SonarSource launches Hunter Agent for logic flaw detection

SonarSource has released SonarQube Hunter Agent, an AI agent designed to find security flaws that pattern-based scanning cannot detect, such as broken access control, business-logic flaws and weaknesses in authentication or session handling.

The agent works across a whole codebase, tracing how code, data and user identity move through an application to identify where implementation has drifted from intended behaviour. It investigates and confirms each candidate issue before presenting it to developers, and findings appear in the existing SonarQube issue list.

Hunter Agent runs in the background on a schedule set by the team, with manual scans also possible. It is available now on SonarQube Cloud, with support for SonarQube Server planned. The company positions it as an addition to its existing static application security testing rather than a replacement.