---
canonical: "https://www.softatlas.io/sonar/products/sonarqube-advanced-security"
name: "SonarQube Advanced Security"
provider: "Sonar"
category: "Security & Compliance / Application, Cloud & Data Security / Application Security (AppSec)"
review_count: 0
ai_powered: true
website: "https://www.sonarsource.com/products/sonarqube/advanced-security"
updated: "2026-10-05"
---

# SonarQube Advanced Security

By [Sonar](/sonar.md)

An add-on for SonarQube that provides advanced SAST and SCA to secure the use of open source code and prevent third-party vulnerabilities.

## Features
- Detect code vulnerabilities early in development
- Perform cross-file data flow analysis to prevent injection attacks
- Secure cloud infrastructure configurations through IaC scanning
- Prevent exposure of credentials, tokens, and keys with secrets detection
- Manage open source risk and compliance with comprehensive SCA
- Detect malicious packages in CI/CD pipeline and dependencies
- Automate license detection and validation with custom policy enforcement
- Export a Software Bill of Materials (SBOM) for all dependencies

## Built for
DEVELOPERS, OPERATIONS, EXECUTIVES

Source: https://www.softatlas.io/sonar/products/sonarqube-advanced-security