Sonar announced the acquisition of Gitar, expanding its AI code verification platform to include AI-powered code review capabilities designed for the agentic software development era.
The deal combines Gitar’s AI-native code review technology with SonarQube, Sonar’s code verification and governance platform used by more than 7 million developers and AI agents globally. According to Sonar, over 75% of the Fortune 100 rely on SonarQube to validate the quality, security, and architectural integrity of AI-generated code.
As part of the acquisition, SonarQube will integrate with Gitar to provide automated code review capabilities throughout the software development lifecycle, beginning when AI agents generate code and continuing through deployment into production codebases.
Sonar said its platform helps organizations reduce outages caused by AI-generated code and improve software quality while lowering AI agent token usage. The company stated that teams using Sonar are 44% less likely to experience outages related to AI-generated code, while codebases cleaned by SonarQube can reduce AI token usage by up to 8%.
Gitar founders Ali-Reza Adl-Tabatabai and Gautam Korlam, both former engineering leaders involved in building Uber’s centralized developer platform, will join Sonar and continue leading development of the Gitar platform. Sonar noted that Gitar will continue operating as a standalone product while also becoming available alongside SonarQube and SonarQube Advanced Security offerings.
The combined platform is designed to provide enterprises with multilayered code verification capabilities, including analysis of syntax, data flows, logic flows, architectures, and dependencies. Sonar said customers will also be able to establish and enforce internal coding standards while enabling AI agents to automatically remediate identified issues during coding sessions and CI workflows.
The acquisition also highlights Sonar’s broader push into what it calls the “Agent Centric Development Cycle” (AC/DC), a methodology focused on ensuring AI coding agents operate in a trustworthy, transparent, and auditable manner.
Over the past year, Sonar expanded its platform with several new products and features, including SonarQube Advanced Security for software supply chain analysis, SonarQube Agentic Analysis for self-verification by AI agents, SonarQube Architecture for enforcing architectural standards, and SonarQube MCP Server, which integrates with AI coding tools such as Anthropic Claude Code, GitHub Copilot, Cursor, and Devin.
Additional releases included SonarQube CLI for real-time scanning in agentic coding environments, SonarQube Plugin for Claude Code, SonarQube Remediation Agent for automated fixes, Sonar Context Augmentation for embedding organizational standards into AI workflows, and SonarSweep, which Sonar said can reduce security vulnerabilities in large language model outputs by up to 67%.
Sonar plans to host a live demo and Q&A session about the combined platform on June 11, 2026.
KEY QUOTES:
“Enterprise adoption of AI depends on strong verification of agentic output. Right now, every enterprise is asking the same question: ‘How do we move fast with AI without breaking things?’ Now, enterprises will have a unified platform that brings together the best of AI code review and the most comprehensive verification engine in the market, providing the highest level of assurance whether you’re using Claude Code, Cursor, Codex, Devin, or GitHub Copilot.”
Tariq Shaukat, CEO, Sonar
“While the market chased AI code generation, we focused on the harder problem: validating it. We built Gitar because we saw firsthand what happens when development velocity outpaces code quality. AI has made that problem an order of magnitude bigger. We’re deeply proud of what we’ve built at Gitar, and excited to bring that work into Sonar. Together, we’ll deliver the greatest, unbeatable verification platform for the agentic era.”
Ali-Reza Adl-Tabatabai, CEO, Gitar
