Sonar launches Hunter Agent to find flaws code scanners can’t see
SonarSource ships an AI agent that finds logic flaws traditional scanners miss—the kind where code does exactly what it was written to do, just wrong.
Why it matters
An autonomous agent deployed into the development workflow to catch semantic vulnerabilities (authorization bypasses, business logic flaws) that pattern-based SAST tools can't see. This shifts security scanning from rule-matching to reasoning—a meaningful category upgrade for practitioners vetting code in production.
The key facts
5 to knowSonarSource releases SonarQube Hunter Agent
Agent targets vulnerabilities pattern-based scanning cannot detect
Focuses on logic flaws: unauthorized data access, broken checkout flows
AI-driven verification positioned as complement to traditional SAST
Agent-based deployment into code governance workflow
Go to the source
SiliconAnglesiliconangle.com
Publisher excerpt: Artificial intelligence code verification and governance company SonarSource Sàrl today released SonarQube Hunter Agent, an AI agent built to find security flaws that pattern-based scanning cannot see. The vulnerabilities it targets are the ones where the code does exactly what it was written to…