Sonargraph
Munich architecture and dependency analyser that enforces architecture rules and quality gates in your builds
Quick Overview
| Company | hello2morrow GmbH |
|---|---|
| Category | Static Code Analysis Tools |
| Headquarters | Munich, Germany |
| Founded | Not stated |
| EU Presence | Yes - Germany (EU) |
| Data Location | Runs on your own machines and build servers |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | Yes - desktop and build server tools |
| Main Features | Architecture DSL, dependency visualisation, hundreds of metrics, virtual refactorings, build quality gates, IDE plugins, MCP server for coding agents |
| Pricing | Team license from an online price calculator (minimum 5 users; the default selection showed EUR 60 per user per month); free Explorer edition |
| Best For | Teams that want to enforce architecture and cycle-free dependencies |
| Replaces | Structure101, NDepend-style architecture checks |
Detailed Review
Sonargraph is a software quality analyser focused on architecture, metrics and dependency cycles. Its vendor states it supports Java, Kotlin (JVM), C#, Python 3, Go, TypeScript and C/C++ out of the box.
hello2morrow GmbH is registered in Munich (HRB 194643). The product family spans Architect, Build, Developer, Enterprise and a free Explorer edition.
Architecture as code
Rules are written in an architecture DSL and checked by Sonargraph-Build on the build server, which fails the build when the quality model is violated. Sonargraph-Developer gives the same feedback in the IDE before commit.
AI agents
The Zugel MCP server gives coding agents the architecture rules so they respect them, and exports known violations the agent can fix.
Licensing
One team subscription covers the whole family. The vendor's price calculator depends on language selection and team size, with a minimum of five users, and evaluations are free.
Limitations to Consider
Sonargraph is not a vulnerability scanner, so it does not replace Veracode on security. Language support is narrower than platforms such as Teamscale. Pricing depends on a calculator tied to languages and team size, so costs vary.
Who Should Use Sonargraph
Java, C#, Python, Go and TypeScript teams that want enforceable architecture rules and dependency control, from a German vendor.
Pros and Cons
Pros
- Architecture DSL with build enforcement
- Free Explorer edition
- Runs on your own infrastructure
- IDE and build integration
- German vendor
Cons
- No security vulnerability scanning
- Narrower language list
- Minimum of five users for team licenses
- Desktop-centric workflow
Alternatives to Sonargraph
Other European static code analysis tools worth comparing before you decide:
SonarQube
Switzerland · Swiss code-quality platform with SAST, secrets detection and AI fixes
Qodana
Czech Republic · JetBrains code quality platform that runs the IDE inspections in CI
Teamscale
Germany · Software quality platform covering code, tests, security and architecture
Codacy
Portugal · Automated code review and quality gates with AI-assisted fixes
See all European static code analysis tools or compare them directly against Structure101 on our alternatives page.
Frequently Asked Questions
No. It analyses architecture, dependencies and metrics. Pair it with a security scanner such as SonarQube or Aikido Security.
Yes, Sonargraph-Explorer is free and gathers metrics and identifies cyclic dependency groups.
Java, Kotlin (JVM), C#, Python 3, Go, TypeScript and C/C++ out of the box, per the vendor.