Sonar

Sonar builds tools that help developers find quality and security issues in human-written, AI-generated, and third-party code before production. Its SonarQube family combines static analysis, automated code review, and remediation across editors and CI/CD pipelines. Teams can choose managed SonarQube Cloud or self-managed SonarQube Server, while SonarQube for IDE provides feedback as developers write code. Customizable quality gates enforce standards before merging or release, and AI CodeFix uses language models to suggest repairs.

Olivier Gaudin, Freddy Mallet, and Simon Brandhof started the open-source project behind Sonar; the company was incorporated in 2008. Gaudin is now chairman, and Tariq Shaukat is CEO. Its engineering evolved from integrating existing analysis tools to building its own symbolic execution, semantic analysis, and dataflow analysis. Sonar also introduced Cognitive Complexity in 2016: a metric that estimates how difficult control flow is to understand, accounting for nesting and interruptions while ignoring readable shorthand.

In 2026, Sonar reported that 7 million developers and more than 75% of Fortune 100 companies relied on SonarQube. It also acquired Gitar, an AI code review and validation platform that fixes code, bugs, and CI failures within GitHub and GitLab pull requests. The acquisition expanded Sonar’s product scope, with Gitar remaining available separately and integration with SonarQube planned.