gitar.ai

mx

smtp.google.com

ns

ns-21-b.gandi.net

ns-162-c.gandi.net

ns-44-a.gandi.net

caa

amazontrust.com

awstrust.com

amazonaws.com

amazon.com

amazon.com

letsencrypt.org

amazonaws.com

pki.goog

txt

atlassian-domain-verification=tgIRkgm0i4b9o6KhflXxyue3WBI/XYZUaP8ShjjV6McwRE3k0AKzh3U2Wvi2ILWX

anthropic-domain-verification-emjx87=G7T6bOQ7pO1TYX5cGmwzoPHU0

google-site-verification=baP4awsGMh47yzg3_Lz8hJ2T8FU9ezpoNDz6-tu2cKg

google-site-verification=UZqrMSFWbv7QrcTcKCkGYSVTelKYJ8FV3hdK0Pwh8MQ

apple-domain-verification=9PJOcZaW0gY6UqAn

google-site-verification=Z0ypxGZ7CPHIwGoaqkIbPY6W2PEQ3IDlj8PT-tXx1yc

google-site-verification=Peu3lr8l4uujcwykHdiTDXFwWL56XF6b4ip4rrkaDI4

v=spf1 include:_spf.google.com include:sendgrid.net ~all

dmarc

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@gitar.ai

User-agent: *
Allow: /
Disallow: /*?
Disallow: /*/tag/

# AI Crawlers — explicit allow

User-agent: GPTBot
User-agent: ChatGPT-User
User-agent: Claude-Web
User-agent: Google-Extended
User-agent: Google-CloudVertexBot
User-agent: GoogleAgent-Mariner
User-agent: Gemini-Deep-Research
User-agent: Google-NotebookLM
User-agent: Google-Agent
User-agent: GoogleAgent-URLContext
User-agent: Google-Firebase
User-agent: PerplexityBot
User-agent: Perplexity-User
User-agent: anthropic-ai
User-agent: ClaudeBot
User-agent: Claude-User
User-agent: Claude-SearchBot
User-agent: CCBot
User-agent: BingBot
User-agent: Applebot-Extended
User-agent: Facebookbot
User-agent: Meta-ExternalAgent
User-agent: Meta-ExternalFetcher
User-agent: OAI-SearchBot
User-agent: DuckAssistBot
User-agent: cohere-ai
User-agent: Youbot
User-agent: diffbot
User-agent: AI2Bot
User-agent: AI2Bot-Dolma
User-agent: Bytespider
Allow: /
Disallow: /*?
Disallow: /*/tag/


# AI content policy signal
Content-Signal: ai-train=yes, search=yes, ai-input=yes

Sitemap: https://www.sonarsource.com/sitemap.xml
Host: https://www.sonarsource.com

# www.sonarsource.com llms.txt


> Sonar provides tools for developers to improve code quality and security through continuous static analysis of both human-written and AI-generated code.

For the full discovery file, see: https://www.sonarsource.com/llms-full.txt
For the full discovery file for learn pages, see: https://www.sonarsource.com/learn/courses/llms.txt

## Main Pages

- [Home](https://www.sonarsource.com/): Promote SonarQube as a solution for improving code quality and security.
- [SonarQube Pricing Plans](https://www.sonarsource.com/plans-and-pricing/): Compare subscription plans and pricing for SonarQube, catering to developers and organizations.
- [SonarQube](https://www.sonarsource.com/products/sonarqube/): To provide an industry-leading platform for automated code quality and security analysis.
- [SonarQube Server](https://www.sonarsource.com/products/sonarqube/server/): Review AI code and enforce rigorous standards across your entire enterprise software development lifecycle.
- [SonarQube Cloud Free Tier Signup](https://www.sonarsource.com/products/sonarqube/cloud/signup-free/): Encourage users to sign up for a free tier of SonarQube Cloud for code quality analysis.
- [SonarQube Server](https://www.sonarsource.com/products/sonarqube/): Promote SonarQube for automated code quality and code security reviews to help developers produce better code.
- [MCP Server](https://www.sonarsource.com/products/sonarqube/mcp-server/): To provide a free, local “Model Context Protocol” server that connects SonarQube (Cloud or Server) with AI-native IDEs and AI agents.
- [SonarSweep](https://www.sonarsource.com/products/sonarsweep/): To provide a service that systematically remediates, optimizes, and secures coding datasets used to train coding-capable AI models (LLMs).
- [Free SonarQube Cloud Trial](https://www.sonarsource.com/products/sonarqube/cloud/signup/): Sign up for a free trial of SonarQube Cloud for code analysis.
- [SonarQube Cloud Updates](https://www.sonarsource.com/products/sonarqube/cloud/whats-new/): Highlighting recent updates and features of SonarQube Cloud to enhance user experience.
- [SonarQube Cloud Features](https://www.sonarsource.com/products/sonarqube/cloud/features/): Highlight SonarQube Cloud's enterprise features for code quality and security in software development.
- [SonarQube for IDE](https://www.sonarsource.com/products/sonarqube/ide/): Promotes SonarQube for IDE, a tool for real-time code quality and security analysis.
- [Contact Enterprise Sales](https://www.sonarsource.com/products/sonarqube/cloud/contact-enterprise-sales/): Facilitate inquiries for SonarQube Cloud Enterprise sales and information.
- [SonarQube Cloud Code Quality](https://www.sonarsource.com/products/sonarqube/cloud/: Promotes SonarQube Cloud, a SaaS solution for ensuring code quality and code security in software development.
- [SonarQube Cloud Roadmap](https://www.sonarsource.com/products/sonarqube/cloud/roadmap/): Outline upcoming features and updates for SonarQube Cloud, inviting user feedback on priorities.
- [Advanced Security](https://www.sonarsource.com/products/sonarqube/advanced-security/): Solutions for the secure use of open-source code, including advanced Static Application Security Testing (SAST) and Software Composition Analysis (SCA).
- [Download SonarQube](https://www.sonarsource.com/products/sonarqube/downloads/): To provide download options for different SonarQube Server editions, including Community, Developer, Enterprise, and Data Center.
- [Download Previous SonarQube Server Versions](https://www.sonarsource.com/products/sonarqube/downloads/historical-downloads/): To provide information and download links for historical versions of SonarQube Server.
- [SonarQube Long-Term Active Download](https://www.sonarsource.com/products/sonarqube/downloads/lts/): To discuss the SonarQube Long-Term Active (LTA) version and its benefits for large organizations.
- [What's new in SonarQube](https://www.sonarsource.com/products/sonarqube/whats-new/): To provide updates and news on the latest features and improvements in SonarQube Server releases.
- [Gitar](https://www.sonarsource.com/products/gitar/): Gitar keeps going, committing fixes, diagnosing CI failures, and iterating until your pipeline is green and the PR is ready to merge.
- [Sonar Vortex](https://www.sonarsource.com/products/sonar-vortex/): Sonar Vortex injects the right project context and constraints before the first line of code, then verifies every change in real time with SonarQube's algorithmic analysis.
- [SonarQube Remediation Agent](https://www.sonarsource.com/products/sonarqube/remediation-agent/): The agent fixes hundreds of issues in parallel, re-scans every fix with Sonar's analysis engine, and opens pull requests for your team to review.
- [SonarQube Hunter Agent](https://www.sonarsource.com/products/sonarqube/hunter-agent/): An AI-powered agent that runs a deep analysis of your SonarQube projects, hunting broken access control, business logic, and authentication flaws.
- [SonarQube CLI](https://www.sonarsource.com/sonarqube/cli/): Scan for secrets, integrate Claude Code, and manage SonarQube issues from the command line.
- [Agent Centric Development Cycle](https://www.sonarsource.com/agent-centric-development/): Step-by-step guides for wiring AC/DC into your actual agent setup, organized by what you’re trying to accomplish, not by product.



## Solutions

- [Advanced SAST Solution](https://www.sonarsource.com/solutions/security/sast/): Promotes the Advanced SAST solution for enhancing code security and identifying vulnerabilities in software applications.
- [SonarQube Security Solutions](https://www.sonarsource.com/solutions/security/): Promoting SonarQube's integrated security solutions for ensuring code quality and vulnerability detection in software development.
- [Code Coverage Solutions](https://www.sonarsource.com/solutions/code-coverage/): Evaluate code quality through detailed code coverage metrics and improve overall software reliability and maintainability.
- [Advanced Security Solutions](https://www.sonarsource.com/solutions/security/advanced-security-request/): Promote advanced security solutions for software development to ensure secure code and compliance.
- [Sonar's Open Source Commitment](https://www.sonarsource.com/solutions/commitment-to-open-source/): Promoting Sonar's dedication to open-source solutions and engaging with the developer community for continuous improvement.
- [Code Review Tool and Solutions](https://www.sonarsource.com/solutions/code-review/): To promote SonarQube as a comprehensive tool for improving code quality and security through effective code reviews.
- [AI Code Review Tool and Solutions](https://www.sonarsource.com/solutions/code-review/ai): To promote SonarQube as a comprehensive tool for improving ai code quality and code security through effective ai code reviews.
- [Automated Code Review Tool and Solutions](https://www.sonarsource.com/solutions/code-review/automated): To promote SonarQube as a comprehensive automated tool for improving code quality and security through effective automated code reviews.
- [AI CodeFix Solutions](https://www.sonarsource.com/solutions/ai/ai-codefix/): Promotes AI CodeFix solutions for accelerated code issue resolution with one-click AI recommendations.
- [Developers tools](https://www.sonarsource.com/solutions/for-developers/): Empower developers to write better, quality code through continuous feedback and quality assurance tools.
- [Software Composition Analysis](https://www.sonarsource.com/solutions/security/sca/): Promote software composition analysis for identifying vulnerabilities and ensuring compliance in third-party dependencies.
- [Software Development Use Cases](https://www.sonarsource.com/solutions/use-cases/): To showcase software development use cases and solutions for improving code quality and managing technical debt.
- [Enterprise Software Solutions](https://www.sonarsource.com/solutions/for-enterprise/): Promote Sonar's solutions for secure and efficient enterprise software development.
- [Manage Technical Debt](https://www.sonarsource.com/solutions/reduce-technical-debt/): Promote strategies and solutions to manage technical debt and enhance software development quality and efficiency.
- [AI Code Assurance Solutions](https://www.sonarsource.com/solutions/ai/ai-code-assurance/): Promote AI Code Assurance solutions for high-quality and secure AI-generated code validation.
- [AI Code Quality Solutions](https://www.sonarsource.com/solutions/ai/): Promote AI solutions for quality assurance in code development.
- [Advanced Secrets Detection](https://www.sonarsource.com/solutions/secrets-detection/): To promote Sonar's advanced secrets detection solutions that protect source code from security vulnerabilities.
- [DevOps Transformation Solutions](https://www.sonarsource.com/solutions/devops-transformation/): Promote tools for enhancing code quality and efficiency in DevOps transformation using Sonar products.
- [Infrastructure as Code Security](https://www.sonarsource.com/solutions/infrastructure-as-code/): Promotes a solution for analyzing code quality and security in Infrastructure as Code environments.
- [Reduce Outsourcing Risks](https://www.sonarsource.com/solutions/reduce-outsourcing-software-development-risk/): Help organizations minimize risks associated with outsourcing software development by enforcing standardized coding practices.
- [Secure By Design Code](https://www.sonarsource.com/solutions/secure-by-design-code/): Promoting secure software development practices to reduce risks and integrate security into the coding lifecycle.
- [Validate AI code for security and quality](https://www.sonarsource.com/solutions/ai-code-quality/): Tools and methodologies to ensure that AI-generated code meets security and quality standards.
- [Developer security](https://www.sonarsource.com/solutions/developer-security/): Strategies and tools to secure applications and prevent vulnerabilities throughout the development lifecycle.
- [Automated code review](https://www.sonarsource.com/solutions/automated-code-review/): A process that ensures code is secure and of high quality through automated checks and balances.
- [Compliance reporting](https://www.sonarsource.com/solutions/compliance-and-reporting/): Automates the proof of code compliance to meet regulatory and organizational standards.
- [SDLC governance](https://www.sonarsource.com/solutions/code-governance/): Aligns AI and developer standards to ensure compliance and quality throughout the Software Development Life Cycle (SDLC).
- [Mobile Developers](https://www.sonarsource.com/solutions/mobile-developers/): Help mobile developers find and fix bugs, vulnerabilities, and code quality issues for Android and iOS projects with instant IDE feedback and audit-ready compliance reports. 
- [Platform Engineering](https://www.sonarsource.com/solutions/platform-engineering): Enable platform engineering teams to standardize tools, automate quality checks, and boost developer productivity, integrating AI-driven remediation for secure code delivery. 
- [SonarQube, SonarQube Cloud, and SonarQube Server CI/CD Integrations](https://www.sonarsource.com/solutions/integrations/): This page explains how Sonar products integrate with major DevOps platforms and CI/CD tools to enhance code quality and security through features like pull request decoration and Quality Gates.
- [OWASP Security Vulnerability Coverage of Top 10, ASVS & CWE 25 with SonarQube & SonarQube Cloud](https://www.sonarsource.com/solutions/security/owasp/): This page details how Sonar's products help address security vulnerabilities based on OWASP Top 10, ASVS, and CWE Top 25 standards, with features like dedicated security reports and early SAST feedback.
- [Code Quality Standards](https://www.sonarsource.com/solutions/quality/): Quality Gates give you a clear go/no-go releasability indicator at every analysis and coalesce the team around a shared vision of quality.
- [Taint Analysis](https://www.sonarsource.com/solutions/taint-analysis/): SonarQube's taint analysis is a deep security scan that tracks user-controllable data through your entire application, to identify sophisticated injection vulnerabilities.
- [Code Architecture](https://www.sonarsource.com/solutions/architecture/): Software architecture is an essential cornerstone of coding, and yet, it is often overlooked. SonarQube’s architecture capabilities help bring software architecture back under your control.
- [Software Development for SMBs](https://www.sonarsource.com/solutions/software-development-for-smbs/): Small and medium business development teams face unique pressure to deliver fast and innovate while managing tight budgets, limited resources, and the complexity of modern stacks. 
- [Supply Chain Security](https://www.sonarsource.com/solutions/software-supply-chain-security/): SonarQube provides the essential code verification layer for your entire software supply chain.
- [Token Optimization](https://www.sonarsource.com/solutions/token-optimization/): Cut AI coding costs with Sonar Vortex using better code context and verification to reduce token waste.
- [Cyber Resilience Act](https://www.sonarsource.com/solutions/cyber-resilience-act/): SonarQube gives teams an automated verification layer to identify vulnerabilities early, enforce security standards, and ship with confidence.


## Industries

- [Healthcare](https://www.sonarsource.com/Industry/healthcare/): Tailored solutions for the healthcare industry to ensure compliance and security.
- [Financial services](https://www.sonarsource.com/Industry/financial-services/): Specialized tools for the financial sector to manage risk and ensure code quality.
- [Retail](https://www.sonarsource.com/Industry/retail/): Solutions designed to enhance security and quality in retail applications.
- [Federal government](https://www.sonarsource.com/solutions/federal-government/): Compliance and security solutions tailored for government applications.
- [Code Quality for Agencies](https://www.sonarsource.com/solutions/public-sector/): Supporting government software development with secure, maintainable code through SonarQube solutions.


## Learn

- [SonarSource Learn](https://www.sonarsource.com/resources/library/): A resource-filled page with programmer & development basics covering essential topics throughout the industry. 
- [SonarSource Guide](https://www.sonarsource.com/resources/library/guide/): A resource-filled guide with covering essential topics throughout the industry. 
- [SonarSource Articles](https://www.sonarsource.com/resources/library/article/): Articles covering essential topics throughout the industry. 


## Blog

- [SonarSource Blog](https://www.sonarsource.com/blog/): To share insights and updates on coding practices, security, and AI in software development.


##Knowledge

- [Multi-language Analysis Tools](https://www.sonarsource.com/knowledge/languages/): To provide resources and tools for effective static code analysis across multiple programming languages.
- [Static Code Analysis for Java](https://www.sonarsource.com/knowledge/languages/java/): Promotes static code analysis tools for improving Java code quality, security, and maintainability.
- [Quality TypeScript Code](https://www.sonarsource.com/knowledge/languages/ts/): Promote static code analysis tools for maintaining high-quality and secure TypeScript software.
- [Improve Kotlin Code Quality](https://www.sonarsource.com/knowledge/languages/kotlin/): Promote Sonar's static code analysis tools for improving Kotlin code quality and security.
- [Static Code Analysis for C](https://www.sonarsource.com/knowledge/languages/c/): Highlighting tools and features for static code analysis to improve C programming quality and security.
- [Quality C++ Development](https://www.sonarsource.com/knowledge/languages/cpp/): Promotes static code analysis tools specifically for enhancing the quality and security of C++ code.
- [Quality JavaScript Solutions](https://www.sonarsource.com/knowledge/languages/js/): Promote SonarQube's static code analysis tools for improving JavaScript code quality, security, and maintainability.
- [Quality Python Code Solutions](https://www.sonarsource.com/knowledge/languages/python/): Promote static code analysis tools for improving Python code quality and security.
- [Quality C# Code Solutions](https://www.sonarsource.com/knowledge/languages/csharp/): Promote tools for static code analysis to enhance C# code quality and security.
- [Quality PHP Code Analysis](https://www.sonarsource.com/knowledge/languages/php/): To promote and provide tools for static code analysis in PHP to enhance code quality and security.
- [Terraform Static Code Analysis & Quality Code Language](https://www.sonarsource.com/knowledge/languages/terraform/): This page discusses how Sonar's tools provide static code analysis and "Quality Code" solutions for Terraform, helping to find and fix bugs and security vulnerabilities.
- [Go Static Code Analysis & Quality Code Language](https://www.sonarsource.com/knowledge/languages/go/): This page explains how Sonar's static code analysis tools for the Go programming language help in ensuring Quality, secure, and high-quality code.


##Company

- [About Sonar](https://www.sonarsource.com/company/about/): Showcases Sonar's mission, culture, and commitment to software quality and security.
- [Sonar Resources and Solutions](https://www.sonarsource.com/resources/solution-briefs/): Offers resources and solution briefs to improve code quality and security using Sonar's tools.
- [Contact SonarSource](https://www.sonarsource.com/company/contact/): Facilitate customer inquiries and support requests for SonarSource products and services.
- [SonarSource Support Services](https://www.sonarsource.com/support/): To provide support, resources, and guidance for deploying and maximizing the value of Sonar solutions.
- [SonarSource Partner Ecosystem](https://www.sonarsource.com/company/partners/): Showcases SonarSource's partner ecosystem and opportunities for collaboration in software quality and security solutions.
- [Join Our Team](https://www.sonarsource.com/company/careers/): To recruit passionate individuals for career opportunities at SonarSource.
- [Customer Success Stories](https://www.sonarsource.com/resources/customer-stories/): Showcase customer success stories using SonarQube to enhance code quality and development efficiency.
- [Upcoming Sonar Events](https://www.sonarsource.com/resources/events/): Promote upcoming events related to Sonar and provide registration options for webinars and conferences.
- [Sonar Resources Library](https://www.sonarsource.com/resources/all/): To provide a centralized collection of resources to enhance coding quality and security using Sonar products.
- [Legal Documentation](https://www.sonarsource.com/legal/): Provide legal terms and documentation for SonarSource products and services.
- [White Papers on Code Quality](https://www.sonarsource.com/resources/white-papers/): Offers in-depth articles and white papers on enhancing code quality and security in software development.
- [SonarQube Brand Overview](https://www.sonarsource.com/brand-identity/): To inform about SonarQube's brand identity and product offerings for code quality and security.
- [SonarSource Press Kit](https://www.sonarsource.com/company/press-kit/): To provide a comprehensive press kit with resources for media inquiries regarding SonarSource.
- [Sonar Newsroom](https://www.sonarsource.com/company/newsroom/): To provide news and updates about Sonar's products, initiatives, and achievements.
- [Website Terms of Use](https://www.sonarsource.com/legal/website-terms-of-use/): Defines the terms and conditions for using SonarSource's websites and services.
- [Upcoming Webinars](https://www.sonarsource.com/resources/webinars/): Promotes upc