SonarQube pricing 2026: Cloud costs in RM and SGD, Server by quote

SonarQube pricing has one public figure: SonarQube Cloud Team costs US$34 a month for up to 100,000 lines of code, as listed on 25 October 2026. That is about RM139 or S$43 at Bank Negara Malaysia middle rates for 23 October 2026, 12:00 (US$1 = RM4.0848; S$1 = RM3.1975), not a quote. Private projects (code only your team can see) up to 50,000 lines are free, and every other plan is priced by quote.

SonarQube checks your developers' code for bugs and security problems, and you pay by the size of your code.

Which route fits you:

• If you are happy for Sonar, the maker of SonarQube, to host it, start with Cloud Team, which Sonar describes as the plan for teams under 50 developers. You pay by card each month.
• If your code must stay on your own servers, choose SonarQube Server, which you install yourself. It is priced by quote, from your line count.
• If you have more than 50 developers, or you need compliance reports across many projects, ask for an Enterprise quote. Sonar describes Cloud Enterprise as the plan for more than 50 developers, and recommends the Server Enterprise edition from 1 million lines.

Your price follows how many lines of code you have, not how often you scan. Lines of code are the source lines that SonarQube checks, without comments, blank lines or test code.

Part 1 gives every price on Sonar's pricing pages, converted to ringgit and Singapore dollars, and answers the common licence questions. As a Sonar reseller partner, we give firm RM and SGD quotes for every SonarQube Cloud plan and SonarQube Server edition. Part 2, for IT managers and developers, shows how Sonar counts lines of code. Jump to Part 2.

SonarQube prices in 2026, in USD, RM and SGD

These are the prices on Sonar's plans and pricing page and its SonarQube Server pricing page when we checked them on 25 October 2026.

SonarQube Cloud, hosted by Sonar

• Free: US$0. For private projects up to 50,000 lines of code, with no card and no expiry. Public repositories (code that anyone can see) under an open-source licence approved by the Open Source Initiative (OSI) are also free.
• Team: from US$34 a month.
  • It covers up to 100,000 lines of code. Sonar describes it as the plan for teams under 50 developers.
  • Sonar's pricing page gives a price only for the 100,000-line size. It says other sizes are available, so ask us for the figure for your size.
  • Sonar's FAQ says the plan was "previously listed at $65" (about RM266 or S$83), so check the page before you budget.
  • Twelve monthly payments at the entry rate come to US$408 (about RM1,667 or S$521). This is arithmetic on the monthly rate, not a published annual price.
• Enterprise: no public price. Sonar describes it as the plan for more than 50 developers, with annual pricing from its sales team.

SonarQube Server, installed on your own servers

• Developer edition: no public price. Sonar describes it as "Essential capabilities for small teams" and recommends it from 100,000 lines of code.
• Enterprise edition: no public price. Sonar recommends it from 1 million lines of code.
• Data Center edition: no public price. Sonar's FAQ still lists it, but the pricing page no longer shows it as a separate plan card.
• Community Build: free. This is the free, open-source version that you install yourself. Sonar's Community Build feature comparison shows that it checks only the main copy of your code (the main branch), not your developers' work-in-progress copies or the changes they submit for review.

Add-ons. Each add-on is a separate subscription, and Sonar's pricing pages show no price for any of them. On SonarQube Server, the Enterprise card lists Sonar Vortex, the Remediation Agent and the Hunter Agent as additional subscriptions, and Advanced Security is one too. On SonarQube Cloud, Advanced Security is a separate subscription. You can buy a plan without any of them, so ask about them only if your IT manager names one.

Sonar's pricing page also shows Gitar AI Code Review, a separate Sonar product, at US$20 per user a month, billed annually (about RM82 or S$26).

Sonar's billing documentation says that card billing is in euros, pounds, yen or US dollars, depending on your billing country. So Sonar's card billing has no RM or SGD option.

The same page says that indirect taxes may be added to SonarQube Cloud fees. Before you order, ask your finance team how tax applies to an overseas software subscription. Malaysian companies can start with our software purchasing questions for finance, including withholding tax.

In Singapore, ask your finance team the same tax question, and request an SGD quote on our SonarQube Singapore page.

Five things that move your SonarQube price

1. Your lines of code. This is the main factor for both Cloud and Server.
2. Cloud or Server. Cloud counts private projects only. Server counts every project analysed on the installation.
3. Your team size, on Cloud only. It decides which plan Sonar points you to: Team for under 50 developers, Enterprise for over 50.
4. The number of Server installations. Server is priced "per instance, per year", and an instance is one installation.
5. The edition and add-ons. Each add-on is a separate subscription.

Two companies with the same amount of code can pay different prices. A team on one installation buys one licence. A group with an installation for each of two business units buys two.

How a SonarQube licence works

SonarQube Server licence

• Scope. One licence covers one installation, for a maximum number of lines of code, for one year.
• Delivery. After your purchase is confirmed, you receive a licence key, according to Sonar's licence management documentation.
• Trial. You can test first: "No payment is required to request or activate a free trial license".
• Support. Standard commercial support costs extra, unless you have the Enterprise or Data Center edition at 30 million lines or more.

SonarQube Cloud subscription

Cloud is a subscription, billed monthly or yearly. On the monthly Team plan you pay by card every month. Sonar says: "There's no commitment. You can delete your paid organization whenever you wish."

You buy annual Team plans and Enterprise plans by contacting Sonar's team, or through us in RM or SGD. Enterprise is a one-year or multi-year licence billed annually.

If your card is rejected several times, or your coupon or licence expires, Sonar suspends new analyses on your private projects but keeps your data, according to its billing documentation.

Server Developer or Enterprise edition: which one fits

These are the two SonarQube Server editions shown as plan cards on Sonar's pricing page in October 2026. The Cloud plans are separate.

• If your developers work in branches and review each other's changes, the Developer edition is the first paid step. Unlike the free Community Build, it checks every branch and pull request, and it posts the result where your team reviews the change.
• If you report to auditors, regulators or management across many projects, the Enterprise edition adds one view across many projects (a portfolio). It also adds compliance reports for standards such as the OWASP Top 10 security list, the MISRA coding standard and PCI DSS, the card-payment security standard.

Both editions include AI Code Assurance, which helps you hold code written by AI tools to a set quality bar. Our guide to SonarQube AI Code Assurance explains it. Part 2 lists the other Enterprise features.

Our guide to choosing between SonarQube Community, Developer and Enterprise walks through the decision in more detail. If you are pricing the add-ons because coding agents now open many of your pull requests, start from who reviews AI-generated code when agents write it. Our Enterprise add-on quote covers what each add-on does.

SonarQube Server prices come only by quote

Sonar publishes the Server editions and their line-of-code recommendations, but no prices. Its pricing page says: "Get in touch with sales for pricing specific to your needs".

Old Server prices still circulate in forum posts and older blog posts, including Sonar's own. Ignore them: Sonar's current pricing page shows none.

We do not publish Server prices either. A Server figure given without your line count is a guess. So our first reply to a Server price question asks for:

• your line count
• your number of installations
• the edition you want

Choosing a SAST tool first? Read our SAST tool guide, which compares SonarQube with five other SAST tools.

Get a SonarQube quote in RM or SGD

To quote quickly, we need four things:

1. Your estimated lines of code, counted with the method in Part 2, and whether any repositories are public.
2. Cloud or Server, or "not sure yet".
3. Team size, because Sonar shows Cloud Team for under 50 developers and Enterprise for over 50.
4. Any compliance reporting you need, such as reports against the OWASP Top 10 security list or the MISRA coding standard, which can point to the Enterprise plan or edition. Banks and insurers can read how that reporting relates to Bank Negara Malaysia's Risk Management in Technology (RMiT) policy as a starting point.

We can also set SonarQube up in your CI/CD pipeline (the system that builds and tests your code) and train your developers. Malaysian teams can find editions and training on our SonarQube Malaysia page. Singapore teams can use our SonarQube Singapore page. To compare routes, read buying SonarQube directly or through a local reseller.

Frequently asked questions

How much does SonarQube cost?

As listed on 25 October 2026, SonarQube Cloud Team starts at US$34 a month for up to 100,000 lines of code. That is about RM139 or S$43 at Bank Negara Malaysia middle rates for 23 October 2026, 12:00 (US$1 = RM4.0848; S$1 = RM3.1975), not a quote. Private projects up to 50,000 lines are free on SonarQube Cloud. Cloud Enterprise and all SonarQube Server editions are priced by quote. We give firm RM and SGD quotes.

How much is SonarQube in ringgit or Singapore dollars?

Sonar's pricing page shows its prices in US dollars, and Sonar's card billing has no RM or SGD option. As listed on 25 October 2026, the US$34 Team price is about RM139 or S$43 at Bank Negara Malaysia middle rates for 23 October 2026, 12:00, not a quote. For a firm price in RM for Malaysia or in SGD for Singapore, send us your line count.

How much does SonarQube Developer Edition cost?

Sonar does not publish a price for the Developer edition. It is priced per installation, per year, by lines of code, and Sonar recommends it from 100,000 lines. Send us your line count for a quote.

What does SonarQube Enterprise cost?

Both Enterprise options are priced by quote. Sonar describes the SonarQube Cloud Enterprise plan as the plan for more than 50 developers, with annual pricing from its sales team. The SonarQube Server Enterprise edition is priced per installation, per year, by lines of code.

How much does SonarQube Cloud cost?

As listed on 25 October 2026, the Free plan costs nothing for private projects up to 50,000 lines. The Team plan starts at US$34 a month for up to 100,000 lines, and Sonar says other sizes are available. The Enterprise plan is priced by quote. Sonar says indirect taxes may be added.

How does a SonarQube licence work?

A SonarQube Server licence covers one installation, for a maximum number of lines of code, for one year. SonarQube Cloud is a subscription, billed monthly or yearly, for a maximum number of private lines of code.

Is SonarQube free?

Yes, in several ways. The SonarQube Cloud Free plan covers private projects up to 50,000 lines. Cloud analysis of public repositories under an OSI-approved open-source licence is free. The self-installed Community Build is free, and it checks only the main branch. SonarQube for IDE, an extension for your code editor, is also free.

For IT managers and developers: how Sonar counts your lines of code

Your line count is most of what a quote needs. Once you know how Sonar counts, you can estimate your own figure in an afternoon.

What counts as a line of code, and what does not

Both products leave out the same four things:

• test code
• files you have excluded from analysis
• code in languages SonarQube does not support
• comments and blank lines

The rules are in Sonar's Server lines-of-code documentation and its SonarQube Cloud subscription documentation.

Only the largest branch counts

Sonar does not add up every branch. In Sonar's words, where LOC means lines of code: "The LOC of a project is counted as the lines in the largest branch of the project". On Server, the documentation is precise: it uses "the most recent analysis of the largest branch or pull request".

Sonar's documentation gives its own example. Project1 has 500 lines on its main branch and 400 on a long-lived branch, so it counts as 500. Project2 has nothing on main and 200 on a branch, so it counts as 200. "The total LOC for the organization is 500 + 200 = 700".

Scan frequency does not change the count. On Cloud, Sonar's example is blunt: "If your private project has 6K LOCs and you analyze it 100 times in the month, this will be counted as 6K for the billing". The Server documentation says that you cannot use up your licence by re-analysing the same code.

Public repositories are where the two products part ways. Cloud's rule is "Only LOCs from your private projects are counted toward your maximum number of LOCs". Sonar's Server pricing text makes no public or private exception: it sums "the LOC of each project analyzed" on your installation.

Worked example: estimate before you ask for a quote

The company and numbers below are made up for illustration: a logistics software team with offices in Shah Alam and Singapore, with three repositories.

• order-api (private). The main branch holds 142,000 lines of source. A long-lived release branch holds 151,000. Only the largest branch counts, so this project is 151,000.
• customer-portal (private). 64,000 lines of source on main, plus 22,000 lines of test code. Neither product counts test code, so this project is 64,000.
• tracking-sdk (public, open source). 18,000 lines on main.

Now add it up for each deployment:

• On SonarQube Cloud: 151,000 + 64,000 = 215,000 lines. The public SDK does not count, because Cloud bills private projects only.
• On SonarQube Server: 151,000 + 64,000 + 18,000 = 233,000 lines, because Server counts every project analysed on the installation.

On Cloud, 215,000 lines is above the 100,000-line size that the US$34 entry price covers, so the team needs a larger size. Sonar's pricing page does not publish that price, so this is where a quote comes in. On Server, 233,000 lines is in the range where Sonar recommends the Developer edition, and the features you need decide the rest. Sonar's figures are recommendations, not hard limits.

Estimate your own count in five steps

1. List every repository you intend to analyse, and mark each one private or public.
2. Find the largest branch of each repository. Usually that is main or a long-lived release branch. On Server, a large pull request can also be the largest.
3. Count source lines only. Leave out tests, comments, blank lines, unsupported languages and excluded files, for example generated code that you configure as excluded. A generic line counter gives you an estimate only.
4. Add 12 to 24 months of growth. A team that ships weekly rarely has a smaller codebase next year. This step is our own planning advice.
5. Confirm with a trial. Both products offer a free trial with no payment. On Server, open Administration, then Configuration, then License Manager after the first analysis to see how many lines are in use. That is Sonar's own count, which is the one that matters.

What happens when you reach your line limit

Both products hold the line at your licence limit. On Cloud, "You cannot exceed your LOC limit in SonarQube Cloud", and an analysis that would go over it is not performed. Free and Team organisations get a warning first.

On Server, the installation "will reject any new analysis whose total lines of code exceed the limit defined by your license". Basic functions such as saving configuration changes keep working. Near the limit, Sonar's documentation says "you may need to purchase additional lines of code". Check your count in License Manager before a release week.

Edition and add-on details for IT teams

• Enterprise edition extras. The Enterprise card lists "Autoscaling based on demand". It also includes AI CodeFix, which uses a large language model to suggest fixes for a select set of rules in Java, JavaScript, TypeScript, Python, HTML, CSS, C# and C++, according to Sonar's AI CodeFix documentation.
• Add-ons on Cloud. Sonar Vortex and the Remediation Agent need an annual Team plan or an Enterprise plan.