Full-Time
Updated on 3/14/2025
Tools for code quality and security
No salary listed
Junior, Mid
Neukirchen-Vluyn, Germany
Minimum three days a week in the office (Monday/Tuesday/Thursday).
US Top Secret Clearance Required
SonarSource provides tools that help improve code quality and security for software developers. Their main products include SonarLint, an IDE plugin that gives real-time feedback on code quality while developers are coding; SonarQube, a self-managed solution that analyzes and reports on code to help organizations maintain high standards; and SonarCloud, a cloud-based service that offers similar features to SonarQube but is managed in the cloud. SonarSource operates on a subscription model, allowing clients to pay for access to these tools, which supports ongoing product development and customer service. The company serves over 400,000 organizations worldwide and emphasizes the importance of writing "Clean Code" to enhance the maintainability, security, and reliability of software applications.
Company Size
501-1,000
Company Stage
Late Stage VC
Total Funding
$457.1M
Headquarters
Vernier, Switzerland
Founded
2008
Help us improve and share your feedback! Did you find this helpful?
Flexible Work Hours
Hybrid Work Options
Professional Development Budget
Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn MoreNot that long ago, humans wrote almost all application code. But that’s no longer the case: The use of AI tools to write code has expanded dramatically. Some experts, such as Anthropic CEO Dario Amodei, expect that AI will write 90% of all code within the next 6 months.Against that backdrop, what is the impact for enterprises? Code development practices have traditionally involved various levels of control, oversight and governance to help ensure quality, compliance and security. With AI-developed code, do organizations have the same assurances? Even more importantly, perhaps, organizations must know which models generated their AI code.Understanding where code comes from is not a new challenge for enterprises. That’s where source code analysis (SCA) tools fit in
Acquisition to amplify the impact of developers and AI agents together to build better, faster
Geneva-based Sonar has signed a definitive agreement to acquire Tidelift, a provider of software supply chain security solutions that help organizations manage the risk of open source software. The acquisition will extend Sonar’s scope of coverage to include open source libraries, in addition to code written by developers and AI.With more than 90% of software built using open source components, evaluating open source risks is critical to the sustainability and security of organizations’ applications. Tidelift helps improve the health and security of open source by paying the maintainers behind thousands of the world’s most-relied-upon open source projects to follow industry-leading secure software development practices. Paid open source maintainers are 55% more likely to implement critical security and maintenance practices than unpaid maintainers. Sonar analyzes all code, regardless of who writes it—an internal team or genAI—resulting in more secure, reliable, and maintainable software. Rooted in the open source community, Sonar’s solutions support over 30 programming languages, frameworks, and infrastructure technologies
Code quality and security leader to address code-level issues in software supply chain in addition to first-party and AI-generated code
Adactin, a leading Australian IT solutions provider specialising in software quality, security, and digital transformation services has announced a partnership with Sonar, the leading provider of code quality and security solutions. This officially designates Adactin as Sonar's first strategic partner in Australia, set to revolutionise how Australian businesses approach software quality and security, empowering them to deliver high-performance applications with confidence.SYDNEY, Dec. 3, 2024 /PRNewswire-PRWeb/ -- Adactin, a leading Australian IT solutions provider specialising in software quality, security, and digital transformation services has announced a partnership with Sonar, the leading provider of code quality and security solutions. This officially designates Adactin as Sonar's first strategic partner in Australia, set to revolutionise how Australian businesses approach software quality and security, empowering them to deliver high-performance applications with confidence.The Sonar product offering, SonarQube, analyses all code for quality and security issues whether written by developers or AI assistants, with three key solutions: SonarQube Server (on-premises), SonarQube Cloud (SaaS), and SonarQube for IDE (free IDE plugin). Seamlessly integrating into enterprise environments and supporting over 30 programming languages, SonarQube streamlines project analysis, identifies vulnerabilities, and delivers actionable insights to enhance code reliability, maintainability, and security.By partnering with Adactin, Sonar is poised to harness Adactin's extensive expertise in software testing and development, bringing world-class solutions to the forefront of the Australian market."Sonar partners have to meet defined standards to achieve status within our program," said Rick Harshman, GM & VP of Sales, EMEA & APJ, Sonar. "Companies that have demonstrated the outlined criteria in our program are awarded partner status, and Adactin has done just that