Summary

Sonar launched Hunter Agent for SonarQube Cloud to analyse broken access control, business-logic, authentication and session-management flaws. The agent traces code, data and identity flows across a codebase and verifies candidate findings before presenting them in the existing Sonar workflow.

Why it matters

Logic flaws remain difficult for traditional SAST tools, so validated whole-codebase reasoning could expand automated application-security coverage.

Sources