Sonar is taking its AI code verification technology into commercial markets across North America through an expanded Carahsoft agreement, as enterprises face growing pressure to govern code generated by AI agents.
The deal extends availability of SonarQube beyond the US public sector, opening Carahsoft’s reseller and services partner ecosystem to organisations seeking independent verification of AI-assisted software development.
The expansion comes as AI-generated code becomes embedded in developer workflows. Sonar’s 2026 State of Code Developer Survey found 72% of developers who had tried AI coding tools used them daily, increasing pressure on organisations to verify code without sacrificing development speed.
SonarQube provides independent, multilayered verification designed to identify security vulnerabilities, reliability problems and maintainability issues before code reaches production. Enterprises can also establish consistent governance and code quality standards across teams using AI development tools.
The platform can verify code produced by AI agents before it is merged, while Sonar’s AI-native code review capabilities, strengthened through its acquisition of Gitar, are designed to validate agentic-written code.
Bill Sullivan, Vice President, North America Channel Sales, Sonar, said enterprises required “verifiable, governed adoption of agentic development” as AI coding expanded.
Natalie Gregory, Vice President managing DevSecOps Solutions, Carahsoft, said the partnership would help commercial organisations reduce outages, strengthen security and lower costs and risks associated with AI coding.
The companies said the expanded channel model would support secure enterprise-scale AI adoption while providing established procurement routes for code verification technology.
