Overview
Start here
Getting started
Concepts
Team & ownership
Deployment regions
Security model
Guides
Code quality
Connect your SonarQubeWhen scans runThe production gateFindings and your agentWhat we never doPricing and limits
Custom domains
Connecting a coding agent ↗Resources
Release notes ↗System status ↗Security & governance ↗Guide · Code quality
Code quality with your own SonarQube
Connect the SonarQube your organisation already trusts and every deploy can be followed by a scan, with the findings handed to your coding agent to fix. Syntica runs real code, so the industry's standard analysis tools work on it. That is the answer to the question every reviewer asks about agent-written applications: don't take our word for it, point your own quality gate at it.
Connect your SonarQube
The connection is yours in every sense. You bring a SonarQube Cloud account or a self-hosted SonarQube server, and Syntica talks to it with a token you issue. Two free routes exist: SonarQube Cloud has a free tier that covers most applications here, and SonarQube Community Build is free to self-host. Syntica does not resell or host SonarQube, and your quality profiles, rules and gate conditions stay entirely on your server.
An organisation admin connects the server once, under the application's Code quality tab: the server address, and an analysis token. A project-scoped token is enough.
Each application is then wired to a project key on your server. The default is generated for you and can be changed.
The token is encrypted at rest, can never be read back out of the platform, and is only ever used to talk to the server you named.
When scans run
You decide the cadence per environment, in the Code quality tab:
After a deploy to dev or staging, on by default.
After a production deploy, automatic by default: production is scanned when that is where the code actually changed, and skipped when dev or staging already scanned the same code.
Every night, off by default, and skipped when nothing changed.
Scan now, whenever you want one, from the dashboard or from your coding agent.
Rapid deploys collapse into a single scan of the newest code, and a commit that was already scanned on dev is not scanned again when it reaches production. Scanning never slows a deploy down: it runs after the deploy, not as a step of it.
The production quality gate
For production you can go one step further and turn on Stop a production deploy when the gate fails. The verdict comes from your own server's quality gate, with your conditions. Syntica records the verdict and never computes or overrides one.
The gate is deliberately fail-open. The only thing that stops a deploy is a completed scan that your server marked as failed:
Overrides are recorded. An admin can deploy past a failed gate deliberately. When that happens it is written to the audit trail as "Deployed past a failed quality gate", so the decision is visible to the whole team.
Findings go to your coding agent
The Code quality tab shows the gate verdict and the findings in new code: bugs, vulnerabilities and code smells, each with its severity, rule and file location, plus a deep link to the full analysis on your own dashboard. The interesting part is what happens next. Ask your coding agent for the findings (the quality_get_findings tool) and it fixes them in your own session, on your own subscription, then redeploys. Scan, fix, deploy becomes one conversation.
What Syntica does and never does
Analysis reads your code, it never builds or executes it. No install scripts, no build step, no tests run during a scan.
Syntica is read-only against your server, apart from creating the project the first time. Your issues, gates and settings are never modified.
No AI ever touches your code or findings on our side. Fixing happens in your own agent session. The platform hands over the material and stops.
The platform keeps only the current working set of findings. The full history lives on your server, and deleting your organisation never touches your SonarQube project.
Pricing and limits
The integration is included with the platform at no extra cost for now, with a monthly scan allowance per organisation. Your SonarQube subscription itself is separate and yours: free via SonarQube Cloud's free tier or a self-hosted Community Build, or whatever paid edition your organisation already runs. See pricing for the platform plans, and your SonarQube vendor for theirs.
We use cookies
We use essential cookies to run the site and optional ones to understand usage. See our Privacy Policy.