blog posts
Sonar's latest blog posts
Blog post
Vulnerability Reachability Now Available in SonarQube Advanced Security
Vulnerability Reachability in SonarQube Advanced Security shows which dependency risks your code can reach. Fix what matters first. See how it works.
Read article
Blog post
Sonar's new JS/TS engine: Tracing meaning, not syntax, to hunt down real vulnerabilities
Static analysis grounded in the formal theory of program analysis, rather than in shallow, syntax-driven heuristics, can compute precise data-flow paths through real, unmodified production code.
Read article
Blog post
Which LLM writes the best code? A 2026 comparison
There is no single best LLM for coding. Use this framework to compare AI coding models on your own tasks, and verify AI-generated code with Sonar.
Read article
Blog post
AI coding ROI is a throughput problem, and verification is how you solve it
Measure AI coding ROI by shipped software, not lines generated. Learn how verification cuts rework and cost per change, then get the full guide.
Read article
Blog post
SonarQube Cloud now supports bulk import for Azure DevOps and Bitbucket
SonarQube Cloud now bulk imports all repositories from Azure DevOps and Bitbucket, matching GitHub and GitLab. See what’s new and how to get started.
Read article
Blog post
Acting on the AI Shift in Cyber Risk With Prevention at the Codebase Level
Learn how codebase level prevention helps organizations govern AI generated software with continuous verification, remediation and audit ready evidence.
Read article
Get new blogs delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.