Westcon-Comstor and Sonar partner on AI code security for partners

Westcon-Comstor has entered into a multi-region distribution agreement with Sonar, making SonarQube, Sonar's code verification platform, accessible to channel partners across Europe, the Middle East, Africa (EMEA), and Asia-Pacific (APAC), as detailed in Channel Insider. This collaboration aims to equip partners with tools to expand their DevSecOps offerings as organizations increasingly adopt AI-assisted development, while simultaneously addressing the associated security and governance risks.

The partnership focuses on leveraging SonarQube's automated code verification capabilities to identify security vulnerabilities and code issues before software deployment. As AI integration in software development grows, this agreement provides partners with a solution to help customers manage the speed of AI-assisted development without compromising security.

Sonar research indicates that SonarQube users experience fewer production outages related to AI-generated code and can achieve token usage reductions through improved code quality and governance. This initiative supports the broader shift-left movement by enabling security testing and remediation earlier in the development lifecycle, creating opportunities for partners to build services around AI code governance and application security.

Source: Channel Insider