Coming from an older Community Build version? Check the upgrade path.
Community Build
Release 26.6.0.123539
Free and open source for productivity & code quality
Includes:
Static code analysis for 21 languages and frameworks- Java
- JavaScript
- TypeScript
- Python
- C#
- CloudFormation
- Terraform
- Docker
- Kubernetes/Helm Charts
- Kotlin
- Ruby
- Go
- Scala
- Rust
- Flex
- PHP
- HTML
- CSS
- XML
- VB.NET
- Azure Resource Manager/Bicep
- SonarQube runs in a FIPS environment
- Detect bugs & basic vulnerabilities in code
- Review security hotspots
- Track and resolve technical debt
- Monitor code quality metrics and history of activity
- Basic secrets detection
Covers hard coded usernames, passwords, and public cloud services.
- Combine results from third-party tools with SARIF reports
- CI/CD integration with GitHub, GitLab, Bitbucket and Azure DevOps
- Extensible, with 50+ community plugins
Developer edition
2026 Release 3 | May
Essential capabilities for small teams & businesses
Community Build, plus:
- Additional languages: C, C++, Obj-C, Dart/Flutter, Swift, ABAP, T-SQL, PL/SQL, YAML, JSON, Ansible, GitHub Actions, Shell
- AI Code Assurance
Ensures AI generated code is fully understood and verified before reaching production.
- AutoConfig for C and C++ projects
- Detection of injection vulnerabilities (SAST with taint analysis)
Supported languages
- Java
- C#
- JavaScript
- TypeScript
- Python
- PHP
- Kotlin
- Go
- VB.NET
- Powerful secrets detection
Detects 400+ secrets patterns with 340+ rules, including coverage of 248 public, private, commercial, and enterprise cloud services.
- Detection of advanced bugs causing runtime errors in Python, Java, C#, and VB.NET
- Analysis of feature branches, maintenance branches, and pull requests
- Display quality gate status in DevOps pull requests for GitHub, GitLab, Bitbucket, and Azure DevOps
- Autoprovision users and groups from GitHub and GitLab
- Permissions autosync with GitHub
- Display security vulnerabilities in GitHub and GitLab
- Collect multiple projects together as an Application for a single view
- Standard commercial support available
For detailed pricing, contact sales.
Enterprise edition
2026 Release 3 | May
Designed to meet Enterprise-level requirements
Developer edition, plus:
- Additional languages: Apex, COBOL, JCL, PL/I, RPG and VB6
- Unlimited integrations with DevOps platforms
Supports the following DevOps platforms
- GitHub
- GitLab
- Bitbucket
- Azure Devops
- AI CodeFix
- Security engine custom configuration for more powerful taint analysis
- Custom rules to detect private secret patterns
- Aggregate projects and applications into a portfolio
- Project, application, and executive portfolio reports
- Security reports for common security standards
Supported standards
- PCI DSS
- OWASP ASVS
- OWASP Top Ten
- OWASP Mobile Top 10
- CWE Top 25
- STIG
- CASA
- Regulatory and audit reports to record state & quality of release
- Consolidate projects into a central instance
- Parallel processing of analysis reports
- Pull request decoration and guided setup for monorepos
- Additional licenses for testing and staging environments
- Automatic user and group provisioning through SCIM with Okta and Azure AD
- Standard commercial support
For detailed pricing, contact sales.
- 24/7 white glove premium support available
For detailed pricing, contact sales.
Data Center edition
2026 Release 3 | May
For high availability, scalability, & performance
Enterprise edition, plus:
- Autoscaling in a Kubernetes cluster
- Component redundancy
- Data resiliency
- Horizontal scalability
- High performance under extreme load
- Standard commercial support included
- 24/7 white glove premium support available
For detailed pricing, contact sales.
Active | January 2026
SonarQube 2026.1 LTA
Current Long Term Active version. Purpose built for the AI-native developer workflow, this release helps teams reach their full potential.
Visit our LTA Update Hub for a smooth update.