> For the complete documentation index, see [llms.txt](https://docs.sonarsource.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sonarsource.com/sonarqube-community-build/feature-comparison-table.md). # Feature comparison table This page lists features relevant to comparing support in the different SonarQube deployments. For the supported languages, see [Supported languages](/sonarqube-community-build/analyzing-source-code/languages/overview.md). For more information about the features supported in SonarQube Cloud, see [Subscription plans](/sonarqube-cloud/administering-sonarcloud/managing-subscription/subscription-plans.md). For more information about features supported in SonarQube Server, see the [SonarQube Server documentation](https://docs.sonarsource.com/sonarqube-server). ## Features that need a separate subscription These features are not included in any product or plan. Where available, each one needs its own subscription. SCA and Advanced SAST share a single Advanced Security subscription. | Feature | What it does | SonarQube Community Build | SonarQube Cloud Free plan | SonarQube Cloud Team plan | SonarQube Cloud Enterprise plan | SonarQube Server | | --------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------- | ------------------------- | ------------------------- | --------------------------------------------- | ----------------------------------------- | ------------------------------------------------------------------------------------- | | Remediation Agent | Fixes backlog and pull request issues by opening pull requests (on Cloud: GitHub, GitLab, and Azure DevOps) | Not available | Not available | Separate subscription (annual Team plan only) | Separate subscription | Separate subscription (requires Enterprise or Data Center edition) | | Sonar Vortex (context and analysis) | Equips coding agents to write and verify code that fits your project | Not available | Not available | Separate subscription (annual Team plan only) | Separate subscription | Separate subscription (requires Enterprise or Data Center edition) | | Hunter Agent | Finds vulnerabilities that need human-like understanding of the code, such as broken access control and business-logic flaws | Not available | Not available | Not available | Separate subscription | Separate subscription (requires Enterprise or Data Center edition) | | Software Composition Analysis (SCA) | Detects vulnerabilities and malicious packages in third-party dependencies | Not available | Not available | Separate subscription (Advanced Security) | Separate subscription (Advanced Security) | Separate subscription (Advanced Security; requires Enterprise or Data Center edition) | | Advanced SAST (Static Application Security Testing) | Deeper static security analysis | Not available | Not available | Separate subscription (Advanced Security) | Separate subscription (Advanced Security) | Separate subscription (Advanced Security; requires Enterprise or Data Center edition) | ## Features included in the product or plan | Category | Feature | SonarQube Community Build | SonarQube Cloud Free plan | SonarQube Cloud Team plan | SonarQube Cloud Enterprise plan | SonarQube Server | | --------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- | ------------------------- | -------------------------------------------- | ------------------------------------- | ------------------------------------- | ------------------------------------------------------------ | | Code analysis | Branch analysis | Main branch only | Main branch only | Included | Included | Included | | Code analysis | Pull request analysis | Not available | Only if the target branch is the main branch | Included | Included | Included | | Code analysis | Custom quality profiles | Included | Not available | Included | Included | Included | | Code analysis | Custom quality gates | Included | Not available | Included | Included | Included | | Code analysis | Advanced Java rules | Not available | Included | Included | Included | Included | | Code analysis | Prioritized rules (in quality gate definition) | Not available | Not available | Not available | Not available | Enterprise and Data Center editions | | Code analysis | Architecture | Not available | Not available | Included | Included | Included | | Code analysis | Enterprise architecture (open beta) | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | Code analysis | [Project coverage](/sonarqube-community-build/project-coverage.md) (shows whether every repository is connected, imported, and analyzed) | Included | Included | Included | Included | Included | | AI code analysis | AI Code Assurance | Not available | Included | Included | Included | Included | | Security analysis | Injection vulnerabilities detection | Not available | Included | Included | Included | Included | | Security analysis | Injection vulnerabilities detection: security engine custom configuration | Not available | Not available | Not available | Not available | Enterprise and Data Center editions | | Security analysis | Secret detection: custom secret patterns | Not available | Not available | Not available | Not available | Enterprise and Data Center editions | | AI-powered code remediation | AI CodeFix | Not available | Not available | Included | Included | Enterprise and Data Center editions | | Agentic development | SonarQube Cloud-hosted and Server-hosted MCP server | Not available | Included | Included | Included | Included | | Management reporting | Portfolios | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | Management reporting | Dashboards | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | Management reporting | Security reports | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | Management reporting | Project PDF reports | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | Management reporting | Regulatory reports | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | Management reporting | Applications (aggregation of multiple projects) | Not available | Not available | Not available | Not available | Included | | System security | Single Sign-On (SAML) | Included | Not available | Not available | Included | Included | | System security | Auto-provisioning (SCIM) | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | System security | IP allow list restriction | Not available | Not available | Not available | Included | Not available | | System security | Audit logs | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | System security | Maximum lifetime for tokens | Not available | Not available | Included (Scoped Organization Tokens) | Included (Scoped Organization Tokens) | Enterprise and Data Center editions | | System security | Inactive session timeout | Configurable | Not configurable (24 hours) | Not configurable (24 hours) | Not configurable (24 hours) | Configurable | | System security | Active session timeout | Not available | Not available | Not available | Not available | Enterprise and Data Center editions (configurable) | | DevOps platforms | GitHub, Bitbucket Cloud, GitLab, Azure DevOps | Included | Included | Included | Included | Included | | DevOps platforms | Bitbucket Data Center | Included | Not available | Not available | Not available | Included | | DevOps platforms | User authentication | Included | Included | Included | Included | Included (with automatic provisioning for GitHub and GitLab) | | DevOps platforms | Security issues report in GitHub and GitLab | Not available | Not available | Not available | Included (GitHub only) | Included | | DevOps platforms | Quality gate status report on pull requests; preventing merge when quality gate fails | Not available | Not available | Included | Included | Included | | DevOps platforms | Monorepo integration | Not available | Included | Included | Included | Enterprise and Data Center editions | | DevOps platforms | Multiple DevOps platform instances | Not available | Not available | Not available | Not available | Enterprise and Data Center editions | | Integrations | Jira Cloud | Not available | Not available | Included | Included | Included | | Integrations | Slack | Not available | Included | Included | Included | Included | | Integrations | JFrog Evidence Collection | Not available | Not available | Not available | Included | Enterprise and Data Center editions | | Integrations | Webhooks | Included | Not available | Included | Included | Included | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.sonarsource.com/sonarqube-community-build/feature-comparison-table.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.