The latest in integrated code quality and security coverage

CRN recognizes Sonar as on of the top 20 hottest AI software companies for bringing resellers, cloud service providers and other partners a new agent centric development cycle framework, and more.

Sonar's Chief Growth Officer, Harry Wang, covers how by embedding verification as a mandatory step and giving agents the structured guidance they need to succeed, organizations can turn AI’s raw potential into a repeatable, trustworthy engine for innovation.

Following the recent launch of Sonar’s framework the Agent Centric Development Cycle, the company has announced the open beta of three new products to autonomously verify code in agent-driven development.

Jeremy Katz, VP of Engineering Code Security at Sonar, sits down with ISMG to discuss why code security must move before CI to stop threats early and how new solutions from Sonar are making this happen.

Sonar's VP of Engineering Code Security, Jeremy Katz, sits down with eSecurity Planet to talk about how code security changes with AI.

Sonar's Keith Carter, VP Channels in EMEA, is recognized by CRN as a Channel Leader for his analytical, influential & highly successful global and EMEA channel and alliance leadership.

Sonar announced new capabilities to strengthen its SonarQube Advanced Security solution with the additions of automated detection for malicious packages and a new strategic partnership with Wiz.

Findings from Sonar's 2026 State of Code Developer Report are included, stating that 96% of developers have trouble trusting AI‑generated code. Further, 38% say reviewing AI‑generated code requires more effort than reviewing code written by colleagues.

Sonar's Edgar Kussberg, group product manager of AI, shares perspective on MCP tools.

Sonar announced the open beta of SonarQube CLI.

Sonar introduced the Agent Centric Development Cycle (AC/DC), and new products like Sonar Context Augmentation and SonarQube Architecture.

Sonar announced at it's virtual Sonar Summit the AC/DC framework and how it incorporates multiple tools and platforms developed to better secure software supply chains.

Sonar's developer survey is highlighted, finding that AI tools now account for 42% of all committed code – a figure developers expect to rise to 65% by 2027.

Sonar launches the Agent Centric Development Cycle (AC/DC) framework that promises to modernize continuous integration (CI) in the age of artificial intelligence (AI) coding.

Sonar is recognized by the Financial Times on the FT1000 list of Europe’s fastest-growing companies for its 2026 ranking.

Sonar emphasizes that Claude Code Security engages in a sampling-based, spot-checking approach, whereas enterprise security tools systematically evaluate every line of code to provide the consistent, auditable evidence required by compliance frameworks.

In this interview from NeurIPS 2025, SAIL Media‬ sits down with Joe Tyler from Sonar to discuss its groundbreaking research on AI code quality and security.

CTO of Sonar, Andrea Malagodi, provides insight on how IT’s role must evolve from a manual gatekeeper to a provider of automated, intelligent guardrails.

Sonar's Manish Kapur covers how to move from AI speed to code impact with automated verification.

Sonar's CEO, Tariq Shaukat, shares perspective on the importance of integrated automated code review to ensure code quality in an AI world.

Data on Opus 4.5 performance from Sonar's LLM Leaderboard is highlighted on the heels of the release of Opus 4.6.

Ori Yitzhaki, CPO at Sonar, recommends stripping descriptions down to the essentials and using shorthand notations that the model can still interpret.

Sonar's Donald Fischer covers how governance must evolve from a reactive process to a set of built-in, continuous controls embedded directly within development.

Jim DeCarlo, VP Channel Sales of Sonar, talks about the critical shift from code creation to code validation.

Sonar's CEO, Tariq Shaukat, shares perspective with Bloomberg at Davos — “It’s not vibe coding anymore. It’s real production.”

Sonar's Chris Grams shares perspective around how, as the quality of coding assistants improves, developers are finding it more difficult to find errors.

On this episode of Leaders and Legends in Government, host Aileen Black speaks with Tariq Shaukat, CEO of Sonar, about leading through change at scale.

SonarQube wins "Best Test Service or Tool" for the 2025 DevOps Dozen Awards.

Sonar's Anirban Chatterjee writes about the the new issue in developer workflows — while code generation is faster, developers now spend more time reviewing unreliable AI code.

Sonar's global survey highlights a notable gap between the perceived correctness of AI code and the diligence in its review.

Survey from Sonar on "State of Code" finds that AI coding tools have become the norm, with 72% of developers who have tried these tools using them every day or multiple times a day.

Sonar's "State of Code" survey finds that 72% of developers use AI tools every day, with the technology helping to write up to 42% of committed code.

Sonar's global survey is highlighted for its stark findings — while AI accounts for 42% of all committed code, 96% of developers don’t fully trust AI to generate code that’s functionally correct. 

While developers are embracing AI coding assistants at an unprecedented rate, this adoption is flooding CI/CD pipelines with a high volume of unverified and potentially flawed code.

AI is predicted to generate two-thirds of code by 2027, but 96 percent of developers do not trust that it’s functionally correct according to a new study from Sonar.

Sonar's global survey of 1,100 finds nearly three-quarters (72%) are now using AI coding tools daily, with on average 42% of the code being created with the help of AI.

Sonar's Edgar Kussberg shared perspective on agentic workflows.

Sonar's State of Code Report on LLM personalities mentioned for GPT-5 performance.

Sonar's Manish Kapur shares how integrating a 'shift left' strategy for safety-critical systems from the start saves time, improves code quality and gets products certified faster.

Sonar adds ability to analyze the architecture of a software application to its SonarQube tool for analyzing code quality.

Ori Yitzhaki brings 15 years of experience in enterprise software to his new role as Sonar's CPO.

Sonar's Marcus Low shares what he expects for the APJ region for 2026 — a recalibration of the region’s technology workforce.

Sonar introduces a major expansion of SonarQube that brings full software architecture management into its code quality and security platform for the first time — SonarQube Architecture.

Sonar's CEO, Tariq Shaukat, shares perspectives on AI's impact on software development and shares insights from recent research on AI code generation.

Sonar's Nathan Jones, VP of Public Sector, is recognized for his dedicated effort to meeting developers and system integrators where they are and strengthening mission support across the public sector.

Edgar Kussberg, product lead for AI and development tools at Sonar, shares advice for what developers or infosec teams should do when dealing with blunt attacks.

Sonar's Marcus Low shares perspective on how, in 2026, the ability to collaborate with AI in software development, rather than compete against it, and focus on verifying its output, will be a defining skill for employability and growth in the region’s evolving tech economy.

Johannes Dahse, VP of Code Security at Sonar, breaks down where vulnerabilities really come from, how developers can prevent them, and how AI is reshaping the security landscape.

Sonar CEO, Tariq Shaukat, shares learnings from his varied professional background and how software development is changing with AI.

Sonar’s ability to provide guardrails around code quality that make AI coding safer and more effective has earned the company a spot on Fast Company’s list of Next Big Things in Tech for 2025.

On Industry Insight, Lynlee Foo speaks to Harry Wang, Chief Growth Officer, Sonar to find out what banks using AI for code generation means for trust, regulation and competitiveness.

Sonar's Manish Kapur shares how, instead of just generating more code faster and creating a downstream review bottleneck, we can train models to generate better code from the start.

Sonar's new service, SonarSweep, aims to reduce the number bugs and vulnerabilities by addressing the root cause of the issues.

Sonar announces SonarSweep, which aims to mitigate those issues by ensuring that models are learning from high-quality, secure examples.

Sonar announced the launch of SonarSweep™, a service designed to improve the training of LLMs optimized for coding applications.

Sonar is recognized for its platforms capabilities for ensuring code quality with AI — AI Code Assurance and AI CodeFix.

Sonar is listed as a "Next Big Thing in Tech" by Fast Company for ensuring AI-generated code meets enterprise standards.

Sonar's Chris Grams details the need to verify and build intelligent, automated guardrails directly into the development workflow.

Sonar's Prasenjit Sarkar writes about performance of LLMs and the need to ensure verification and code governance.

AI is increasing both the number of pull requests and the volume of code within them, creating bottlenecks in code review, integration, and testing. Sonar's Edgar Kussberg shares how to address them.

Tariq Shaukat, CEO of Sonar, and Gal Marder, CSO of JFrog, shares insights on AI’s role in software development.

Sonar CEO, Tariq Shaukat, is quoted on how to ensure code quality — "The key practice is leveraging an automated quality gate that verifies all code, preventing the natural entropy AI introduces and empowering developers to critically assess its output against quality and security standards."

Sonar research on GPT-5 performance is highlighted in interview with OpenAI researcher, Ishaan Singal.

Sonar research finds that large language models have different traits, such as Claude Sonnet 4 being very verbose in its outputs, producing over 3x as many lines of code as OpenCoder-8B for the same problem.

A report published by Sonar finds the GPT-5 platform released by OpenAI has the potential to generate better code but at significantly higher costs.

Sonar's Edgar Kussberg covers the expanding role of AI in development and how to ensure ROI and overcome challenges.

Sonar's Prasenjit Sarkar writes on why a rigorous "verify" step is necessary in the age of AI to manage the significant security blockers and technical debt coding assistants can potentially generate.

Andrea Malagodi, CTO at Sonar, discusses the challenges with AI outputs, the importance of trust in software development, and the need for CTOs to balance innovation with security.

Sonar published a report based on its proprietary analysis framework for assessing LLM-generated code spanning more than 4,400 Java programming assignments.

Report from Sonar warns that while the latest large language models may be getting better at passing coding benchmarks, at the same time they are introducing more severe bugs and security vulnerabilities.

The article details Sonar's "The coding personalities of leading LLMs" report, explaining various AI models exhibit unique traits when generating code, concluding that these distinct "personalities" directly influence the style, accuracy, and overall quality of the software they produce.

Sonar's group product manager, Edgar Kussberg, advises developers to review AI-generated code with static analysis and security tools directly from their IDE to maintain quality and avoid vulnerabilities.

As developers shift towards managing teams of specialized AI agents, Sonar's chief growth officer, Harry Wang, emphasizes that these new multi-agent workflows require specialization to be effective, mirroring the distinct roles within a human engineering team.

In an article about the risks of abandoned open-source projects, Sonar's vice president, Donald Fischer, highlights that a primary concern is the potential for unpatched security vulnerabilities.

Sonar's Tom Howlett explains why "vibe coding" presents risks for enterprises and highlights the changing role of developers, as well as the need for established procedures and accountability.

Sonar's Tom Howlett writes on why a shift toward AI-assisted coding isn't about replacing developers and that they are crucial to ensuring quality, secure, maintainable code.

Sonar's CEO, Tariq Shaukat, unpacks why Sonar is investing in Singapore, how agentic AI is transforming software development, and why trust, speed, and scale are becoming the new pillars of secure digital innovation.

Sonar's Edgar Kussberg shares why accountability of AI-generated code is crucial to prevent overlooked potential flaws, security vulnerabilities or maintainability issues that’d typically be caught with self-written code.

Sonar's Edgar Kussberg shares perspective on ensuring AI-generated code is of quality and secure, from the moment of its creation.

Nathan Jones, VP of Public Sector at Sonar, writes about the new cybersecurity executive order and how it emphasizes mastering the fundamentals of secure software development.

Tariq Shaukat, CEO of Sonar, shares perspective on vibe coding and what companies are doing to ensure proper governance and controls.

Donald Fischer, VP at Sonar, discusses the rise of "slopsquatting" with AI-generated code and shares how to avoid this type of attack.

Sonar Developer Advocate Liz Acosta writes how, to avoid technical debt, there must be a continuous commitment to clarity, maintainability and collaboration.

Sonar's Edgar Kussberg provides insight around how to prepare APIs for agentic consumption.

Andrea Malagodi, CTO of Sonar, discusses how the company successfully transitioned from on-premise to SaaS, leveraging AWS partnership and maintaining focus on developer-centric code quality and security solutions.

Rapid code creation by many, if unmanaged, could lead to challenges in quality, security and maintainability. Sonar's Chris Grams writes about how the immediate velocity of vibe coding could be risking code health, if foundations are neglected.

Sonar CEO, Tariq Shaukat, shares perspective on why there must be a zero-tolerance policy for unreviewed code written by GenAI for high-stakes development environments.

Silviu Asandei, Security Specialist and Security Governance at Sonar, discusses how AI code assistants are transforming development workflows and impacting security.

Nathan Jones, Sonar VP of Public Sector, shares perspective on the new cybersecurity executive order.

Harry Wang, Sonar's Chief Growth Officer, discusses the impact of AI on software quality and security, how to successfully adopt and measure AI, and how AI is being used at Sonar.

Sonar's VP of Public Sector, Nathan Jones, offers insight on the new cybersecurity EO and why embedding security directly into the development process with a focus on quality is crucial.

Sonar Developer Advocate, Jonathan Vila Lopez, details how developers can use AI for test generation effectively, reaping its benefits without compromising code quality.

Sonar Developer Advocate, Liz Acosta, digs into what vibe coding is, the allure and downside of it, and best practices for developers to harness the power of AI.

Sonar's CHRO and President of Field Operations sit down with Building Texas Business' host Chris Hanslik to talk about how Sonar is growing in Austin, the company's culture of CODE, Austin as a thriving tech city, and how Sonar is innovating in today's AI landscape.

Harry Wang, Chief Growth Officer at Sonar, provides insight on the importance of testing AI-generated code and what the future of software development will look like — human-defined, AI-developed, AI-verified, and human-approved.

Sonar's CTO, Andrea Malagodi, shares why its importance to take a 'trust and verify' approach to ensure all code—AI-generated or human-written—meets quality and security requirements, and the user experience is not disrupted.

Sonar is recognized as a top 100 global company company for its culture that has employees feeling respected, empowered and inspired to do their best work.

SonarQube is recognized as an AI-enhanced quality scanning tool, with its ability to flag and even automatically fix common coding issues before they merge into a project.

Sonar CEO Tariq Shaukat shares that, to enable developers to improve the quality and security of all code—human and AI-generated—during the coding process, you need to give developers the right tools. This vastly improves developer productivity and saves countless hours for security teams.

Sonar's Harry Wang details the AI accountability crisis and how Sonar is addressing this issue in the software development industry, how to balance the need for fast development with the importance of maintaining high-quality and secure code, and more.

Sonar's President of Field Operations is recognized as a CRN Woman of the Channel for her insight and influence to help drive channel success.

Sonar's Andrea Malagodi shares his perspective on where to evaluate the potential of generated AI.

Sonar Chief Growth Officer Harry Wang shares perspective on AI coding assistants and how they can benefit developers by augmenting their routine and repetitive tasks.

Sonar Vulnerability Team discusses risks of Cross-Site Scripting (XSS) vulnerabilities within Grafana, reported by SonarQube, and outlines how to detect and mitigate these potential security threats to protect sensitive data.

Sr. Director of Product & Solutions at Sonar, Manish Kapur, shares insights on vibe coding with AI, emphasizing the need of validating AI-generated code for quality, security, and maintainability.

Sonar's Marcus Low discusses how AI-powered coding tools are transforming software development by automating tasks, improving code quality, accelerating development cycles, and potentially reshaping the roles of developers.

Sonar CEO Tariq Shaukat writes about seven AI coding “habits” that organizations should adopt to ensure code security and long term maintainability.

Sonar VP of Legal Product & Policy, Luis Villa discusses about EU's Cyber Resilience Act, interpreting the law, legal complexities, artificial intelligence, and more.

Sonar CHRO Clarissa O'Connell sits down with host Dave D'Angelo to discuss her career journey, leadership approach, and practices.

Sonar VP of Legal Product & Policy, Luis Villa shares insights on Cyber Resilience Act and the landscape of open source software development for developers.

Sonar CEO Tariq Shaukat shares insights on the challenge of AI-developed code for enterprises, as Sonar mentioned as a helpful SCA vendor.

Sonar's upcoming availability of SonarQube Advanced Security is the first step in integrating Sonar’s recent acquisition of Tidelift and its unique, proactive approach to improving third-party code quality and code security.

Sonar's new, enhanced security offering, SonarQube Advanced Security, gives developers unprecedented visibility to find and fix security issues as they code.

Sonar now provides one integrated code quality and code security analysis solution for all code – first-party, third-party open source, and AI-generated code – with SonarQube Advanced Security.

Sonar unveils SonarQube Advanced Security, delivering the first fully integrated solution for developers to find and fix code quality and code security issues in the development phase of SDLC.

Sonar reveals an offering that combines its Static Application Security Testing (SAST) tool with the software composition analysis (SCA) tools it gained with the acquisition of Tidelift.

Sonar CEO Tariq Shaukat talks with host Ben Book about his journey in the industry, entrepreneurship, and what being leader in tech means today.

Sonar announces the upcoming release of SonarQube Advanced Security, a new offering that will extend Sonar's analysis capabilities to include third-party open source code.

Sonar acquired AutoCodeRover, an AI platform from NUS, to enhance software development with automation and reduced costs, enabling developers to work smarter, faster, and more efficiently.

AutoCodeRover, an autonomous AI agent platform for software development has been acquired by Sonar to enhance the capabilities and efficiency of software developers.

Sonar's acquisition integrates AutoCodeRover’s AI agent technology into Sonar’s ecosystem, accelerating automated code remediation, enhancing developer efficiency, and creating new R&D jobs in Singapore.

Sonar's acquisition of AutoCodeRover highlights the real-world impact of NUS’ research with the innovative platform boosting Sonar’s AI-agent-based code development, driving innovation in software engineering and agentic AI.

Sonar hires Eyal Ben David as chief legal officer, bringing aboard a legal executive with deep experience in scaling legal teams.

Sonar's acquisition of AutoCodeRover strengthens its AI capabilities, enabling automation in debugging, issue remediation, and code refactoring.

Sonar CEO Tariq Shaukat shares insights on integrating a pathway with free offerings for customers to access advanced capabilities with free offerings and expanded services as their needs grow.

Sonar highlights 8 features from the SonarQube Cloud Free tier, from extensive language support and advanced security analysis, that are designed to enhance developer experience.

Sonar’s acquisition of AutoCodeRover marks a strategic move to integrate agentic AI into enterprise software development.

Sonar's acquisition of AutoCodeRover aims to enhance Sonar’s offering with a “sophisticated” foundation capable of automatically addressing real-world engineering issue.

Sonar acquires AutoCodeRover to enhance AI-powered coding, automate debugging, improve security, and speed up software development.

Sonar acquires AutoCodeRover, an autonomous AI agent platform for software development, to amplify the impact of developers and AI agents together to build better, faster.

Abhik Roychoudhury shares his insights on AutoCodeRover, an AI system that not only writes code but also understands, improves, and debugs existing codebases in the changing landscape of software development.

Sonar's acquisition of AutoCodeRover, one of the pioneering large language model (LLM) agents for coding and code maintenance, to help developers accelerate development with AI agents.

Sonar acquires Singapore-based AutoCodeRover to enhance Sonar's offerings in addressing real-world engineering issues such as debugging, issue remediation, and code refactoring.

Sonar announces acquisition of an autonomous AI agent platform for software development, AutoCodeRover, to invest in AI to help developers and organizations build high-quality, secure applications more effectively.

Sonar acquires AutoCodeRover, an LLM agents for coding and code maintenance with strong results on SWE-bench, to enhance Sonar's offerings to automatically address real-world engineering issues.

Sonar acquires AutoCodeRover to enhance developer productivity and improve software development processes using AI.

Sonar VP of Growth and New Ventures, Harry Wang, speaks with TechStrong TV's Alan Shimel about the acquisition of AutoCodeRover and empowering developers in software development with AI agents.

Geneva Nugget Sonar acquires AutoCodeRover, a Singaporean start-up specializing in AI for bug correction, with integration into SonarQube offerings to improve code quality.

Harry Wang, VP of Growth and New Ventures at Sonar sits down with the host Keith Shaw to highlight key features of the SonarQube offerings, including quality gate, generative AI fix, and more.

Sonar acquires AutoCodeRover to integrate with SonarQube's AI-powered tools and enable its customers to automate tasks such as debugging and issue remediation with AI agents.

Sonar CEO Tariq Shaukat discusses integrating AI agents to assist developers' code and better address engineering issues by acquiring AutoCodeRover.

Sonar VP of Growth and New Ventures Harry Wang shares insights with ISMG's Michael Novinson on acquiring AutoCodeRover to embed AI-driven software remediation, address technical debt, and supercharge developers.

Sonar announces the acquisition of AutoCodeRover, the autonomous AI agent platform for software development, to deliver strong AI capabilities for code quality and security.

Sonar receives recognition from the 2025 DEVIES Award, with the SonarQube Server honored in the DevOps: ode Testing & Quality Management category for delivering top-tier code quality and security solution.

Sonar has been named one of Switzerland's highly innovative unicorn startups for applications and services providing automated code quality analysis and code review solutions.

Sonar has been certified as SOC (Service and Organization Controls) 2 Type II Compliance, assurance of security, confidentiality, and availability in meeting top industry data protection standards to maintain trust of our users.

Sonar details 9 features from the latest SonarQube Server LTA, from auto-provisioning to importing external issue reports, that can upgrade developers' experience.

Sonar Vulnerability Research reports three flaws that could result in one-click remote code execution (RCE) in the Voyage open-source PHP admin panel, followed by discovering additional bugs in further research.

Sonar Vulnerability Researcher discovers three security flaws in the open PHP package Voyager that attackers could exploit to execute arbitrary orders on the server when an authenticated user clicks on a malicious link.

Sonar CIO Andrea Malagodi shares perspectives on embracing automated testing tools and a "trust and verify" approach to ensure quality and security stay intact as they should take center stage for organizations under AI code generation in 2025.

Sonar introduces advanced features and enhancements in the SonarQube Server LTA, accelerating safe AI adoption in SDLC and enhancing security measures and analysis speed.

Sonar delivers powerful AI capabilities, sophisticated security improvements, and streamlined developer productivity in its latest SonarQube Server 2025. 1 LTA to enhance code security and improve overall software quality.

Sonar's latest SonarQube Server 2025.1 LTA introduces a range of advanced features and enhancements, including AI capabilities, security measures, and language support, designed to integrate the use of AI in the Software Development Lifecycle (SDLC)

Sonar releases new SonarQube Server LTA to supercharge developer productivity with high-impact AI enhancements, security innovations, new language support and more.

Sonar acquired Tidelift to incorporate open-source libraries into its coverage, delivering a complete solution for code quality and security.

Sonar is listed as a software company that helps developers and engineers accomplish tech innovations in Austin, providing tools to build software products that meet Code Quality standards.

Sonar is recognized as a top tech company in Texas by Built In for its developer tools and open-source solutions that help reduce technical debt.

Sonar's CIO, Andrew Malagodi, shares strategic approaches to using AI, including "trust and verify" and standardization, to enhance developers' productivity in software development and drive business success.

The SonarQube for IDE team highlights the enhancements made in 2024 to improve the developer experience and more to come, such as new language analysis, in 2025.

Sonar Developer Advocate, Jonathan Vila, shares advice on using automated tools and best practices, like the "start left" approach, to prevent bad code and enhance productivity and security in software development.

Tariq Shaukat, CEO of Sonar, predicts that software will become a critical business asset as AI-generated software development continues to gain steam and how the "trust and verify" approach can help.

In this article, SonarQube is acknowledged as a top static code analysis tool for outstanding features designed to ensure high-quality code, including AI-powered tools and support for 30+ programming languages.

Sonar CIO Andrea Malagodi shares insights on how AI-generated code and testing tools can amplify developers' productivity with a "trust and verify" approach.

Sonar's Manish Kapur shares insights about integrating AI coding assistants into the developer workflow with the help of automated tools like SonarQube.

Sonar CEO Tariq Shaukat shares his prediction of how more organizational leaders will put "software as a critical business asset" to the top of their agenda.

Sonar included in the daily global exit update for acquiring Tidelift, extending it's scope of coverage for improving the state of open source software and raising the bar for code quality and security everywhere.

Sonar's acquisition of Tidelift to extend coverage and improve open-source software mentioned in the weekly wrap-up of business news.

Sonar is incorporated as a partner with SonarQube in Google's Gemini Code Assist ecosystem.

Sonar's acquisition of Tidelift mentioned in the weekly Fortune Term Sheet newsletter.

Sonar is ranked in the Excellence 1000 Index 2025 by Newsweek and Best Practice Institute for leading business excellence and commitment to ethical practices in the Information Technology industry.

Sonar's VP of Growth and New Venture, Harry Wang, shares how Sonar's ecosystem expands with the Tidelift acquisition, incorporating human-verified intelligence with the existing software development and security tools.

Sonar acquires Tidelift to expand scope of coverage and bring human-verified open source software vulnerability intelligence to users.

Sonar CEO Tariq Shaukat discusses including open source software to improve code quality by acquiring Tidelift.

Sonar's VP of Growth and New Venture, Harry Wang, shares insights on how the integration with Tidelift will support secure code production on AI platforms.

Sonar is collaborating with Google on the launch of new tools to support Gemini Code Assist.

Harry Wang, VP of Growth and New Ventures at Sonar, sits down with host James Maguire to discuss Sonar's "start-left" approach for code quality and the future for AI adoption in software development.

Sonar CIO Andrea Malagodi predicts the role of code-testing tools in software development and business goals in the coming year.

Sonar leaders share forecasts for the coming year regarding software development, from code security to business success, in the growing adoption of generative AI.

Sonar CEO Tariq Shaukat speaks to Eye on AI host Craig Smith about the importance of AI-driven approaches and Sonar's efforts to address the challenges of AI-generated code for businesses.

Sonar CEO Tariq Shaukat shares his insights on code accountability and the " trust and verify" approach to working with AI in 2025.

Sonar speaks with TechStrong TV about adapting to AI-generated code, improving issue resolution, and maintaining high code quality standards during development.

Sonar's Manish Kapur discusses strategies for developers to integrate generative AI coding assistants while maintaining code quality.

Sonar offers free tier for SonarQube, allowing developers to discover key features contributing to Code Quality with easy integration and broad language support.

SonarQube Server 10.8 release brings new and exciting capabilities such as powerful AI enhancements for code quality, different operating modes to match business needs, and more.

Sonar's VP of Product, Fabrice Bellingard, discusses the tools and approaches necessary to reshape developer workflows in the age of AI.

Sonar CEO Tariq Shaukat and VP of Product Fabrice Bellingard share new SonarQube capabilities that support leveraging genAI.

Sonar CIO Andrea Malagodi shares his insights on the IT landscape and how AI is affecting everything.

Sonar's Harry Wang, VP of Growth and New Ventures, shares his perspective on if we are at the autonomous stage yet of AI agents.

Sonar CEO Tariq Shaukat speaks with Bloomberg Intelligence analyst Niraj Patel to dive into the details of Sonar’s scale in handling trillions of lines of coding, its addressable market size, disruptions from genAI, and more.

As AI becomes more integrated into the SDLC, maintaining trust in your codebase requires new strategies and tools. Sonar's Anirban Chaterjee details how to build AI accountability and how Sonar can help.

Sonar has been announced as a finalist in two categories of the DevOps Dozen awards, in the Best application of AI in DevOps Tool/Platform for its new AI capabilities and in the Best Testing Service/Tool for SonarQube.

Sonar has been announced as a finalist for the InfoWorld Technology of the Year Awards, in the Devops: Code Quality category.

GM & VP of APJ at Sonar, shares how, to mitigate risks with AI, code generation tools must be used responsibly with proper human oversight.

Marcus Low, GM & VP of APJ at Sonar, discusses Sonar's new AI capabilities for code assurance, the risks associated with autonomous AI agents generating code, and more.

Marcus Low, GM & VP of APJ at Sonar, shares the unique challenges Malaysian developers face in implementing Code Quality practices and the evolving role of software companies in Malaysia’s economy.

Harry Wang, VP of Growth and New Ventures, provides insight on the direction of the software tooling space and the potential AI presents.

Harry Wang, VP of Growth and New Ventures, shares his prediction on the impact of AI coding assistants.

Sonar Head of R&D, Johannes Dahse, shares how quality checks and assurances will need to be in place next year as the use of AI-generated code grows.

Sonar appoints Nathan Jones to VP of Federal Government, to lead the companies federal business and expand the team in D.C.

Sonar's product team receives recognition for driving innovation and new SonarQube offering capabilities, AI Code Assurance and AI CodeFix.

Sonar receives acknowledgment in the Newsweek UK's Most Loved Workplaces for the year.

Andrea Malagodi, CIO of Sonar, gives his thoughts on how we will see an increased focus on code quality and security as AI produces more lines of code quickly.

Sonar Developer Advocate, Jonathan Vila, shares his prediction on how AI coding assistants will affect software development next year.

Sonar speaks with TechRound about what differentiates Sonar and how, in the age of AI, it is more critical than ever that companies invest in code quality and security.

Sonar Product Manager Denis Troller discusses the importance of C# logging, the most common mistakes, and how to avoid them.

New VP of Federal Government at Sonar, Nathan Jones, to lead enablement of Federal organizations and their development teams to accelerate code quality and security efforts.

Sonar appoints Nathan Jones to VP of Federal Government to lead expansion of the business space and expand the company's dedicated team in the D.C. area.

Sonar CEO, Tariq Shaukat, shares his thoughts on sustainable software development.

Sonar Vulnerability Research team discovered a flaw in OpenAPI that makes it possible for cybercriminals to both read and delete files and files stored in a write directory.

Sonar CEO Tariq Shaukat speaks to Stack Overflow host Ben Popper about AI coding tools’ potential to boost developer productivity—and how to balance it against code quality and security concerns.

Sonar Vulnerability Researcher details why charset differentials matter when it comes to security.

Sonar acquired Structure101 to further the company's promise of enabling all developers and organizations to improve the quality and security of their code, whether AI-generated or human-written.

Sonar released SonarQube 10.7 with AI-driven features and expanded support for new and existing languages and frameworks.

With Sonar's suite of solutions, developers can ensure they deliver high-quality code that is reliable, maintainable, and secure.

Sonar's Marcus Low, GM & VP of APJ, shares his insights around how generative AI is impacting software development.

How can companies accelerate software development and coding capabilities while ensuring quality, secure code? Sonar's GM & VP of APJ, Marcus Low, shares how adopting a "start left" approach can help.

Sonar acquires Structure101 to help address structural design problems that affect long-term maintainability of software for organizations.

Sonar announces the acquisition of Structure101, a pioneer in code structure analysis, to enhance its offering with the identification of potential structural issues as code is written.

Designed to support better software development in the age of AI, Sonar introduces AI Code Assurance and AI CodeFix.

As the software landscape continues to evolve, how can companies ensure that their code is clean, secure, and without bugs? Manish Kapur, Sr. Director of Product & Solutions, writes about the need to 'start left'.

Sonar's announcement of new capabilities, AI Code Assurance and AI CodeFix, mentioned in weekly news roundup for helping to address growing code accountability issue.

DevOps success in complex enterprise environments can be elusive. Sonar's CIO, Andrea Malagodi, shares his perspective on this, with the increased use of genAI.

More code is being written, but how can companies ensure that it is clean, secure and without bugs? Sonar's Manish Kapur writes about taking 'shift left' a step further, to 'start left'.

Sonar launched two new product capabilities, Sonar AI Code Assurance and Sonar AI CodeFix, designed to support better software development.

Sonar CIO, Andrea Malagodi, provides perspective that there is to be reasonable friction expected between innovation and safety with generative AI.

Sonar introduces AI Code Assurance to help organizations ensure the quality of genAI code and AI CodeFix to enable developers to seamlessly resolve issues detected by Sonar's code analysis engine with a single click.

Sonar provides new support for the Dart programming language, empowering Dart developers to build mobile apps with Flutter or web applications.

Lauren Janetatos, Director of Learning, Growth and Culture at Sonar, shares her perspective on company culture and why she defines it as "driven".

Acknowledgment of Sonar's announcement of new capabilities, AI Code Assurance and AI CodeFix, for SonarQube Server to ensure quality, secure code.

Sonar releases SonarQube Server 10.7 with new AI capabilities, STIG and CASA security reports, early access for Dart language rules, new PyTorch Library and Jupyter Notebooks support, and more.

SonarQube Server is listed as a top solution for its continuous inspection of code quality, with support for over 30 programming languages.

Sonar adds two new AI-driven Code Quality features to improve the quality of code produced by generative AI and enhance its offering with AI to deliver a better developer experience, respectively.

With Sonar's new capability AI Code Assurance, organizations ensure that AI written code receives the high level of quality and security review that you would expect from your developers.

Sonar AI Code Assurance and Sonar AI CodeFix deepen the company's commitment to the delivery of high-quality, secure code and increasing developer productivity.

New capabilities available in SonarQube Server, Sonar AI Code Assurance and Sonar AI CodeFix, improve the quality of code produced by genAI and enhance Sonar’s offering with AI to deliver better DevEx, respectively.

Sonar has unveiled two new capabilities for SonarQube Server — AI Code Assurance and AI CodeFix — designed to help organizations safely harness the power of AI coding assistants.

Sonar announces two new product capabilities for today’s AI-driven software development ecosystem, AI Code Assurance and AI CodeFix.

Sonar releases AI Code Assurance and AI CodeFix, deepening the company's commitment to improving DevEx and increasing productivity to support the delivery of better code.

Sonar launches AI Code Assurance to analyze issues in code generated by coding assistants, and AI CodeFix to provide AI-powered resolution recommendation for flagged code.

Sonar addresses the rapidly growing market for AI code assistants by launching AI Code Assurance for inspecting genAI code and AI CodeFix for solution suggestions to flagged issues.

Sonar launches two new capabilities respecitively for SonarQube Server – AI Code Assurance and AI CodeFix – to ensure quality, secure code whether AI-generated or written by developers.

Newsweek, per a partnership with the Best Practices Institute, acknowledges the top 100 most loved global companies, including Sonar.

Sonar VP of Channel for the Americas, Jim DeCarlo, shares insights on the channel and how partners are well positioned to support customers that are integrating genAI.

How can project stakeholders and IT leaders manage and reduce technical debt? Setting KPIs and having the right tools, like SonarQube Server, to assess and measure are critical.

The cost of bad code is enormous and leaders must consider its impact on their business success, particularly with the rise of AI coding assistants.

Sonar VP of Product, Fabrice Bellingard, covers how the right testing and analysis ensures a solid software foundation of quality, secure code.

AI coding assistants help improve developer experience and productivity, but organizations still need to ensure proper security checks to prevent issues and outages.

Sonar CEO, Tariq Shaukat, shares insights on AI code reviews, why verifying AI-generated code is critical, and the need for business leaders to take this seriously.

Sonar's President of Field Operations chats about her career from developer to sales leader and how she advocates for creative disruption and accountability.

Expanding into the Asian market, Sonar’s code quality platform helps developers maintain secure, high-quality code amid the rise of AI-based coding assistants.

Performing analysis and code reviews earlier in development is a popular mindset, but it should be to “start left,” not impose the burden later on.

Sonar is named a top unicorn in Switzerland

The skills and practices needed for software teams to succeed are changing with AI. Having the right tools in place, such as SonarQube Server, is critical for reducing potential risk.

Sonar Vulnerability Researcher Paul Gerste sits down with ISMG's Michael Novinson on the need for developer training to combat SQL injection.

Host Dan Lines sits down with Sonar's VP of Developer Relations and Community to discuss benefits and risks associated with GenAI and how impactful it is for junior and senior developers.

How can companies have confidence in their software? Sonar's Robert Curlee details how to level up code development with static code analysis.

Sonar CIO, Andrea Malagodi, writes about the need for organizations to understand how AI is contributing to workflows and their business.

Sonar's solution, SonarQube Server, is ranked at two out of 10 for best code security tools of the year.

Sonar is recognized as a top tech company in Texas, by Built In, for its innovation and growth.

Sonar VP of Developer Relations and Community talks about how to achieve secure, quality code whether generated by AI or written by developers.

Sonar CEO Tariq Shaukat shares how it's critical to understand AI

Tom Howlett, Head of Product Management at Sonar, discusses the idea of 'start left', AI in software development, static code analysis, and more.

Sonar receives acknowledgment as an Austin software company 'to know' for its developer-centric solution that enables quality and secure code development.

Sonar founder Olivier Gaudin shares his perspective on why its critical that your mission aligns with the community you serve.

Sonar vulnerability researcher Oskar Zeino-Mahmalat shares his insights on two cross-site scripting vulnerabilities affecting Roundcube that could be exploited by attackers.

Sonar expands its SonarQube Cloud offering with the introduction of two new plans: SonarQube Cloud Enterprise and SonarQube Cloud Team; fully managed SaaS solutions to enhance the quality and security of code.

Lynne Doherty, President of Field Operations at Sonar, joins the SalesStar podcast in this episode to chat about a few proven B2B revenue and GTM practices.

Sonar is ranked among Built In's list of top 22 DevOps companies to know.

Sonar CIO Andrea Malagodi comments on how having a broader skillset can be an advantage in building a software development career.

New SonarQube Cloud plans ensure developer teams can leverage it as their needs grow, to continuously reduce risk exposure at all levels and sustain software performance, growing business through systematic development and delivery.

Sonar launches Enterprise and Team plans for its SaaS offering SonarQube Cloud, empowering development teams of all sizes to deliver Code Quality with confidence.

Sonar is listed as a top 10 solution for its ability to enhance readability of both AI-generated and human-written code, as well as its integration capabilities.

Sonar's VP of Developer Relations and Community comments on using low- or no-code platforms for software development.

SonarQube Server is noted as a popular solution to detect bugs in AI-generated code with its static code analysis capabilities.

Sonar Product Manager, Robert Curlee, covers the importance of quality, secure code and the logic and design patterns of coding principles.

Sonar's CIO, Andera Malagodi, comments on how AI risks can worsen the problem of bad code by not prioritizing quality.

Sonar Principal Engineer Abbas Sabra talks with the host of Software Engineering Daily about static code analysis and C++ and new Sonar features such as auto-configuration.

Sonar's VP of Developer Relations and Community comments on the power of LLMs and Artificial General Intelligence (AGI).

Sonar Developer Advocate Quazi Nafiul takes it back to basics, covering what is an IDE and how to pick the right one.

Sonar Vulnerability Research team unveils four discovered security flaws in Gogs that could permit an attacker to execute arbitrary commands.

While analyzing the Gogs for self-hosting source code, Sonar Vulnerability Research team discovered four flaws that could enable attackers to steal, modify or delete valuable source code.

Sonar product manager John Clifton covers how reducing cognitive complexity is key to helping write secure, maintainable, and reliable code.

Sonar's President of Field Operations, Lynne Doherty, is highlighted among other channel industry leaders, noted for her outstanding record leading high-performing GTM organizations.

Sonar is noted by Built In as a London software company that's driving progress across industries.

How does bad code impact organizations and how can it be overcome? Proactive measures and the right solutions, such as SonarQube Server.

How can technical debt be addressed? With a culture of Code Quality – promote continuous improvement that streamlines workflows and gives stakeholders insight to make informed decisions.

SonarQube Server 10.6 release includes significant changes such as autoscaling in Kubernetes, C and C++ projects are auto-configurable, the ability to run the solution in a FIPS-enforced environment, and more.

Built In recognizes Sonar as a prominent company in Singapore, along with other well-known companies, such as Amazon and Razer.

Open source software fuels the digital world, but how can enterprises manage its risks? Sonar Developer Advocate comments on how open source technologies are the foundations of the digital world.

Two medium-severity vulnerabilities were found in Mailcow by Sonar's Vulnerability Research team.

Sonar Vulnerability Research team discovers two security vulnerabilities in the Mailcow open source mail server suite that could be exploited by malicious actors.

Sonar Head of Developer Relations and Community shares insight around the value of Code Quality in the age of AI.

Sonar Head of Developer Relations and Community discusses how AI can unlock developer bandwidth, but only when generated code is properly checked.

Survey by Docker finds that SonarQube Server is one of the most widely used security tools for application development.

Sonar has furthered its AWS partnership with the integration of SonarQube Cloud to Amazon Code Catalyst, in addition to achieving AWS FTR certification.

SonarQube Cloud is integrated with Amazon CodeCatalyst to help improve the development process for cloud-based applications.

Sonar Head of Developer Relations and Community comments on the need to combine unit testing and static code analysis for better DevOps.

Sonar makes its self-managed solution SonarQube Server available on Google Cloud marketplace, enabling companies to accelerate DevOps transformation in the cloud and more.

SonarQube Server is now available on Google Cloud Marketplace, enabling organizations to accelerate DevOps, modernize software development workflows, and deliver higher-quality, secure applications.

SonarQube Server is listed as a go-to tool for ensuring high-quality code.

SonarQube Server becomes available on Google Cloud Marketplace to support developers in their pursuit of continuous Code Quality, whether human-written or AI-generated.

Recent Sonar updates are highlighted, including SonarQube Server 10.5 and being involved in the Department of Commerce consortium on AI safety.

Sonar President of Field Operations, Lynne Doherty, talks about Sonar's shift from product-led growth to GTM.

Sonar Head of Developer Relations & Community, Peter McKee, comments on the impact of genAI in web development.

Sonar receives recognition as a LEADER in Static Code Analysis by G2.

Sonar is featured for the number of engineering job openings in several departments.

Sonar Head of Developer Relations and Community, Peter McKee, comments on why developers should integrate static code analysis into their workflow to bolster QA efforts.

Sonar's CIO, Andrea Malagodi, discusses Sonar's philosophy and its Code Quality methodology.

Jonathan Vila, Sonar Developer Advocate, covers Spring features that aid in the development process, and why it’s vital to understand the framework's limitations and drawbacks.

Harry Wang, Sonar's VP of Strategic Partnerships, writes about how companies can ensure their software adheres to new standards and legal requirements by looking closely at their source code.

Tariq Shaukat, co-CEO of Sonar, shares his views on AI and the need for companies to have acceptable use-case policies.

Sonar co-CEO, Tariq Shaukat, is quoted on the importance of putting gaurdrails around AI without stifling innovation.

Sonar Developer Advocate Jonathan Vila comments on the necessity of checking code generated by AI before adding it to repositories to ensure the best value is extracted from AI without compromising the codebase.

Sonar's Liz Ryan writes about the importance of proper communication in projects and seven key approaches teams can take.

Lynne Doherty joins Sonar as President of Field Operations.

Lynne Doherty is interviewed about her role as Sonar's President of Field Operations.

Sonar's President of Field Operations, Lynne Doherty, discusses her plans in her role and how joining the Code Quality leader is a 'full circle' moment for her having started her career as a developer.

Strategies businesses can use to prevent scope creep and achieve success for all parties involved.

Sonar's CHRO, Clarissa O'Connell, talks about her role and how she's supporting the company in its mission to change the development world.

Sonar's Head of Developer Relations and Community writes about the need to use coding assistants wisely, being mindful of skill level.

Sonar's CHRO, Clarissa O'Connell, shares how she leads her team and is revamping how HR is done.

Sonar is listed as a cloud company to know.

Sonar's Manish Kapur covers how generative AI coding assistants have the power to transform the development process when used correctly with a Code Quality approach.

Sonar Developer Advocate comments on generative AI coding assistants and the benefits they can bring to developers.

AI code generation is useful, but what's the catch? Sonar's Manish Kapur writes on this and the need for static code analysis.

Sonar Developer Advocate discusses generative AI and the importance of ensuring that all code is analyzed, tested, and reviewed.

In this article, Sonar's Robert Curlee shares why its best to catch secrets at the very beginning of the development workflow (in the IDE), and how Sonar can help.

In this article, Sonar founder and co-CEO Olivier Gaudin gives his thoughts on why AI-generated code must be given the same scrutiny as human-written code.

In this article, Sonar VP of Strategic Partnerships and other industry leaders share their perspectives on the new attestation form for software suppliers introduced by CISA.

In this article, Sonar CIO Andrea Malagodi shares his perspective on AI - alongside other industry leaders - saying how CIOs and CTOs must take the necessary steps to ensure AI-generated code is clean.

Peter McKee, Sonar Head of Developer Relations & Community, shares why unit testing and static code analysis together play a vital role in creating quality software.

In this article, highlights are shared from the Directors Forum in Dallas with speakers, Tariq Shaukat, Sonar co-CEO, and Florin Rotar, Chief AI Officer of Avanade.

Stefan Schiller, Sonar Vulnerability Researcher, details how marrying a “shift left” mentality with the “Clean as You Code” methodology can better satisfy demands on developers and SecOps alike to both work faster, ship more features, and address security issues.

How using static analysis, especially in C++ projects, can help your team achieve success and ensure top quality software.

Peter McKee, Sonar Head of Developer Relations & Community, suggests developers may need to introduce code-scanning tools into their development journey to mitigate potential GenAI coding errors.

Sonar receives inclusion in the Financial Times 1,000, which highlights Europe-based companies showing the strongest revenue growth over a three-year period.

Sonar Head of Developer Relations & Community, Peter McKee, shares his perspective about how AI is an "under-the-covers knowledge foundation."

A look at some of the most significant outsourcing-based pitfalls and how companies can best mitigate them to continue producing high-quality, business-critical software at top speed and lower cost.

Sonar Vulnerability Research Team discovered that one fundamental flaw, tracked as CVE-2024-21726, is at the heart of the issues affecting Joomla's core filter component.

Sonar's CHRO, Clarissa O'Connell, shares her perspective on how middle managers can be supported with the right tools and resources in place.

Sonar's Liz Ryan shares that, while the consequences of bad code can’t be underestimated, they must be mitigated to ensure business success.

As AI code generators gain popularity, Sonar's Peter McKee covers how companies have to put safeguards in place to harness the technology, for boosting productivity and quality outputs.

Sonar Head of Developer Relations & Community, Peter McKee, shares how developer teams must take a shift-left on quality approach, employing both unit testing and static analysis.

In this Tech Trek podcast episode, Tariq Shaukat, co-CEO at Sonar, is interviewed about the impact of software and AI on companies.

SonarQube Server 10.4 was recently released and, between 10.3 and 10.4, 48 new rules and one updated rule were released to help write Code Quality in React applications.

Peter McKee, Sonar Head of Developer Relations & Community, shares how a Clean as You Code approach ensures quality AI-generated code.

Sonar joins over 200 AI stakeholders to support the development and deployment of safe, trustworthy AI.

Sonar is highlighted for its strides in enabling companies to develop Code Quality with its solutions SonarQube for IDE, SonarQube Server, and SonarQube Cloud.

New Sonar CHRO, Clarissa O'Connell, is featured amongst other hires at top Austin-based companies.

Sonar is highlighted amongst other Switzerland based scale-ups for its successful growth as the Code Quality market leader.

Sonar Developer Advocate and JavaScript expert, Phil Nash, covers why nesting ternaries is an issue and what developers can do to eliminate the practice to produce Code Quality.

Sonar Developer Advocate, Jonathan Vila, dives into the most common errors in Java projects.

A critical vulnerability in Jenkins’ built-in CLI, discovered by Sonar's Vulnerability Research team, allows remote attackers to obtain cryptographic keys and execute arbitrary code.

Sonar Vulnerability Research team discovers several security flaws in Jenkins.

Sonar co-CEO Tariq Shaukat discusses the importance of taking a "trust, but verify" approach when using code generated by AI.

Sonar CIO Andrea Malagodi shares how data privacy today is turning into an old challenge with "new clothes" thanks to AI.

What shifting right means and the importance of balancing shift left and shift right

Sonar team members share their perspectives on what is to come this year with DevSecOps trends.

Sonar CIO Andrea Malagodi shares his perspective on what companies should keep in mind for 2024 Data Privacy Week.

Sonar Developer Advocate Phil Nash is quoted on his prediction that this year, the industry will see an overconfidence in GenAI code that will lead to generated AI vulnerabilities.

Sonar co-CEO Tariq Shaukat is quoted on the subject of the need for every company to have an AI acceptable use policy.

Sonar's Head of Developer Relations & Community, Peter McKee, covers how AI is affecting software development and how to mitigate risks with it.

Sonar is highlighted by BuiltIn in the top 100 Best Places to Work in Austin, Tx.

In this article, Sonar and its solutions SonarQube for IDE, SonarQube Server, and SonarQube Cloud are highlighted for their ability to ensure Code Quality.

In this article, recent findings by Sonar's vulnerabilities research team within the widely-used open-source Netgate pfSense firewall solution, are covered.

In this article, Sonar's Head of Developer Relations & Community, Peter McKee, shares his advice on how to support junior developers grow their careers in a remote environment.

In this article, Sonar Developer Advocate Phil Nash shares his prediction for what's to come with AI in 2024.

SafetyDetectives recently interviewed Fabrice Bellingard, the VP of Product at Sonar, delving into the key features of SonarQube for IDE, SonarQube Server, and SonarQube Cloud.

In this article, Sonar's announcement of Secrets Detection for SonarQube for IDE, SonarQube Server, and SonarQube Cloud is covered.

In this article, Sonar Developer Advocate Quazi Nafiul Islam shares his thoughts on the impact of generative AI in the workplace.

In this article, Sonar Developer Advocates share their predictions for 2024 trends.

Sonar researchers with the aid of SonarQube Cloud discovered three flaws impacting pfSense 2.7.0 and older and pfSense Plus 23.05.01 and older.

In this article, Sonar Vulnerability Researcher Stefan Schiller is quoted for his 2024 prediction around hackers leveraging AI.

In this article, the benefits of following Code Quality standards to ensure a reliable, maintainable, and secure codebase are covered.

In this article, Sonar Vulnerability Researcher Thomas Chauchefoin shares his 2024 prediction - AI-Assisted attacks to become more sophisticated and automated.

In this article, several predictions from Sonar team members are highlighted amongst other industry experts on topic such as AI-generated code and cybersecurity.

In this article, the benefits of genAI and drawbacks to consider are covered, and the need to apply Code Quality best practices to AI-generated code.

In this article, the benefits of genAI and drawbacks to consider are covered, and the need to apply Code Quality best practices to AI-generated code.

In this article, several predictions from Sonar team members are highlighted on topics such as genAI, security, and coding languages.

In this article, pros and cons of low code are discussed, and the need to always keep Code Quality best practices in mind.

Sonar is announced as a finalist for the DevOps Dozen Awards in the Best Testing Service/Tool category.

Sonar is included on Futuriom's 50 list of the strongest private companies in key markets for cloud and communications infrastructure.

Sonar's Vulnerability Research team uncovered two critical code vulnerabilities in the personal cloud system CasaOS.

Tariq Shaukat, Sonar co-CEO, speaks with 'Tech Connects' host about how more companies are becoming software companies and the impact of genAI.

Sonar founder and co-CEO, Olivier Gaudin, is quoted about the need for business leaders to prioritize Code Quality as they reflect on Cybersecurity Month.

Sonar Head of Developer Relations and Community, Peter McKee, writes about the need for Code Quality in order to create secure software and decrease bad code.

Sonar Developer Advocate, Phil Nash, details tips and tricks for how to take advantage of TypeScript in JavaScript.

Sonar Vulnerability Researchers Thomas Chauchefoin and Paul Gerste discuss research conducted on the security of Visual Studio Code — the most popular code editor out there.

In this article, Olivier Gaudin - founder and co-CEO of Sonar - is quoted on his perspective that more experienced coders will see the bigger advantages from genAI.

Sonar vulnerability researcher, Stean Schiller, is quoted on JetBrains TeamCity vulnerability, discovered by the Sonar research team.

Sonar Vulnerability Research team discovers two critical security flaws in the open source CasaOS personal cloud software.

Sonar Developer Advocate, Phil Nash, details what developers need to consider about programming languages Carbon, Python, and Hylo.

Sonar receives mention for being a Switzerland-based Unicorn in this Forbes article about the Europe tech start-up landscape.

Olivier Gaudin, founder and co-CEO of Sonar, shares his perspective on Code Quality as it relates to Cybersecurity Awareness Month and the increase of genAI in code development.

In this article, Olivier Gaudin, co-CEO and founder of Sonar, shares why the world needs Code Quality and to adapt a Clean as You Code approach.

Sonar's Olivier Gaudin, co-CEO and founder, and Head of R&D, Johannes Dahse, speak on The Last Watchdog podcast about the importance of Code Quality in speedy software development with quality.

Olivier Gaudin, co-CEO and founder of Sonar, shares his perspective on Code Quality for Cybersecurity Awareness Month.

In this article, SonarQube Server is acknowledged as a great choice for developers needing an open source static application security testing tool to enhance security and code quality.

In this article, Sonar founder and co-CEO - Olivier Gaudin - shares why organizations need to understand and adopt a Clean as You Code approach this Cybersecurity Awareness Month.

In this podcast episode, Sonar researchers Thomas Chauchefoin and Paul Gerste discuss the state of the art of Visual Studio Code's security with Hacker Mind host Robert Vamosi.

In this article, Sonar's Peter McKee writes about how Code Quality methods reduce workload while ensuring security, compliance, and the highest code quality.

In this article, Sonar founder and co-CEO - Olivier Gaudin - makes "a call for Code Quality" as organizations rethink their security this Cybersecurity Awareness Month.

In this article, the SonarQube Server solution is highlighted as a top DevSecOps tool for its support for multiple programming languages to improve code quality and enhance security.

In this article, Sonar is recognized for its accomplishments and success as an innovative company in Austin, Texas.

Sonar researcher Stefan Schiller is acknowledged for discovery of a critical-severity authentication bypass vulnerability in the TeamCity CI/CD server.

In this article, a critical TeamCity vulnerability is detailed, as discovered by Sonar's vulnerability research team.

In this article, Sonar researchers share their discovering of a critical vulnerability in JetBrains TeamCity.

A critical vulnerability in the TeamCity CI/CD server, discovered by the Sonar Vulnerability Research team could allow unauthenticated attackers to execute code and take over vulnerable servers.

Sonar researchers discovered a critical security vulnerability in TeamCity, a popular Continuous Integration and Continuous Deployment (CI/CD) server from JetBrains.

Sonar's appointment of new co-CEO, Tariq Shaukat, is covered in L'Agefi's top three news moments from the week.

Sonar, the Code Quality solution provider, is announcing a new capability for its SonarQube Cloud platform: Zero-configuration, automatic analysis for programming languages C and C++.

New zero-configuration, automatic analysis for programming languages C and C++ within SonarQube Cloud enables GitHub hosted projects to be analyzed in one click, and it works with all compilers.

Sonar announced zero-configuration, automatic analysis for programming languages C and C++ within SonarQube Cloud, enabling C and C++ projects hosted on GitHub to be analyzed by SonarQube Cloud in one click.

The Geneva unicorn has recruited a co-CEO who combines commercial and software skills in order to accelerate its development. Tariq Shaukat was at the helm of the dating app when it debuted on the Nasdaq.

Co-CEO of Sonar, Tariq Shaukat, discusses IPO tech landscape and the importance of growing profitability with durability.

Recently appointed co-CEO of Sonar, Tariq Shaukat, joins Bloomberg Markets "The Close" to discuss his new role and the IPO tech market (at 25-minute mark).

Tariq Shaukat joins Sonar as co-CEO to work alongside Founder and CEO, Olivier Gaudin, to take company through next phase of growth.

Sonar announced that Tariq Shaukat has joined the company as co-CEO and a member of the Board of Directors. The company said Shaukat will lead the company with founder and CEO Olivier Gaudin.

Peter McKee, Head of Developer Relations & Community at Sonar, speaks with TechStrong TV's Alan Shimel about the future of DevOps and the importance of Code Quality.

The cost of generative AI is hitting businesses. Building and training LLMs can be prohibitively expensive. Sonar's Olivier Gaudin says “LLMs get bigger, not smarter."

Sonar CMO Manish Gupta covers the Biden National Cybersecurity Strategy, how it places more legal responsibility on software makers, and how Code Quality can help.

In this video interview, Sonar CEO & co-founder Olivier Gaudin discusses Code Quality strategies for addressing dirty code and legacy issues, and how to increase output and quality of DevOps teams.

In this interview, Sonar CEO & co-founder Olivier Gaudin, and Sonar Head of R&D Johannes Dahse, discuss the announcement of deeper SAST and what is Code Quality.

In this article, vendors showcasing new products are highlighted. Sonar's deeper SAST is featured at number 12.

In this article, Help Net Security takes a look at the most interesting products from the week of August 4th, including Sonar's deeper SAST.

Sonar announced a significant advancement of its Code Quality offering - developers can now automatically discover and fix code security issues with deeper SAST.

In this article, Sonar's announcement of deeper SAST is featured. The update to the Sonar platform makes it easier for developers to write Code Quality.

Sonar announced a significant advancement of its Code Quality offering – developers can now automatically discover and fix code security issues arising from interactions between user source code and third-party, open-source libraries.

Sonar's Head of Developer Relations, Peter McKee, covers how a Clean as You Code approach ensures quality cod is developed quickly, without having to backtrack to remediate old errors.

Sonar VP of Product, Fabrice Bellingard, details how embracing Code Quality principles enables organizations to enhance the efficiency of their DevOps workflow.

Three vulnerabilities in Apache OpenMeetings could be exploited by attackers to take over an administrator account and execute arbitrary code remotely, according to Sonar's vulnerability research team.

Sonar vulnerability researchers Thomas Chauefoin and Stefan Schiller receive Pwnie Awards nominations for research on vulnerabilities in Check_mk, and the security of the PHP supply chain and Composer.

The Cyberwire Daily Briefing newsletter highlights new original research from Sonar that spotlights the millions of dollars businesses lose when they fail to implement an optimal approach for software development.

Sonar threat researcher Stefan Schiller shares insights on the three security vulnerabilities found in Apache OpenMeetings.

Sonar research team finds multiple security flaws in Apache OpenMeetings that could be potentially exploited to seize control of admin accounts and run malicious code on susceptible servers.

Sonar VP of Products, Fabrice Bellingard, shares how embracing Code Quality practices guarantees that developers can create modern apps that deliver.

Sonar Vulnerability Researcher, Thomas Chauchefoin, writes about several SQL injection vulnerabilities discovered in Soko, a software deployed on the Gentoo Linux infrastructure.

Sonar research team uncovers multiple SQL injection vulnerabilities in Gentoo Soko that could lead to remote code execution (RCE) on vulnerable systems.

Sonar researchers identify two SQL injection vulnerabilities in Gentoo Soko that can be exploited by a remote attacker to execute arbitrary code on vulnerable systems.

Sonar's Head of R&D, Johannes Dahse, details two ways that Code Quality can help address current challenges developers face today.

Sonar CEO Olivier Gaudin brings up some points to consider as generative AI becomes part of the software development cycle.

In this article, Sonar's Head of R&D covers how to truly shift left, developers must be able to clean-as-they-code.

In this article, Sonar's R&D team warns that newly patched vulnerabilities in the Pimcore platform bring code execution risks.

In this article, Sonar's R&D team provides an overview of content types and how a minor error resulted in a vulnerability in Odoo.

BuiltIn Austin asked SonarSource, LogicMonitor, Tecovas, Episode Six and Semrush how they make new hires feel welcome.

In part three of this series for the Agile Noir podcast, Lance Kind speaks with Sonar VP of Products, Fabrice Bellingard about the importance of code quality and how SonarQube Server can help developers maintain Code Quality.

In this article, SonarSource's R and D team discusses how they discovered a code vulnerability that allows you to truncate arbitrary files to execute arbitrary commands.

This Austin company is building out a team of tech professionals who are passionate about Code Quality.

In part two of this series for the Agile Noir podcast, Lance Kind speaks with Sonar VP of Products, Fabrice Bellingard about how SonarQube Server helps developers clean their code.

In part one of this series for the Agile Noir podcast, Lance Kind speaks with Sonar VP of Products, Fabrice Bellingard about why developers have their code analyzed by SonarQube Server.

In this article, Sonar's research and development team presents the root cause analysis of two Cross-Site Scripting bugs.

Employee burnout is common in the tech industry, especially for developers. In fact, 83% of software developers feel burnt out from their work and of those, nearly half of them feel...

Thousands of US organizations are running on outdated software. This kind of failure to address technical debt is a recipe for a disaster – and it’s already costing trillions. Clean as You Code to the rescue.

Check out this interview with Manish Gupta, CMO at SonarSource, a leading provider of Code Quality solutions. The interview covers the company’s story, the benefits of using Code Quality when building websites, and what’s in the future of coders with the recent developments in AI technology.

Organizations have long realized how important their software is to their business. But they’re now fully realizing just how critical their software’s source code is. Sonar's CEO, Olivier Gaudin, explains.

Sonar has launched SonarQube Server 9.9 Long-Term Support (LTS) that empowers organizations to achieve the Code Quality state securely and at scale.

Sonar has launched SonarQube Server 9.9 Long-Term Support (LTS). The new release empowers organizations to achieve the Code Quality state quickly, securely, and at scale.

SonarQube Server 9.9 LTS offers accelerated pull request analysis, support for building and deploying secure cloud-native applications, sophisticated enterprise-grade capabilities, and many innovations related to the detection engine and contextual education.

Sonar’s latest 9.9 LTS release introduces key capabilities to enable enterprises to build better software in a sustained manner - with accelerated pull request analysis, support for building and deploying secure cloud-native applications, sophisticated enterprise-grade capabilities, and many innovations related to the detection engine and contextual education.

Sonar’s release of SonarQube Server 9.9 Long-Term Support (LTS) aims to help organizations clean their code quickly with accelerated pull request analysis, support for building and deploying secure cloud-native applications, and more.

Employee burnout is very common in the technology industry, especially for developers. However, companies can avoid developer burnout with the power of Code Quality practices, explains Fabrice Bellingard, VP of products at SonarSource.

Many tools and platforms are available in the programming world, and here’s one you should add to your toolbox: SonarQube Server. The following key features of SonarQube Server will help you to overcome your coding difficulties and improve your programming skills.

Announcing record growth in developer and enterprise customer adoption in FY22, Sonar has added 5,000 paying customers in 11 months, supporting 21,000 enterprise customers including over 75% of Fortune 100 and nearly half of Fortune 500 companies.

Over the past couple of years, developers have been increasingly targeted by attackers, with dozens of events occurring. These bad actors are targeting devs with the tools they depend on to build code.

Listen as Manish Gupta, Chief Marketing Officer at Sonar, talks about creating intent-based campaigns to get your message across to audiences that are increasingly sensitive to overused marketing ploys.

Watch as Stefan Schiller, a vulnerability researcher at SonarSource, explains how SonarSource determined an attacker can escalate to the Checkmk automation user by exploiting an authenticated arbitrary file read in NagVis.

Industry experts offer thoughtful, insightful, and often controversial predictions on how DevOps and related technologies will evolve and impact business in 2023 - including source code as a key strategic asset.

Dart and Flutter are finally getting their day as more software engineers explore using Flutter for mobile app development.

Johannes Dahse, Head of R&D at Sonar, explains a Remote Code Execution vulnerability (CVE-2022-30129) that was discovered in one of the most popular IDEs: Visual Studio Code.

CEO of Sonar, Olivier Gaudin, speaks to console.dev about getting into software, the beginnings of Sonar, the company structure, development challenges, tools, Code Quality, and more!

Phil Nash explains that, despite popular belief, Google’s open source Carbon programming language is not a strict replacement for C++. The important distinction is that it is intended to be used alongside C++.

The Java development team looks at the evolution of hardware and software to innovate and maintain its relationships with the developer community, and insights from the 2022 JavaOne conference.

Every year, thousands of code vulnerabilities are discovered, patched, and publicly disclosed to improve security for current and potential users. What can developers do to write better code that prevents vulnerabilities from entering their apps and services in the first place?

Watch as Phil Nash, one of the original authors of the C++ test framework and a software engineer for SonarSource, explains how the Carbon programming language created by Google intertwines with C++

The leading platform for Code Quality will grow its user community and customer base across the entire region including ASEAN, ANZ, South Korea, China, and India.

Viele Entwickler nutzen Python und vertrauen darauf, dass es einen soliden Security-Level bietet.

Technical details have emerged on a high-severity vulnerability affecting certain versions of the Zimbra email solution that hackers could exploit to steal logins without authentication or user interaction.

As a tech engineer, it is vital to have access to the right tools so you can create innovative products that make our lives easier. This blog post will discuss five development tools that every tech engineer should access!

Sonar, whose technology detects reliability and vulnerability issues in code, announced a funding round leading to a $4.7 billion valuation.

Sonar intends to use the funds to double its salesforce this year and expand the company's marketing team across its international offices...

L'entreprise informatique genevoise Sonar a annoncé une capitalisation de 4,7 milliards de dollars, avec l'arrivée de nouveaux investisseurs américains.

Sonar, which operates its U.S. headquarters in Austin, says it is gearing up for growth in Austin after landing a significant infusion of capital...

The United States Cybersecurity and Infrastructure Security Agency (CISA) this week expanded its Known Exploited Vulnerabilities Catalog with two critical flaws in the Zabbix enterprise monitoring solution.

Discovered by Sonar vulnerability researcher Simon Scannell, the vulnerability has existed in the Horde webmail app since late 2012...