We believe secure, quality software comes from secure, quality code
Since 2008, we've been devoted to helping developers around the world deliver clean, secure code. At SonarSource, we’re passionate about helping developers deliver the best applications that delight users, while keeping them safe and secure.
For us, delivering a great product starts with transparency. We're an open company, and our rules database is open as well! We put all our static analysis rules on display so you can explore them and judge their value for yourself.
For each rule, we provide code samples and offer guidance on a fix. Even more importantly, we also tell you why. We offer it all here publicly because whether or not you choose to use our analysis - we want to help you and your team write better code!
4800+ Static Analysis Rules across 30 programming languages
Carefully annotated and continuously refined
Up-to-speed with latest frameworks
Benefits shared across dev teams
In your IDE and in your Pipeline, analyze your code against these rules
Open products, open communities, free for open source
IDE extension that lets you fix coding issues before they exist!
Nicely pairs with your existing cloud-based CI/CD workflows