Sonar to Improve the Quality of AI-Generated Code, Provide Automated Fix Recommendations
3.10.2024 16:00:00 EEST | Business Wire | Press release
Sonar, the leading Clean Code solution provider, today announced two new product capabilities for today’s AI-driven software development ecosystem. These new capabilities are designed to support better software development in two critical and distinct ways – Sonar AI Code Assurance and Sonar AI CodeFix improve the quality of code produced by generative AI and enhance Sonar’s offering with AI to deliver a better developer experience, respectively. Both capabilities deepen Sonar’s commitment to the delivery of high-quality, secure code and increasing developer productivity.
This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20241003439224/en/
Sonar introduces AI Code Assurance and AI CodeFix to improve the quality of code produced by generative AI. (Photo: Business Wire)
AI Code Assurance helps organizations ensure the quality of AI-generated code by thoroughly analyzing the codebase for issues, ensuring that projects using AI tools to generate code meet high standards of quality and security. Today, bad code is already estimated to cost businesses more than a trillion dollars, making it critical for AI-generated code, which promises to increase the volume of code written, to be comprehensively checked for quality and security issues.
“AI is transforming the way developers work, streamlining processes, and reducing the toil associated with writing code. As the adoption of AI coding assistants grows, however, we are seeing a new issue emerge: code accountability. AI-generated code needs review by developers, but accountability for doing this is increasingly diluted. As a result, we’re seeing the review step frequently being shortchanged,” said Tariq Shaukat, CEO of Sonar. “With AI Code Assurance, we’re helping organizations ensure that AI written code receives the high level of quality and security review that you would expect from your developers.”
AI CodeFix allows developers to seamlessly resolve issues detected by Sonar's code analysis engine with a single click, directly within their workflow. The AI-powered fix recommendations help streamline developer workflows, speed up issue remediation, and improve the developer experience. As leading research has established, developer experience improves with the automation that AI provides. For example, McKinsey reported that developers using generative AI tools in their work stream are “twice as likely to report overall happiness, fulfillment, and a state of flow” than those who aren’t.
“AI CodeFix helps developers streamline their workflow and ramp up their productivity. Rather than switching between solutions or manual efforts, we’re putting remediation options for Sonar-identified issues right in front of the people working on them – and giving them the ability to fix the issues in an instant. We’re excited to see how our users adopt this capability and better understand how we can further integrate AI into our solutions to improve the developer experience,” said Fabrice Bellingard, VP of Product at Sonar.
The features are currently available for both SonarQube and SonarCloud.
AI Code Assurance for Confidence in Code Quality
With AI Code Assurance for SonarQube and SonarCloud, developers can be confident that their AI-generated code is clean and secure. By implementing the Sonar AI Code Assurance workflow, organizations have the assurance that all code (AI-generated and human-developed) has been thoroughly scanned for issues and that projects leveraging AI tools are meeting high standards of quality and security.
AI Code Assurance capabilities include:
- Project Tagging: Developers can easily tag projects that contain AI-generated code, initiating a comprehensive analysis through the Sonar AI Code Assurance workflow.
- Quality Gate Enforcement: An optimized quality gate for AI-generated code ensures that only code meeting strict quality and security standards is approved for production.
- AI Code Assurance Approved Badge: Projects that pass the quality gate receive a badge signifying that the code has gone through a rigorous AI-ready analysis.
AI CodeFix for Fast Issue Remediation
Fast-paced software development environments require solutions that enhance productivity, reduce time-to-market, and maintain high code quality. Today, millions of Sonar users can detect and fix issues in their code leveraging Sonar’s database of code rules and best practices. Now, at the click of a button, developers can use AI CodeFix to automatically generate solutions to issues in the same SonarQube and SonarCloud user interface where they review issues.
AI CodeFix capabilities include:
- Instant Code Fixes: Minimize manual debugging efforts and increase productivity by automatically generating code fix suggestions.
- Contextual Understanding of Sonar findings: Leverages LLMs to understand code context and provide relevant fixes.
- Seamless Integration: Developers fix issues directly within their IDE using SonarLint connected mode, ensuring a smooth workflow.
- Continuous Learning: Ongoing suggestion improvements based on user feedback
- Multi-Language Support: Supports flagship programming languages such as Java, JS/TS, C#, Python, and C/C++.
AI Code Assurance is now available on SonarQube and will be generally available in SonarCloud by the end of October. AI CodeFix is available for early access in SonarQube Enterprise Edition, SonarQube Data Center Edition, and SonarCloud Team and Enterprise plans.
For more information on the new features, visit our AI features page at https://www.sonarsource.com/solutions/ai/.
About Sonar
Sonar's Clean Code solutions, SonarQube, SonarCloud, and SonarLint, help developers prevent code quality and security issues from ever reaching production. Sonar analyzes all code, regardless of who writes it—your internal team or genAI—resulting in more secure, reliable, and maintainable software. Rooted in the open source community, Sonar’s solutions support over 30 programming languages, frameworks, and infrastructure technologies. Today, Sonar is used by 7M+ developers and 400K organizations worldwide, including the DoD, Microsoft, NASA, MasterCard, Siemens, and T-Mobile.
To learn more about Sonar, please visit: https://www.sonarsource.com/products/all/
View source version on businesswire.com: https://www.businesswire.com/news/home/20241003439224/en/
Contacts
Media
Katie Hyman
Senior PR Manager for Sonar
(707) 291-1469
press@sonarsource.com
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
www.businesswire.com
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Klarna Card reaches 5 million active customers19.3.2026 16:31:00 EET | Press release
Klarna, the global digital bank and payments provider, today announced that the Klarna Card has reached 5 million active customers globally, underscoring rapid adoption as consumers shift towards new forms of payment which provide more control over day-to-day money management. The card draws from the customer's own funds for everyday spending, with the option to spread the cost of a specific purchase, like a large appliance or a flight, when it makes sense to do so. The result is a card that offers genuine spending control without the long-term debt obligations that come with traditional credit cards. The card’s growth is reinforced by Klarna’s membership program. The program offers premium perks such as airport lounge access, travel insurance, and lifestyle subscriptions — without requiring users to take on debt, meet spending thresholds, or revolve balances. By separating everyday spending from rewards, Klarna is challenging the strings-attached model legacy banks have long relied on
Andersen Consulting Expands Technology Platform in France19.3.2026 15:30:00 EET | Press release
Andersen Consulting expands its digital transformation offering through a Collaboration Agreement with Teolia Consulting, a French firm specializing in project and product management, cloud platform engineering, data transformation, and Atlassian suite integration and adoption. Founded in 2014, Teolia Consulting helps organizations achieve digital performance, from agile methodology to time-to-market solutions. The firm’s expertise is focused on delivering integrated strategies that align technology with organizational change. The firm works across industries including banking, insurance, fashion, and retail, empowering clients to strengthen resilience and accelerate digital maturity. “At Teolia Consulting, we believe that true transformation happens when technology and people evolve together,” said Lucienne Jacquet, managing partner of Teolia. “By collaborating with Andersen Consulting, we not only amplify our impact but also gain access to a worldwide organization of like-minded indi
Stonebranch Releases 2026 Global State of IT Automation Report, Revealing Orchestration as the Missing Link for AI Adoption and Trust19.3.2026 15:30:00 EET | Press release
Stonebranch, a leading provider of service orchestration and automation solutions, today released its annual 2026 Global State of IT Automation Report, the company’s most comprehensive research study to date. Based on responses from 402 IT automation professionals spanning C-suite executives to individual contributors across North America, EMEA, Latin America, and APAC, the report provides a detailed, data-driven portrait of how enterprises are investing in, deploying, and deriving value from IT automation in 2026. “This year’s findings highlight an important shift in how organizations approach automation,” said Giuseppe Damiani, CEO of Stonebranch. “Organizations are now building automation as strategic infrastructure — a governed, scalable foundation that spans hybrid environments, operationalizes AI, and delivers automation-as-a-service to thousands of users across the enterprise. The companies that get orchestration right are not just running more efficient IT operations. They are
Perma-Pipe Accelerates Growth with New U.S. Northeast Facility Investment to serve Artificial Intelligence Data Center customers, Provides Middle East Operations’ Update and Concludes the Board’s Review of Strategic Alternatives19.3.2026 15:00:00 EET | Press release
Perma-Pipe International Holdings, Inc. (the “Company”) today announced a strategic expansion initiative focused on accelerating growth through entry into the high-demand U.S. Northeast region. The Company is positioning itself to capitalize on the rapidly expanding Artificial Intelligence (“AI”)-driven data center market in both the United States and international markets while continuing to reinforce its leadership in critical infrastructure solutions. As part of this growth strategy, Perma-Pipe will prioritize investments aimed at expanding its presence in the rapidly evolving AI data center sector. The initiative reflects the Company’s long-term commitment to supporting next-generation technology infrastructure and strengthening its position in the global energy, industrial, and infrastructure markets. Expansion in the U.S. Northeast President & Chief Executive Officer, Saleh Sagr said, “We are excited to announce the expansion of our operations with a new facility in the Northeast
Armis Launches First-of-Its-Kind Benchmark Report Warning of Critical Security Gaps in AI-Native Development19.3.2026 14:00:00 EET | Press release
Armis, the cyber exposure management & security company, is warning that the rapid enterprise adoption of AI-native development is outpacing critical security safeguards, leaving organizations exposed to systemic vulnerabilities. New research from Armis Labs’ Trusted Vibing Benchmark Report, which evaluates 18 leading generative AI models across 31 test scenarios, reveals a 100% failure rate in generating secure code. These vulnerabilities are most prevalent in high-risk areas like memory buffer overflows, design file uploads and authentication systems. Therefore, organizations should immediately implement AI-native application security controls to reduce risk. “The era of vibe coding is here, but speed should not come at the cost of security,” said Nadir Izrael, CTO and Co-Founder of Armis. “Our research finds that the worst offenders are the same ones selling security solutions for the very vulnerabilities their models create. If the industry continues to integrate autonomous code wi
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom