The short answer
The registry records SonarQube Cloud Static Code Analysis Subscription as a possible interpretation of SONARSOURCE* CLOUD. This descriptor-to-company association has not passed claim-level evidence review. Compare the exact line, amount and posted status with your own receipt or account activity; the name alone cannot confirm the merchant or whether you authorized the payment.
What do the parts of SONARSOURCE* CLOUD mean?
- SONARSOURCE * CLOUD
- Before the asterisk, "SONARSOURCE" usually names the platform or parent company. After it, "CLOUD" usually names the product, store or order. How descriptors work →
The notes below are unreviewed registry explanations, not confirmation of merchant identity, authorization or current policy. Claim-level source review is pending for this entry.
Why it shows up like this
Unreviewed registry note: Seeing SONARSOURCE* CLOUD on your corporate card or financial statement indicates a payment for automated code quality and security testing tools provided by SonarSource S.A. This transaction actually represents a SonarQube Cloud Static Code Analysis Subscription, which evaluates source code for bugs, security vulnerabilities, and code smells across private repositories within continuous integration pipelines.
Unreviewed registry note: Most recurring charges appear because an engineering team upgraded from the free public repository tier to a paid plan for private code scanning, or because analyzed line-of-code thresholds increased. SonarSource calculates subscription fees monthly based on the total volume of private lines of code processed. When repositories expand or new projects are added, monthly billing amounts scale accordingly.
Don’t recognize it? Common scenarios
- Unreviewed registry note: A development team configured SonarQube Cloud code quality checks on private GitHub, GitLab, or Bitbucket repositories.
- Unreviewed registry note: The volume of scanned private code lines increased, upgrading the LOC tier.
- Unreviewed registry note: An ongoing monthly or annual SonarSource subscription auto-billed.
Frequently Asked Questions
Is SonarQube Cloud free for open source?
Unreviewed registry note: Yes, SonarQube Cloud is 100% free for all public open-source code repositories.
How are lines of code (LOC) calculated on SonarQube?
Unreviewed registry note: LOC is calculated based on the largest analyzed branch of each private project in your organization.
Dispute Rights & Fraud Prevention
Unreviewed registry note: Engineering managers should verify repository permissions and corporate card authorizations before submitting billing disputes to financial institutions.
Independent reference — not affiliated with SonarSource S.A.. Billing names and policies change; verify with the merchant or your bank before acting.
Sources and evidence
Sources may support different parts of this page. A company homepage does not establish a statement descriptor, refund policy or contact detail. Check the claim notes and your own receipt before acting.
- SonarQube Cloud Pricing https://www.sonarsource.com
- CFPB: Disputing Unrecognized Charges https://www.consumerfinance.gov
Evidence review pending · pending · About UnknownCharges