Business Wire

Sonar to Improve the Quality of AI-Generated Code, Provide Automated Fix Recommendations

3.10.2024 16:00:00 EEST | Business Wire | Press release

Share

Sonar, the leading Clean Code solution provider, today announced two new product capabilities for today’s AI-driven software development ecosystem. These new capabilities are designed to support better software development in two critical and distinct ways – Sonar AI Code Assurance and Sonar AI CodeFix improve the quality of code produced by generative AI and enhance Sonar’s offering with AI to deliver a better developer experience, respectively. Both capabilities deepen Sonar’s commitment to the delivery of high-quality, secure code and increasing developer productivity.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20241003439224/en/

Sonar introduces AI Code Assurance and AI CodeFix to improve the quality of code produced by generative AI. (Photo: Business Wire)

AI Code Assurance helps organizations ensure the quality of AI-generated code by thoroughly analyzing the codebase for issues, ensuring that projects using AI tools to generate code meet high standards of quality and security. Today, bad code is already estimated to cost businesses more than a trillion dollars, making it critical for AI-generated code, which promises to increase the volume of code written, to be comprehensively checked for quality and security issues.

“AI is transforming the way developers work, streamlining processes, and reducing the toil associated with writing code. As the adoption of AI coding assistants grows, however, we are seeing a new issue emerge: code accountability. AI-generated code needs review by developers, but accountability for doing this is increasingly diluted. As a result, we’re seeing the review step frequently being shortchanged,” said Tariq Shaukat, CEO of Sonar. “With AI Code Assurance, we’re helping organizations ensure that AI written code receives the high level of quality and security review that you would expect from your developers.”

AI CodeFix allows developers to seamlessly resolve issues detected by Sonar's code analysis engine with a single click, directly within their workflow. The AI-powered fix recommendations help streamline developer workflows, speed up issue remediation, and improve the developer experience. As leading research has established, developer experience improves with the automation that AI provides. For example, McKinsey reported that developers using generative AI tools in their work stream are “twice as likely to report overall happiness, fulfillment, and a state of flow” than those who aren’t.

“AI CodeFix helps developers streamline their workflow and ramp up their productivity. Rather than switching between solutions or manual efforts, we’re putting remediation options for Sonar-identified issues right in front of the people working on them – and giving them the ability to fix the issues in an instant. We’re excited to see how our users adopt this capability and better understand how we can further integrate AI into our solutions to improve the developer experience,” said Fabrice Bellingard, VP of Product at Sonar.

The features are currently available for both SonarQube and SonarCloud.

AI Code Assurance for Confidence in Code Quality

With AI Code Assurance for SonarQube and SonarCloud, developers can be confident that their AI-generated code is clean and secure. By implementing the Sonar AI Code Assurance workflow, organizations have the assurance that all code (AI-generated and human-developed) has been thoroughly scanned for issues and that projects leveraging AI tools are meeting high standards of quality and security.

AI Code Assurance capabilities include:

  • Project Tagging: Developers can easily tag projects that contain AI-generated code, initiating a comprehensive analysis through the Sonar AI Code Assurance workflow.
  • Quality Gate Enforcement: An optimized quality gate for AI-generated code ensures that only code meeting strict quality and security standards is approved for production.
  • AI Code Assurance Approved Badge: Projects that pass the quality gate receive a badge signifying that the code has gone through a rigorous AI-ready analysis.

AI CodeFix for Fast Issue Remediation

Fast-paced software development environments require solutions that enhance productivity, reduce time-to-market, and maintain high code quality. Today, millions of Sonar users can detect and fix issues in their code leveraging Sonar’s database of code rules and best practices. Now, at the click of a button, developers can use AI CodeFix to automatically generate solutions to issues in the same SonarQube and SonarCloud user interface where they review issues.

AI CodeFix capabilities include:

  • Instant Code Fixes: Minimize manual debugging efforts and increase productivity by automatically generating code fix suggestions.
  • Contextual Understanding of Sonar findings: Leverages LLMs to understand code context and provide relevant fixes.
  • Seamless Integration: Developers fix issues directly within their IDE using SonarLint connected mode, ensuring a smooth workflow.
  • Continuous Learning: Ongoing suggestion improvements based on user feedback
  • Multi-Language Support: Supports flagship programming languages such as Java, JS/TS, C#, Python, and C/C++.

AI Code Assurance is now available on SonarQube and will be generally available in SonarCloud by the end of October. AI CodeFix is available for early access in SonarQube Enterprise Edition, SonarQube Data Center Edition, and SonarCloud Team and Enterprise plans.

For more information on the new features, visit our AI features page at https://www.sonarsource.com/solutions/ai/.

About Sonar

Sonar's Clean Code solutions, SonarQube, SonarCloud, and SonarLint, help developers prevent code quality and security issues from ever reaching production. Sonar analyzes all code, regardless of who writes it—your internal team or genAI—resulting in more secure, reliable, and maintainable software. Rooted in the open source community, Sonar’s solutions support over 30 programming languages, frameworks, and infrastructure technologies. Today, Sonar is used by 7M+ developers and 400K organizations worldwide, including the DoD, Microsoft, NASA, MasterCard, Siemens, and T-Mobile.

To learn more about Sonar, please visit: https://www.sonarsource.com/products/all/

View source version on businesswire.com: https://www.businesswire.com/news/home/20241003439224/en/

Contacts

Media
Katie Hyman
Senior PR Manager for Sonar
(707) 291-1469
press@sonarsource.com

About Business Wire

For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.

www.businesswire.com

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

Enhertu ® Approved in the EU as First Tumor Agnostic HER2 Directed Therapy and Antibody Drug Conjugate for Patients with Previously Treated HER2 Positive Metastatic Solid Tumors29.6.2026 09:30:00 EEST | Press release

Enhertu® (trastuzumab deruxtecan) has been approved in the European Union (EU) as a monotherapy for the treatment of adult patients with unresectable or metastatic HER2 positive (immunohistochemistry [IHC] 3+) solid tumors who have received prior treatment and who have no satisfactory treatment options. Enhertu is a specifically engineered HER2 directed DXd antibody drug conjugate (ADC) discovered by Daiichi Sankyo (TSE: 4568) and being jointly developed and commercialized by Daiichi Sankyo and AstraZeneca (LSE/STO/NYSE: AZN). The approval by the European Commission follows the positive opinion of the Committee for Medicinal Products for Human Use of the European Medicines Agency and is based on results from subgroups of patients with HER2 positive (IHC 3+) tumors across three phase 2 trials, including DESTINY-PanTumor02, DESTINY-Lung01 and DESTINY-CRC02. In DESTINY-PanTumor02, Enhertu demonstrated a confirmed objective response rate (ORR) of 52.3% (95% confidence interval [CI]: 42.6-6

Beerenberg Prevails in Patent Case Against Aspen Aerogels29.6.2026 08:00:00 EEST | Press release

The Korean Patent Court has invalidated three of Aspen Aerogels’ patents related to improved hydrophobic aerogel material. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260628192007/en/ Beerenberg delivers high-end insulation solutions built for performance, reliability, and long-term value. (Photo: Beerenberg) The ruling confirms the conclusion of the Intellectual Property Trial and Appeal Board (IPTAB) that the patents did not meet the necessary requirements for patentability. Beerenberg, which specializes in high-end insulation products, welcomes the court’s decision. “We are pleased that the case has now been concluded and that any uncertainty regarding the infringement claims has been removed,” says CEO Arild Apelthun. About Beerenberg Beerenberg has delivered cost-efficient solutions to a wide range of industrial enterprises for 49 years. The company is one of the leading suppliers of maintenance and modification serv

Seiden Law LLP States: Cambodian Businessman Leak Yim, Wrongfully Accused in Thailand, Seeks Redress in U.S. Court29.6.2026 07:00:00 EEST | Press release

Seiden Law LLP (“Seiden Law”), legal counsel for Mr. Leak Yim, a Cambodia national, and his family, announces the filing of an application in U.S. federal district court in Washington D.C., seeking court-ordered discovery to uncover the false and misleading information that may have led to mistaken prosecution in Thailand of Mr. Yim as well as his unwarranted identification to Congress as being associated with scam centers in Asia. 28 U.S.C. § 1782 (“1782”) provides powerful evidence-gathering remedies, permitting an applicant to obtain evidence in the United States to assist international proceedings. Seiden Law, a U.S. law firm with significant experience in 1782 cases, has filed this application to compel production of documents and sworn testimony from persons in the U.S. that will shed light on the circumstances surrounding recent actions against Mr. Yim. “Mr. Yim and his young family are the apparent victims of guilt by association and political persecution,” said Robert Seiden,

Sultan Bin Ahmed Attends Media Master's Graduation in Spain28.6.2026 19:40:00 EEST | Press release

His Highness Sheikh Sultan bin Ahmed bin Sultan Al Qasimi, Deputy Ruler of Sharjah and President of the University of Sharjah (UOS), attended on Friday, at the University of Barcelona, the graduation ceremony of the first cohort of the Master of Science in Media Entrepreneurship and Digital Innovation programme, first of its kind, offered by the University of Sharjah's College of Communication in partnership with the University of Barcelona and with strategic support from Sharjah Media City (Shams). This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260628429537/en/ Sultan Bin Ahmed attends Media Master's Graduation in Spain (Photo: AETOSWire) His Highness expressed his pride in their achievements and praised the strong partnership between the two universities, which share a commitment to knowledge, excellence and global understanding. His Highness stressed that graduation marks the beginning of a new journey rather than its con

VerSprite Launches Fork and Knife: AI-Driven Threat Modeling and Adversarial Testing Built for the Speed of Modern Software27.6.2026 00:28:00 EEST | Press release

VerSprite, a global leader in risk-based threat modeling and the firm behind the PASTA (Process for Attack Simulation and Threat Analysis) methodology, today announced the general availability of Fork (www.forktm.com), a continuous application threat modeling platform, alongside Knife, an AI-led, human-on-the-loop adversarial testing platform for web applications and web API endpoints. Together, the two products operationalize a new model for product security—one where applications are securely designed, continuously modeled, and actively tested as part of the build process itself. The launch addresses a problem every security leader knows but few tools have solved: threat modeling is essential, never more so than in an AI-driven era, yet it has remained slow, manual, and anchored to frameworks designed for a different threat landscape. The problem: threat modeling matters more than ever—and most tools are stuck in 2005 For two decades, application threat modeling has leaned heavily on

In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.

Visit our pressroom
World GlobeA line styled icon from Orion Icon Library.HiddenA line styled icon from Orion Icon Library.Eye