SonarQube Cloud

SonarQube Cloud is the hosted edition of Sonar's code quality and security analysis, formerly known as SonarCloud. It runs as software as a service, so teams get automated checks on pull requests with no infrastructure of their own to maintain, and it targets verification and governance of code in CI/CD workflows.

Sonar presents the product in the context of AI-assisted development, where generated code also needs verification. Its wider portfolio includes SonarQube Server as the self-managed alternative, SonarQube Advanced Security for static and composition analysis, a free IDE extension, a command-line tool, an MCP server and plugins for AI coding tools. Use cases include secrets detection, supply chain security and compliance reporting.

SonarQube Cloud is a commercial, hosted service; teams that need to run analysis on their own servers would use the separate SonarQube Server. It suits development teams that want quality gates on every pull request, and plans are described on Sonar's pricing page.