What SonarQube is
SonarQube is Sonar's code quality and security platform. It ships as SonarQube Server, which you run inside your own perimeter, and SonarQube Cloud, which Sonar hosts, alongside a free IDE extension and an open source Community Build.
Its analysis is rule-based: Sonar states more than 7,000 language-specific rules across more than 40 languages and frameworks, covering bugs, code smells, maintainability and security findings including taint analysis and secrets detection. Results roll up into quality gates, which are thresholds a build either clears or fails.
That model is a genuine strength. A rule produces the same verdict on the same code every time, it can be argued with, and it can be turned off. Across a large codebase with years of history, that repeatability is most of the value.