DevOps & Monitoring2/32 frameworks
SonarQube
Static code analysis and code quality/security platform, by Sonar (SonarSource).
At a glance
- Category
- DevOps & Monitoring
- Frameworks certified
- 2 of 32
- Data last verified
- September 2026
- Comparisons
- 0
✓ 2 of 32 frameworks
Security & General Standards
Privacy & Data Transfer
Emerging & Strategic
✓ Certified~ Partial / conditional— Not certified? Not publicly documented
Common questions
Quick answers on the certifications buyers ask about most.
Yes. SonarQube holds a SOC 2 Type II report, per its public trust center documentation.
Not publicly documented.
Not publicly documented.
Is this data outdated?
Spotted an error or a recent change in SonarQube's posture? Submit a correction.