Open source technology is critical to the global economy. For decades, it has promoted innovation, security, and trust. That will be even more true in the AI economy.
Sonar is proud to have roots in the open source world, and I’m proud to share that Sonar has joined the Open Secure AI Alliance as an inaugural partner. We’re excited to contribute to this collaborative effort with NVIDIA and other industry leaders to help strengthen the foundations of secure AI.
As AI models become more capable, it is putting a lot of stress on the open source world. We are taking concrete steps to be part of the solution, helping developers, maintainers, and enterprises operate with openness, trust, and confidence.
Some ways we're helping:
Both SonarQube and Gitar AI Code Review are available for free for OSS projects - helping maintainers verify the quality, reliability, and security of their projects.
For several years, Sonar (and previously Tidelift which we acquired) has financially supported over 600 OSS maintainers across thousands of packages, ensuring they can focus on their important work.
SonarQube Community Build and SonarQube for IDE bring the power of SonarQube to millions of developers everywhere, for free and with transparency.
SonarSweep helps enterprises improve Open Weight AI models, to embed context while improving the quality and security of the output.
Our LLM Leaderboard helps people understand the quality and security of leading AI models, covering both proprietary and open weight models.
Last but not least, SonarQube Advanced Security helps developers understand their third party dependencies and the risks associated with them