Sonar's latest blog posts
Welcoming Gitar to Sonar
Sonar has acquired Gitar, adding a new, critical layer to its multilayer, zero-trust code verification platform. Gitar is an AI code review solution, and it doesn’t just flag issues; it also generates the fix, validates it against the CI, and commits to the branch.
Category
Introducing SonarQube Hunter Agent (beta)
Close the security logic gap with SonarQube Hunter Agent. Automate your whitebox code audits to find broken access control & business logic flaws instantly.
Read article >
More than just data: The hidden security risks in Jupyter notebooks
Are your data science tools safe? Sonar researchers uncover vulnerabilities leading to code execution in JupyterLab Desktop and PyCharm.
Read article >
SonarQube plugins bring trusted verification
Eliminate verification debt with plugins & how to secure AI coding agents across Claude, Copilot, and Cursor using SonarQube. Reduce code outages by up to 44%.
Read article >
Introducing Sonar Vortex and the SonarQube Remediation Agent
Sonar Vortex guides and verifies AI agent output in real time. SonarQube Remediation Agent is now GA. 92% fewer issues. Up to 36% lower token costs.
Read article >
Cut your coding agent's cost with Sonar Vortex
New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more efficiently.
Read article >
Model-agnostic AI is key to business continuity as models keep changing
In a fast-moving AI market, model-agnosticism is discussed as a technical preference. It sounds like an architecture choice: avoid vendor lock-in, keep interfaces flexible, support multiple providers, route tasks based on cost, latency, or capability.
Read article >
Get new blogs delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.