SonarQube

SonarQube is a self-managed, automatic code review tool that systematically helps developers deliver clean code. It detects bugs, vulnerabilities, and code smells in your repositories and provides clear remediation guidance to help developers fix issues.

• Static code analysis for 25+ languages
• Security vulnerability detection
• Code smell and bug identification
• Technical debt measurement
• Quality gates for CI/CD pipelines
• IDE integration and real-time feedback
• Historical analysis and trends
• Custom rules and quality profiles

• Continuous code quality monitoring
• Security vulnerability scanning
• Technical debt management
• Code review automation
• Compliance and audit preparation
• Developer education and feedback
• Quality gate enforcement
• Legacy code assessment

• CodeClimate
• ESLint
• Checkmarx
• Veracode