy with 10,001+ employees
Jul 10, 2017
Ease of use/interface.
it_user718230 - PeerSpot reviewer
Devops Engineer at a healthcare company with 10,001+ employees
Aug 13, 2017
When we have a thousand products published over it, we expect it to be more efficient in terms of serving requests from the browser.
it_user727500 - PeerSpot reviewer
Senior Java Developer at a financial services firm
Aug 29, 2017
An improvement is with false positives. Sometimes the tool can say there is an issue in your code but, really, you have to do things in a certain way due to external dependencies, and I think it's very hard to indicate this is the case.
JI
Automation Tool Specialist at a comms service provider with 1,001-5,000 employees
Jul 30, 2018
I find it is light on the security side.
SM
Manager at Dassault Systèmes
May 6, 2019
The product's user documentation can be vastly improved.
DH
Technical Architect at Dwr Cymru Welsh Water
May 9, 2019
A robust credential scanner would be a huge bonus as it would remove the need for yet another niche product.