This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use SonarQube Community Build 26.9 code quality server with PostgreSQL. Find bugs, security issues and code smells before they reach production, with unique passwords for every instance.
SonarQube is an open source platform for continuous code quality and security review. It scans your code for bugs, security weak spots, duplicated code and maintainability problems in many programming languages, and shows the results in clear dashboards with quality gates. This image gives development teams a working SonarQube server in minutes, ready to connect to their build pipelines.
What is included: SonarQube Community Build 26.9.0 on Ubuntu 24.04 LTS with Java 21, PostgreSQL 16, Apache as a reverse proxy on port 80, the kernel settings SonarQube needs, and Webmin 2.660 for server administration. Security is on by default: no password ships in the image. On first boot every instance sets its own SonarQube admin, PostgreSQL and Webmin passwords, PostgreSQL listens only on the server itself, and SSH accepts key-based login only.
What you get on top of the free software: a pre-built and tested image that is ready in minutes, a unique security setup for every server, simple scripts for changing passwords, regular image updates, and help by email whenever you need it. SonarQube Community Build is open source software licensed under LGPL-3.0. SonarQube is a trademark of SonarSource SA. This image is an independent build by ProvenCloud.
Highlights
Ready in minutes: launch the instance, open its public IP in your browser and sign in. SonarQube, PostgreSQL, Java and Webmin are already installed, tuned and configured.
Secure by default: no shared or default passwords. Every instance sets its own SonarQube, PostgreSQL and Webmin passwords on first boot, and SSH accepts key-based login only.
Cleaner code in every build: analyse many languages, track quality gates and coverage, and connect SonarQube to your CI pipeline so every change is checked.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
SonarQube Code Quality Server on Ubuntu 24.04 LTS by ProvenCloud [IN]
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You pay by the hour for the EC2 instance type you run this prebuilt machine image on. The software itself needs no licence key, so your charges track the compute size you pick. Pricing scales with instance capacity: smaller shared types like t3a.medium cost less per hour than larger compute-, memory-, or accelerator-focused types such as the 8xlarge and higher sizes. You choose one instance type at launch, and billing stops when you stop the instance. The vendor suggests t3a.large or larger for real analysis volume.
Top-of-mind questions for buyers
What do I actually receive for the hourly charge on each instance type?
You get a prebuilt machine image (AMI) with the code quality server stack installed and configured. It bundles the community build, Java runtime, a local database, and a web server. No licence key is needed. The hourly rate covers running that image on your chosen EC2 instance type.
Am I charged when the EC2 instance is stopped?
The software charge meters running instance-hours. When you stop the instance, hourly software billing stops. Stopped instances may still incur underlying AWS storage fees for the attached volume, but the image itself meters only running time.
What size instance should I pick for real analysis work?
The vendor suggests t3a.large or larger for real analysis volume. Smaller shared types work for testing but may struggle under load, since three Java processes, an embedded search engine, and a database all run on the host. Larger compute- or memory-focused types cost more per hour.
www.provencloud.io
Helpful?
Vendor refund policy
Software charges are billed hourly, only while your instance runs. You can stop charges at any time by terminating the instance or cancelling your subscription. Charges already incurred are not refundable.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest stable release on AWS Marketplace.
SonarQube Community Build 26.9.0 on Ubuntu 24.04 LTS with Java 21, PostgreSQL 16, Apache and Webmin 2.660.
Unique SonarQube, PostgreSQL and Webmin passwords are set for every instance on first boot.
Includes helper scripts in /home/ubuntu/iscripts for changing passwords.
Additional details
Usage instructions
Once the instance is running, enter http://<instance-public-ip> into your browser. Wait about three minutes the first time while SonarQube starts, then sign in with admin as the username and your instance ID as the password. Webmin is on port 8000, so open http://<instance-public-ip>:8000 and sign in with admin as the username and your instance ID as the password. You can also connect over SSH with the username ubuntu and your Amazon key pair.
Required inbound ports: 22 (SSH), 80 (SonarQube) and 8000 (Webmin). For security, allow ports 22 and 8000 only from your own IP address.
Your instance ID is shown in the EC2 console, for example i-0123456789abcdef0. Every instance sets its own passwords on first boot, so no two instances share a password.
Change your passwords after the first sign-in: connect over SSH and run sudo bash /home/ubuntu/iscripts/pass_sonarqube.sh for SonarQube, pass_postgres.sh for PostgreSQL or pass_webmin.sh for Webmin. README.txt in the same folder explains each one.
The image serves plain HTTP so it works on a bare IP address. Before using it in production, add your own domain and an SSL certificate, or place it behind a load balancer with HTTPS.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use GitLab Community Edition 19.5.1 server. Host your Git repositories, run CI/CD pipelines and track issues on your own server, with a CI runner already registered and unique passwords for every instance.
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use code-server 4.143.1 browser IDE. Write, run and debug code from any web browser with a full editor, terminal and extensions, with Node.js, Python, Git, Docker and the AWS CLI ready to use and unique passwords for every instance.
SonarQube Server is a self-managed code analysis platform that provides full control over your development environment while delivering deep security and quality insights across your entire enterprise. It integrates with DevOps platforms and AI coding tools to verify developer-written, third-party, and AI-generated code, helping prevent outages, reduce risk, lower technical debt, and ensure compliance.
For questions about private offers, pricing, plans and options, or other products such as SonarQube Cloud, please contact your Sonar representative at www.sonarsource.com/company/contact.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.