SonarCloud’s trust page refreshed its security-resource listings with newer penetration-test summaries, SonarQube Hunter Agent and Remediation Agent reports, and a Datacenter Edition SBOM. Listings for the 2025 DORA questionnaire, older pentest summaries and Gitar certifications disappeared. These updates affect the evidence customers can find for security reviews; the diff does not establish that document access was revoked.
Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.
What changed
Struck in red is what SonarCloud removed; blue is what they added. Muted text is unchanged context.
BeforeAfter
Changed#1
Before: …Type II Report Nov 2025 - Oct 2026.pdf Self Assessments SonarQube Cloud 2026 CSA CAIQ v4.1.0 CSA STAR…
After: …Type II Report Nov 2025 - Oct 2026.pdf View ‹count› more Self Assessments SonarQube Cloud 2026 CSA CAIQ v4.1.0 CSA STAR…
Removed#2
Before: …Sonar PCI-DSS SAQ-A SonarQube Cloud 2025 CAIQ-Lite v4.0.3 Sonar 2025 DORA Questionnaire View ‹count› more Penetration Tests and Policies SonarQube…
After: …Sonar PCI-DSS SAQ-A SonarQube Cloud 2025 CAIQ-Lite v4.0.3 removed View ‹count› more Penetration Tests and Policies SonarQube…
Changed#3
Before: …‹count› more Penetration Tests and Policies SonarQube Server December 2025 Pentest Executive Summary SonarQube Cloud March 2026 Pentest Executive Summary SonarQube IDE June 2025 Pentest Executive Summary SonarQube Server August 2025 Pentest Executive Summary View ‹count› more Other Helpful Sonar Websites and…
After: …‹count› more Penetration Tests and Policies SonarQube Server October 2026 Pentest Executive Summary.pdf SonarQube Cloud May 2026 Pentest Executive Summary.pdf SonarQube Hunter Agent August 2026 Pentest Executive Summary.pdf SonarQube Remediation Agent PenTest June 2026.pdf View ‹count› more Other Helpful Sonar Websites and…
Removed#4
Before: …Sonar Legal Documentation Page Opens in new tab SonarQube Cloud Product Documentation Page Opens in new tab View ‹count›…
After: …Sonar Legal Documentation Page Opens in new tab removed Documentation Page Opens in new tab View ‹count›…
Added#5
Before: …‹count› more Other Helpful Sonar Websites and Resources nothing here 2026 Certificate of Insurance SonarSource, Inc. Latest SBOM…
After: …‹count› more Other Helpful Sonar Websites and Resources Latest SBOM SonarQube Server (Datacenter Edition) 2026 Certificate of Insurance SonarSource, Inc. Latest SBOM…
Removed#6
Before: …Q2 BC_DR Test Sonar 2026 Q3 BC_DR Test.pdf Other resources SonarQube Cloud 2026 CSA CAIQ v4.1.0 Gitar Platform…
After: …Q2 BC_DR Test Sonar 2026 Q3 BC_DR Test.pdf removed SonarQube Cloud 2026 CSA CAIQ v4.1.0 Gitar Platform…
Removed#7
Before: …Other resources SonarQube Cloud 2026 CSA CAIQ v4.1.0 Gitar Platform SOC 2 Type 2 Report.pdf Gitar Certificate IAS ISO 27001-22_signed.pdf SonarQube CLI June 2026 Pentest Executive Summary.pdf View ‹count› more Controls Updated ‹ago› View all Infrastructure security Unique…
Before: …Questionnaire (current) Sonar's Current CAIQ Lite Questionnaire Responses Sonar's 2025 DORA Compliance Responses Executive Summary of SQS Penetration Test from December 2025 Executive Summary of SQC Penetration Test from March 2026 Executive Summary of SQ IDE Penetration Test from June 2025 Executive Summary of SQS Penetration Test from August 2025 Current cyberinsurance COI for Sonar. The SBOM for…
After: …Questionnaire (current) Sonar's Current CAIQ Lite Questionnaire Responses SonarQube Server 2026.5 LTA Current cyberinsurance COI for Sonar. The SBOM for…
Removed#9
Before: …page for T&Cs, DPA, and other legal documents Latest SQ Cloud documentation The current BC/DR Summary for Sonar. Must be…
After: …page for T&Cs, DPA, and other legal documents removed The current BC/DR Summary for Sonar. Must be…
Removed#10
Before: …predictable way. Sonar's Full CAIQ Responses (Mar 2025) SOC2 report for Gitar ISO 27001-22 for Gitar Vanta connects to a company's core systems to…
After: …predictable way. Sonar's Full CAIQ Responses (Mar 2025) removed Vanta connects to a company's core systems to…
Compared with the previous archived version (#1010 to #10522). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).
Archive proof
Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
SonarCloud’s trust-page document listings added Latest SBOM entries for SonarQube Server (2026.1 LTA) and (2025.4 LTA), while removing listings for the 2026 Certificate of Insurance SonarSource, Inc. and Sonar Legal Documentation Page. These are resource-navigation changes; the evidence does not establish that insurance coverage or legal documents were withdrawn.
Thursday, October 29
1 page change
Content changed
Page change
Trust pagechangedthis change
SonarCloud’s trust page refreshed its security-resource listings with newer penetration-test summaries, SonarQube Hunter Agent and Remediation Agent reports, and a Datacenter Edition SBOM. Listings for the 2025 DORA questionnaire, older pentest summaries and Gitar certifications disappeared. These updates affect the evidence customers can find for security reviews; the diff does not establish that document access was revoked.
Cite this
Trust page changed on SonarCloud’s Trust page, changed 2026-10-29 09:00 UTC (change 1 of 2).