# Difference between rules and rules in quality profiles / Oracle security guidelines

**URL:** <https://community.sonarsource.com/t/difference-between-rules-and-rules-in-quality-profiles-oracle-security-guidelines/28756>\
**Category:** SonarQube Server / Community Build\
**Tags:** sonarqube, java\
**Created:** [July 28, 2020, 10:28am UTC](https://community.sonarsource.com/t/difference-between-rules-and-rules-in-quality-profiles-oracle-security-guidelines/28756 "2020-07-28T10:28:16Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![ganncamp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/ganncamp/32/1261_2.png) [@ganncamp](https://community.sonarsource.com/u/ganncamp)\
**Post date:** [July 29, 2020, 12:49pm UTC](https://community.sonarsource.com/t/difference-between-rules-and-rules-in-quality-profiles-oracle-security-guidelines/28756/4 "2020-07-29T12:49:17Z")

</div>

Hi,

> [@mosesontheweb](#):
>
> sorry for the late reply

Don’t be silly. Some threads go days or weeks without response. 🙂

> [@mosesontheweb](#):
>
> The rules, which are in “Sonar Way” for Java, or - better - the rules in general, how are they going to be updated? I thought that whenever I update the plugin **Java Code Quality and Security** I’m going to update this default profile as well, or maybe also the rules specified in general.

This is really two different questions for me. The underlying rule _implementations_ are indeed, and necessarily, updated when you upgrade SonarQube\* (and thus the underlying analyzers). Built-in profiles, such as Sonar way, are also updated automatically with upgrades. Generally that means new rules are added, but it could also mean that thresholds are changed and occasionally rules are removed. If you have custom profiles that are inherited from Sonar way, they’ll inherit those updates as well.

&nbsp;  
HTH,  
Ann

\*[The ability to independently upgrade analyzers outside a SonarQube upgrade is being removed.](https://community.sonarsource.com/t/sonarjava-6-6-not-available-in-sonarqube-marketplace/28490/3)

---

_[View the full topic](https://community.sonarsource.com/t/difference-between-rules-and-rules-in-quality-profiles-oracle-security-guidelines/28756)._