SonarCloud Security

SonarQube Cloud
1

Hi
We are considering purchasing SonarCloud’s services for our organization, but have some questions about the security policy that are not answered on the posted security statement 4. Any information would be greatly appreciated:

  1. Are the security levels in 14 day free trial and full paid version same?
  2. Is our source code accessible to any third party that you are engaged with for any services like penetration testing? If yes, then how to your ensure that our data and source code is safe and secure?
  3. Is our source code read only?
  4. How long do you retain our information/source code once the scan is performed? What is your disposal mechanism?

Thanks in advance,
Nandini

1 Like
3

Hi Team,

Can I please request you to respond as early as possible?

Thanks,
Nandini

4

Hi team,

We have to nail down a tool soon and we need the answers to the above questions to decide