@SonarSource

Trusted by 7M developers, our @SonarQube solutions (Server, Cloud, for IDE) cover your code quality and security needs –AI-generated or written by developers 🚀

 Austin, Texas
sonar.com
Joined January 2013
  • Tweets3.5K
  • Following1.2K
  • Followers11.1K
1.5KMedia
Replying to @NasdaqExchange
@NasdaqExchange 🚀 🚀 🚀
2
5
352
Agents tend to do better work on well-designed code 💡 Changes land more easily, and existing behavior holds. Simon Vane, Staff Engineer at @MKOPAGlobal, joins @leantomato on The Next Commit to explore the foundation agents need for success. Listen: thenextcommit.substack.com/p…
137
Join Sonar at AI DevCon to learn how to design evaluations for production-quality code. Joe Tyler, Lead AI Researcher, will walk through how we built a custom benchmark to compare models, agents, tools, and configurations against the kinds of work developers actually do.
1
166
Use JOSEPHK30 to knock 30% off your ticket: luma.com/aidevcon-nyc2026?co…

AI DevCon NYC · Luma

AI DevCon is heading back to NYC! The best place to master agentic coding. For the developers and teams building with agents. Three days in Brooklyn for the…

luma.com
45
Your front-row seat for the shift in how software gets built 🪑 After months on the road, the SonarQube World Tour is nearly at it's final stop. This year’s run featured answers on how to embrace AI’s speed, without losing confidence in what you ship. Thanks for coming out!
3
241
Want to learn how the @gitarcode verification agent helps you ship w/ confidence at agentic speed? Join our upcoming webinars – 30 mins, mostly live product, + Q&A. 🎟️ Save your seat for next week: events.sonarsource.com/regis… ℹ️ More details on the series: events.sonarsource.com/gitar…
1
3
304
PHP2Shell lives in the PHP runtime, not your application code. SonarQube container scanning helps detect exposure in supported images using distribution-packaged PHP, plus what to check manually. Learn more: sonarsource.com/blog/contain…
2
5
432
Sonar is a proud launch partner of the @SpaceX Super Intelligence Partner Network 🚀 The program unifies SonarQube and @cursor_ai into a single workflow, so teams can move faster with code confidence. Learn more: x.ai/news/partnernetworkanno…
1
3
338
Generated volume can overwhelm meaningful human scrutiny. This week on The Next Commit, we talk about about manageable pull requests and multilayered verification. Watch the episode: thenextcommit.substack.com/p… Get the deep dive: thenextcommit.substack.com/p…
1
240
Securing the code an agent writes is one job. Securing the agent itself is another. @leantomato & Shashank Patwardhan, Application Security Lead at @ifxpayments, dig into permissions, verification & human judgment on The Next Commit. Listen + subscribe: thenextcommit.substack.com/p…
1
237
AI agents can write, test, and propose code changes faster than your team can review them. @kapmani breaks down how to build confidence that code in @thenewstack: thenewstack.io/ai-code-confi…

The code confidence gap nobody’s talking about

AI makes code creation abundant, but code confidence is scarce. Close the confidence gap with guiderails, verification, and auditability.

thenewstack.io
1
1
317
Sonar retweeted
Cassidy
@cassidooOct 19
This issue is sponsored by @sonarsource! Valid code can still leak another user's invoices. SonarQube Hunter Agent hunts those intent flaws (access control, biz logic, auth/sessions), validates them, & drops them into SonarQube w/ a plain explanation. fandf.co/4dC6uRl
1
4
1,417
Sonar retweeted
JFrog
@jfrogOct 15
Speed alone does not create software that is secure, reliable, or maintainable. Join Tom Howlett from @SonarSource at #swampUP Europe in Barcelona for a practical session on AC/DC: the Agent Centric Development Cycle. Learn how to build an AI-enabled software factory that moves at agentic speed without sacrificing enterprise quality or control. Join the swampUP waitlist: bit.ly/4mEpVuk #swampUP #DevSecOps #AI #AgentSecOps #TrustedIntelligence
The image is a promotional graphic for JFrog's 2026 swampUP event in Barcelona, occurring from October 20-22. The headline reads "Agentic Speed, Enterprise Quality: Building a trustworthy agent centric development cycle." A button labeled "Register Today" is featured. There is also a person named Tom Howlett, identified as Director of AI Engineering Engagement at Sonar, accompanied by a cityscape silhouette and glowing lines.

ALT The image is a promotional graphic for JFrog's 2026 swampUP event in Barcelona, occurring from October 20-22. The headline reads "Agentic Speed, Enterprise Quality: Building a trustworthy agent centric development cycle." A button labeled "Register Today" is featured. There is also a person named Tom Howlett, identified as Director of AI Engineering Engagement at Sonar, accompanied by a cityscape silhouette and glowing lines.

1
2
326
Confidence in agent-written code comes from the system around the agent 🤖 This week on The Next Commit, @leantomato and Matt Erman dig into the process, checks and fundamentals that keep developers in charge. Listen: thenextcommit.substack.com/p… Deep dive: thenextcommit.substack.com/p…
1
3
295
Before you merge the next AI written PR. Tomorrow, @kapmani of @SonarSource joins @addyosmani on reviewing and testing AI code. AI Engineer New York. Leadership Track. Oct 14, 11:30 AM ET. Sutton Room. Save the session: ai.engineer/nyc/2026/schedul… #AIEngineerNY
AI Engineer New York Classic duo card in black and champagne. Tomorrow, Leadership Track. Who verifies the software factory? Before you merge the next AI written PR. Wednesday, October 14, 2026, 11:30 AM Eastern, Sutton Room. Official portraits show Manish Kapur, VP of Product Marketing and Developer Relations at Sonar, and Addy Osmani, Member of Technical Staff at Anthropic. The original Sonar logo is labeled Platinum sponsor. Sheraton New York Times Square. Event dates October 12 to 14, 2026. ai.engineer/nyc.

ALT AI Engineer New York Classic duo card in black and champagne. Tomorrow, Leadership Track. Who verifies the software factory? Before you merge the next AI written PR. Wednesday, October 14, 2026, 11:30 AM Eastern, Sutton Room. Official portraits show Manish Kapur, VP of Product Marketing and Developer Relations at Sonar, and Addy Osmani, Member of Technical Staff at Anthropic. The original Sonar logo is labeled Platinum sponsor. Sheraton New York Times Square. Event dates October 12 to 14, 2026. ai.engineer/nyc.

3
2
17
3,451
Sonar CEO @tariqshaukat takes the keynote stage at @aiDotEngineer NYC 🚀 🚀 🚀
1
4
324
Sonar has joined the @OpenAI Daybreak Defense Network, gaining access to OpenAI GPT Cyber Models. These models can now be deployed in multiple products, including SonarQube Hunter Agent. Details: sonarsource.com/company/pres…

Sonar Joins OpenAI Daybreak Cyber Partner Program to Advance Frontier Security

Daybreak models strengthen Sonar’s frontier security offering, helping software engineering teams find and remediate complex risks before attackers can exploit them

sonarsource.com
6
358
Coding agents are almost too knowledgeable 🧠 This week on The Next Commit, @leantomato talks with Matt Erman, Sr. Software Engineer at @Blackboard, about giving direction so agent-written software stays coherent and maintainable. Listen and subscribe: thenextcommit.substack.com/p…
2
230
🗽🏙️🍎🚕🍕 hi @aiDotEngineer!
4
358
“High-risk failures should not depend on someone noticing them; the delivery system should prevent them from progressing.” Thanks to @SonarSource thenewstack.io/cra-readiness…

CRA readiness starts in the codebase

CRA compliance starts in the codebase. Learn how to build repeatable, automated security controls into your software delivery system.

thenewstack.io
1
1
3
826
Our evaluation of @OpenAI’s GPT-6.1 Sol is live 🚀 Read the full analysis: sonarsource.com/blog/openai-… Compare every model on the Sonar LLM Leaderboard: sonarsource.com/the-coding-p…
2
287
Load more