Hello,
The Hunter Agent is generally available today on SonarQube Cloud for Enterprise Plan, with support for SonarQube Server coming soon.
The Hunter Agent analyzes a project’s entire codebase to find three categories of flaws that require reasoning, not pattern-matching:
- broken access control,
- business-logic vulnerabilities,
- and authentication or session-management issues.
The agent works the way a human security researcher would, by tracing how code, data, and identity move through a system, then investigating and confirming each candidate issue before it ever reaches a developer. Verified findings land directly inside the SonarQube workflow, next to the rest of a team’s issues. This means that security and development teams triage, assign, and track without learning a new tool or switching context.
If you are on an Enterprise plan, a free trial is available to scan a couple of M-sized projects. Get in touch with your sales representative to unlock it.
Read our Hunter Agent Documentation to learn more.
Enjoy!
Alex