RESTON, Va., Sept. 10, 2026 (GLOBE NEWSWIRE) — Carahsoft Technology Corp., The Trusted Government IT Solutions Provider®, today announced it has added Sonar, a global leader in AI code verification and governance, to its General Services Administration (GSA) Schedule contract. This enables Carahsoft and its reseller partners to provide Sonar’s zero-trust, multilayered verification platform, SonarQube, to Federal, State and Local Governments and Educational Institutions.
“Government agencies face growing pressure to modernize legacy systems while maintaining the highest standards of security and compliance,” said Nathan Jones, Vice President of Public Sector at Sonar. “Sonar’s inclusion on Carahsoft’s GSA Schedule helps us to support the Public Sector with reducing outages, improving security and compliance efforts and lowering costs and risks associated with agencies adopting AI and agentic coding. Together with Carahsoft, we look forward to helping agencies innovate with confidence while maintaining the accountability, auditability and resilience their missions demand.”
Sonar helps Public Sector organizations establish a consistent, auditable approach to verifying code across their software development lifecycle. SonarQube’s zero-trust, multilayered analysis spans automated code review, test coverage reporting and security analysis of all code in real time — identifying bugs, vulnerabilities and complexity issues before they reach production. Through Sonar’s recent acquisition of Gitar, organizations can also leverage AI-native code review capabilities to review and validate agentic-written code. With Sonar, Government agencies can build secure, reliable and maintainable applications while reducing risk from compounding in mission-critical systems.
For Government agencies managing sensitive data and complex legacy systems, Sonar supports secure modernization by centralizing code analysis and policy enforcement across teams, programs and contractor ecosystems. SonarQube can help organizations align code verification with standards including NIST SSDF, OWASP, CWE, STIG and CASA, and provides reporting that supports continuous compliance and audit readiness. Its deployment flexibility, including self-managed options, helps agencies apply rigorous verification in high-security environments.
“Government agencies are increasingly focused on delivering secure, high-quality software while accelerating modernization initiatives,” said Natalie Gregory, Vice President managing DevSecOps Solutions at Carahsoft. “We are pleased to add Sonar’s AI code verification and governance solutions to our GSA Schedule contract, making its capabilities more accessible to the Public Sector. Sonar’s ability to help agencies improve code quality, strengthen security, reduce technical debt and support compliance efforts makes it a valuable addition to our portfolio. Together with our reseller partners, we look forward to helping customers build and maintain secure, reliable software that advances mission success.”
Sonar’s solutions are available through Carahsoft’s GSA Schedule No. 47QSWA18D008F, SEWP V contracts NNG15SC03B and NNG15SC27B and NASPO ValuePoint Master Agreement #AR2472. For more information, contact the Carahsoft Team at (703) 581-6680 or SonarSource@carahsoft.com; or learn more about Sonar’s solutions here.
About Carahsoft
Carahsoft Technology Corp. is The Trusted Government IT Solutions Provider, supporting Public Sector organizations across Federal, State and Local Government agencies and Education and Healthcare markets. As the Master Government Aggregator® for our vendor partners, we deliver solutions for DevSecOps, Cybersecurity, MultiCloud, Artificial Intelligence, Customer Experience and Engagement, Open Source and more. Working with resellers, systems integrators and consultants, our sales and marketing teams provide industry leading IT products, services and training through hundreds of contract vehicles. Visit us at www.carahsoft.com.
Carahsoft Media Contact
Mary Lange
(703) 230-7434
PR@carahsoft.com
About Sonar
Sonar, a global leader in AI code verification and governance, helps reduce outages, improve security, and lower costs and risks associated with AI and agentic coding. As a zero-trust, multilayered verification platform, Sonar enables organizations to securely develop at the speed of AI, and with the addition of Gitar’s AI-native code review, offers the most comprehensive way to verify code in the agentic era. A Leader in the Gartner® Magic Quadrant™ for Technical Debt Management Tools¹, Sonar is the foundation for high-performance software engineering—analyzing over 750 billion lines of code daily to ensure applications are secure, reliable, and maintainable. Rooted in the open source community, Sonar is trusted by 7M+ developers globally, including teams at Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company.
To learn more about Sonar, please visit: www.sonar.com
Cautionary note: Forward-looking statements
This press release may contain forward-looking statements about future expectations, plans, and prospects. These statements are based on current beliefs and assumptions and are subject to risks and uncertainties. The information in this press release is provided as of this date, and we undertake no obligation to update any statements.
¹Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.
Sonar Media Contact
Katie Hyman
press@sonarsource.com
