Sonar (@SonarSource) header
Sonar (@SonarSource) profile picture

Sonar

@SonarSource

Trusted by 7M developers, our @SonarQube solutions (Server, Cloud, for IDE) cover your code quality and security needs –AI-generated or written by developers 🚀

 Austin, Texas
sonar.com
Joined January 2013
  • Tweets3.5K
  • Following1.2K
  • Followers11.1K
1.5KMedia
Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)Photo by Sonar (@SonarSource)
Replying to @NasdaqExchange
@NasdaqExchange 🚀 🚀 🚀
2
5
368
Small pull requests are easier to understand, yet a steady stream asks a lot of a team's attention. Simon Vane, Staff Engineer at @MKOPAGlobal joins @leantomato on The Next Commit to talk contextual AI review. Listen: ow.ly/Ir5K5102G90 Read: ow.ly/Ik6m5102G91
110
4 for 4 on bulk import support ✅ Administrators can now import every repository in an @AzureDevOps or @Bitbucket organization into SonarQube Cloud in a single action, matching the bulk import experience already available for @github and @gitlab. sonarsource.com/blog/sonarqu…
SonarQube Cloud Bulk Import | Azure DevOps & Bitbucket

SonarQube Cloud Bulk Import | Azure DevOps & Bitbucket

SonarQube Cloud now bulk imports all repositories from Azure DevOps and Bitbucket, matching GitHub and GitLab. See what’s new and how to get started.

sonarsource.com
252
I think a tsunami of security vulnerabilities is coming. CVEs published per month: - Jan 2026: 4,302 - Sep 2026: 14,934 That’s one every 2.9 minutes, and 3.5x September 2025. Q3 alone had more CVEs than any full year before 2024. From January through September, 72,802 CVEs were published. That’s already 51% more than all of 2025. With so many new vulnerabilities, a lot of your exposure comes from code you didn’t write: open source dependencies, build pipelines and AI tools. I wrote a blog post covering how @SonarSource can help you reduce supply chain risk: sonarsource.com/blog/why-you…
Image from Manish Kapur (@kapmani)
1
2
170
Say hello to the newest member of the Sonar team, Dr. David Knott! David joins Sonar as a Senior Advisor, bringing his experience as former CTO of the UK Government and Chief Architect at HSBC to help guide our next phase of growth. Details: sonarsource.com/company/pres…
Sonar Welcomes David Knott as Senior Advisor

Sonar Welcomes David Knott as Senior Advisor

Sonar, the global leader in agentic code governance and verification, today announced that Dr. David Knott has joined the company as a Senior Advisor. Dr. Knott will advise CEO Tariq Shaukat and...

sonarsource.com
3
240
A big thank you to our AIE CODE Platinum sponsors: @awscloud, @cognition (Devin), @databricks, @ExaAILabs, @FactoryAI and @SonarSource. You help bring the AI engineering community together. Nov 10–12, San Francisco. Apply: ai.engineer/code
AI Engineer Code Summit graphic introducing its Platinum sponsors. Logos for AWS, Devin by Cognition, Databricks, Exa, Factory, and Sonar appear in two rows on a black background. The footer says Join us at ai.engineer/code.

ALT AI Engineer Code Summit graphic introducing its Platinum sponsors. Logos for AWS, Devin by Cognition, Databricks, Exa, Factory, and Sonar appear in two rows on a black background. The footer says Join us at ai.engineer/code.

1
2
1
6
1,927
Killian wishes more people were checking their agent's code before it reaches production. We agree. That's where Sonar Vortex comes in 👀 🌀 Learn more about verifying agentic code with Sonar Vortex: sonarsource.com/products/son…
2
234
Agents tend to do better work on well-designed code 💡 Changes land more easily, and existing behavior holds. Simon Vane, Staff Engineer at @MKOPAGlobal, joins @leantomato on The Next Commit to explore the foundation agents need for success. Listen: thenextcommit.substack.com/p…
1
262
Join Sonar at AI DevCon to learn how to design evaluations for production-quality code. Joe Tyler, Lead AI Researcher, will walk through how we built a custom benchmark to compare models, agents, tools, and configurations against the kinds of work developers actually do.
Image from Sonar (@SonarSource)
2
281
Use JOSEPHK30 to knock 30% off your ticket: luma.com/aidevcon-nyc2026?co…
AI DevCon NYC · Luma

AI DevCon NYC · Luma

AI DevCon is heading back to NYC! The best place to master agentic coding. For the developers and teams building with agents. Three days in Brooklyn for the…

luma.com
84
Your front-row seat for the shift in how software gets built 🪑 After months on the road, the SonarQube World Tour is nearly at it's final stop. This year’s run featured answers on how to embrace AI’s speed, without losing confidence in what you ship. Thanks for coming out!
4
323
Want to learn how the @gitarcode verification agent helps you ship w/ confidence at agentic speed? Join our upcoming webinars – 30 mins, mostly live product, + Q&A. 🎟️ Save your seat for next week: events.sonarsource.com/regis… ℹ️ More details on the series: events.sonarsource.com/gitar…
Image from Sonar (@SonarSource)
1
3
316
PHP2Shell lives in the PHP runtime, not your application code. SonarQube container scanning helps detect exposure in supported images using distribution-packaged PHP, plus what to check manually. Learn more: sonarsource.com/blog/contain…
Image from Sonar (@SonarSource)
2
5
440
Sonar is a proud launch partner of the @SpaceX Super Intelligence Partner Network 🚀 The program unifies SonarQube and @cursor_ai into a single workflow, so teams can move faster with code confidence. Learn more: x.ai/news/partnernetworkanno…
Image from Sonar (@SonarSource)
1
3
344
Generated volume can overwhelm meaningful human scrutiny. This week on The Next Commit, we talk about about manageable pull requests and multilayered verification. Watch the episode: thenextcommit.substack.com/p… Get the deep dive: thenextcommit.substack.com/p…
1
244
Securing the code an agent writes is one job. Securing the agent itself is another. @leantomato & Shashank Patwardhan, Application Security Lead at @ifxpayments, dig into permissions, verification & human judgment on The Next Commit. Listen + subscribe: thenextcommit.substack.com/p…
1
240
AI agents can write, test, and propose code changes faster than your team can review them. @kapmani breaks down how to build confidence that code in @thenewstack: thenewstack.io/ai-code-confi…
The code confidence gap nobody’s talking about

The code confidence gap nobody’s talking about

AI makes code creation abundant, but code confidence is scarce. Close the confidence gap with guiderails, verification, and auditability.

thenewstack.io
1
1
320
Sonar retweeted
Cassidy (@cassidoo) profile picture
Cassidy
@cassidooOct 19
This issue is sponsored by @sonarsource! Valid code can still leak another user's invoices. SonarQube Hunter Agent hunts those intent flaws (access control, biz logic, auth/sessions), validates them, & drops them into SonarQube w/ a plain explanation. fandf.co/4dC6uRl
1
4
1,468
Sonar retweeted
JFrog (@jfrog) profile picture
JFrog
@jfrogOct 15
Speed alone does not create software that is secure, reliable, or maintainable. Join Tom Howlett from @SonarSource at #swampUP Europe in Barcelona for a practical session on AC/DC: the Agent Centric Development Cycle. Learn how to build an AI-enabled software factory that moves at agentic speed without sacrificing enterprise quality or control. Join the swampUP waitlist: bit.ly/4mEpVuk #swampUP #DevSecOps #AI #AgentSecOps #TrustedIntelligence
The image is a promotional graphic for JFrog's 2026 swampUP event in Barcelona, occurring from October 20-22. The headline reads "Agentic Speed, Enterprise Quality: Building a trustworthy agent centric development cycle." A button labeled "Register Today" is featured. There is also a person named Tom Howlett, identified as Director of AI Engineering Engagement at Sonar, accompanied by a cityscape silhouette and glowing lines.

ALT The image is a promotional graphic for JFrog's 2026 swampUP event in Barcelona, occurring from October 20-22. The headline reads "Agentic Speed, Enterprise Quality: Building a trustworthy agent centric development cycle." A button labeled "Register Today" is featured. There is also a person named Tom Howlett, identified as Director of AI Engineering Engagement at Sonar, accompanied by a cityscape silhouette and glowing lines.

1
2
326
Confidence in agent-written code comes from the system around the agent 🤖 This week on The Next Commit, @leantomato and Matt Erman dig into the process, checks and fundamentals that keep developers in charge. Listen: thenextcommit.substack.com/p… Deep dive: thenextcommit.substack.com/p…
1
3
299
Before you merge the next AI written PR. Tomorrow, @kapmani of @SonarSource joins @addyosmani on reviewing and testing AI code. AI Engineer New York. Leadership Track. Oct 14, 11:30 AM ET. Sutton Room. Save the session: ai.engineer/nyc/2026/schedul… #AIEngineerNY
AI Engineer New York Classic duo card in black and champagne. Tomorrow, Leadership Track. Who verifies the software factory? Before you merge the next AI written PR. Wednesday, October 14, 2026, 11:30 AM Eastern, Sutton Room. Official portraits show Manish Kapur, VP of Product Marketing and Developer Relations at Sonar, and Addy Osmani, Member of Technical Staff at Anthropic. The original Sonar logo is labeled Platinum sponsor. Sheraton New York Times Square. Event dates October 12 to 14, 2026. ai.engineer/nyc.

ALT AI Engineer New York Classic duo card in black and champagne. Tomorrow, Leadership Track. Who verifies the software factory? Before you merge the next AI written PR. Wednesday, October 14, 2026, 11:30 AM Eastern, Sutton Room. Official portraits show Manish Kapur, VP of Product Marketing and Developer Relations at Sonar, and Addy Osmani, Member of Technical Staff at Anthropic. The original Sonar logo is labeled Platinum sponsor. Sheraton New York Times Square. Event dates October 12 to 14, 2026. ai.engineer/nyc.

3
2
17
3,457
Load more