@SonarSource

Trusted by 7M developers, our @SonarQube solutions (Server, Cloud, for IDE) cover your code quality and security needs –AI-generated or written by developers 🚀

 Austin, Texas
sonar.com
Joined January 2013
  • Tweets3.5K
  • Following1.2K
  • Followers11.1K
1.5KMedia
Replying to @NasdaqExchange
@NasdaqExchange 🚀 🚀 🚀
2
5
336
PHP2Shell lives in the PHP runtime, not your application code. SonarQube container scanning helps detect exposure in supported images using distribution-packaged PHP, plus what to check manually. Learn more: sonarsource.com/blog/contain…
1
4
295
Sonar is a proud launch partner of the @SpaceX Super Intelligence Partner Network 🚀 The program unifies SonarQube and @cursor_ai into a single workflow, so teams can move faster with code confidence. Learn more: x.ai/news/partnernetworkanno…
1
234
Generated volume can overwhelm meaningful human scrutiny. This week on The Next Commit, we talk about about manageable pull requests and multilayered verification. Watch the episode: thenextcommit.substack.com/p… Get the deep dive: thenextcommit.substack.com/p…
188
Securing the code an agent writes is one job. Securing the agent itself is another. @leantomato & Shashank Patwardhan, Application Security Lead at @ifxpayments, dig into permissions, verification & human judgment on The Next Commit. Listen + subscribe: thenextcommit.substack.com/p…
1
215
AI agents can write, test, and propose code changes faster than your team can review them. @kapmani breaks down how to build confidence that code in @thenewstack: thenewstack.io/ai-code-confi…

The code confidence gap nobody’s talking about

AI makes code creation abundant, but code confidence is scarce. Close the confidence gap with guiderails, verification, and auditability.

thenewstack.io
1
1
312
Sonar retweeted
Cassidy
@cassidooOct 19
This issue is sponsored by @sonarsource! Valid code can still leak another user's invoices. SonarQube Hunter Agent hunts those intent flaws (access control, biz logic, auth/sessions), validates them, & drops them into SonarQube w/ a plain explanation. fandf.co/4dC6uRl
1
4
1,324
Sonar retweeted
JFrog
@jfrogOct 15
Speed alone does not create software that is secure, reliable, or maintainable. Join Tom Howlett from @SonarSource at #swampUP Europe in Barcelona for a practical session on AC/DC: the Agent Centric Development Cycle. Learn how to build an AI-enabled software factory that moves at agentic speed without sacrificing enterprise quality or control. Join the swampUP waitlist: bit.ly/4mEpVuk #swampUP #DevSecOps #AI #AgentSecOps #TrustedIntelligence
The image is a promotional graphic for JFrog's 2026 swampUP event in Barcelona, occurring from October 20-22. The headline reads "Agentic Speed, Enterprise Quality: Building a trustworthy agent centric development cycle." A button labeled "Register Today" is featured. There is also a person named Tom Howlett, identified as Director of AI Engineering Engagement at Sonar, accompanied by a cityscape silhouette and glowing lines.

ALT The image is a promotional graphic for JFrog's 2026 swampUP event in Barcelona, occurring from October 20-22. The headline reads "Agentic Speed, Enterprise Quality: Building a trustworthy agent centric development cycle." A button labeled "Register Today" is featured. There is also a person named Tom Howlett, identified as Director of AI Engineering Engagement at Sonar, accompanied by a cityscape silhouette and glowing lines.

1
2
322
Confidence in agent-written code comes from the system around the agent 🤖 This week on The Next Commit, @leantomato and Matt Erman dig into the process, checks and fundamentals that keep developers in charge. Listen: thenextcommit.substack.com/p… Deep dive: thenextcommit.substack.com/p…
1
3
291
Before you merge the next AI written PR. Tomorrow, @kapmani of @SonarSource joins @addyosmani on reviewing and testing AI code. AI Engineer New York. Leadership Track. Oct 14, 11:30 AM ET. Sutton Room. Save the session: ai.engineer/nyc/2026/schedul… #AIEngineerNY
AI Engineer New York Classic duo card in black and champagne. Tomorrow, Leadership Track. Who verifies the software factory? Before you merge the next AI written PR. Wednesday, October 14, 2026, 11:30 AM Eastern, Sutton Room. Official portraits show Manish Kapur, VP of Product Marketing and Developer Relations at Sonar, and Addy Osmani, Member of Technical Staff at Anthropic. The original Sonar logo is labeled Platinum sponsor. Sheraton New York Times Square. Event dates October 12 to 14, 2026. ai.engineer/nyc.

ALT AI Engineer New York Classic duo card in black and champagne. Tomorrow, Leadership Track. Who verifies the software factory? Before you merge the next AI written PR. Wednesday, October 14, 2026, 11:30 AM Eastern, Sutton Room. Official portraits show Manish Kapur, VP of Product Marketing and Developer Relations at Sonar, and Addy Osmani, Member of Technical Staff at Anthropic. The original Sonar logo is labeled Platinum sponsor. Sheraton New York Times Square. Event dates October 12 to 14, 2026. ai.engineer/nyc.

3
2
17
3,433
Sonar CEO @tariqshaukat takes the keynote stage at @aiDotEngineer NYC 🚀 🚀 🚀
1
4
323
Sonar has joined the @OpenAI Daybreak Defense Network, gaining access to OpenAI GPT Cyber Models. These models can now be deployed in multiple products, including SonarQube Hunter Agent. Details: sonarsource.com/company/pres…

Sonar Joins OpenAI Daybreak Cyber Partner Program to Advance Frontier Security

Daybreak models strengthen Sonar’s frontier security offering, helping software engineering teams find and remediate complex risks before attackers can exploit them

sonarsource.com
6
357
Coding agents are almost too knowledgeable 🧠 This week on The Next Commit, @leantomato talks with Matt Erman, Sr. Software Engineer at @Blackboard, about giving direction so agent-written software stays coherent and maintainable. Listen and subscribe: thenextcommit.substack.com/p…
2
229
🗽🏙️🍎🚕🍕 hi @aiDotEngineer!
4
357
“High-risk failures should not depend on someone noticing them; the delivery system should prevent them from progressing.” Thanks to @SonarSource thenewstack.io/cra-readiness…

CRA readiness starts in the codebase

CRA compliance starts in the codebase. Learn how to build repeatable, automated security controls into your software delivery system.

thenewstack.io
1
1
3
826
Our evaluation of @OpenAI’s GPT-6.1 Sol is live 🚀 Read the full analysis: sonarsource.com/blog/openai-… Compare every model on the Sonar LLM Leaderboard: sonarsource.com/the-coding-p…
2
286
Agents can turn a first idea into a large PR before teams discuss the approach. Kesha Mykhailov shares how @fin uses expert guidance, smaller changes, & human feedback to keep up with that speed on this week's ep of @TheNextCommit w/ @leantomato: bit.ly/4ARTaCm
1
3
275
Read the deep dive: thenextcommit.substack.com/p…
1
82
Hello New York! Sonar will be front and center at @aiDotEngineer NYC next week. We have five talks, including a keynote from CEO @tariqshaukat, about how enterprises can build software factories that ship agentic code with confidence. Details: sonarsource.com/company/pres…
2
263
Your coding agent opened the PR. Who decides it's safe to merge? @kapmani of @SonarSource joins @addyosmani to talk human review and testing in "Who verifies the software factory?" AI Engineer New York, Oct 14. Sonar is a Platinum sponsor. ai.engineer/nyc
AI Engineer New York Classic card with a dark champagne wave background. "Who verifies the software factory?" is an October 14, 2026 breakout. The hook asks who decides whether a coding agent's pull request is safe to merge. An illustration runs from AI written PR through review and tests to a merge question. Official portraits show Manish Kapur, VP of Product and Solutions Marketing at Sonar, and Addy Osmani, Member of Technical Staff at Anthropic. The unchanged Sonar logo is labeled Platinum sponsor. Event dates are October 12 to 14 at the Sheraton New York Times Square. Tickets: ai.engineer/nyc.

ALT AI Engineer New York Classic card with a dark champagne wave background. "Who verifies the software factory?" is an October 14, 2026 breakout. The hook asks who decides whether a coding agent's pull request is safe to merge. An illustration runs from AI written PR through review and tests to a merge question. Official portraits show Manish Kapur, VP of Product and Solutions Marketing at Sonar, and Addy Osmani, Member of Technical Staff at Anthropic. The unchanged Sonar logo is labeled Platinum sponsor. Event dates are October 12 to 14 at the Sheraton New York Times Square. Tickets: ai.engineer/nyc.

1
3
1
10
2,016
The SonarQube Server 2026.5 LTA adds new capabilities for agentic coding. In our upcoming webinar, we cover what's new, where SonarQube Server fits across the agent centric development cycle, and what to expect if you're updating from 2026.1. Register: bit.ly/4yVgXQF
1
1
308
Load more