# How Xero uses Sonar

**3,500 repositories**: “onboard 3,500 repositories”

As published on [sonarsource.com](https://www.sonarsource.com/customer-stories/xero/), April 2026. Captured by usedby on 2026-10-07.

- Company: [Xero](https://www.usedby.ai/companies/xero.md)
- Tool: [Sonar](https://www.usedby.ai/tools/sonar.md)
- Industry: [Accounting & Audit](https://www.usedby.ai/companies/industry/accounting-audit.md)
- Teams: Security, Platform engineering

## What the story says

Xero moved its code quality and security analysis from an on-premises setup to SonarQube Cloud, onboarding its repositories with scripts and APIs. Engineers get feedback in GitHub pull requests, and quality gates are aligned across global product teams.

Summary written by usedby from the source page, in English. The figures are those of Sonar and Xero, not ours.

> Moving from a high-maintenance legacy setup to the cloud meant Xero could successfully onboard 3,500 repositories, eliminate significant infrastructure overhead, and standardize quality gates across the organization.

- **3,000**: “onboard 3,000 repositories”
- **nine months**: “the team maintained the on-premises server for nine months”

> As we move toward using AI tooling for code generation, it is reassuring to know that all our code is checked and scanned to provide a sanity check on the quantity of code being produced.
>
> Sarah Burgess, Lead Product Manager, Security

> We now have greater confidence in what we push to production, whether it was written by a robot or one of our awesome engineers.
>
> Sarah Burgess, Lead Product Manager, Security Team

## What usedby checked

We compared the story with its live page on 2026-10-07.

- Checked: the figure 3,500 repositories is printed word for word on the page, near the name of Xero.
- Checked: the passage quoted above is copied word for word from the page, near the name of Xero.
- Checked: the publication date is read from the page’s own metadata, never guessed.
- Checked: Xero uses Sonar. Confirmed line. Latest check across sources: 2026-10-07.
- Not checked: the result itself. We quote it; we did not measure it.

---
Source: https://www.usedby.ai/case-studies/xero-sonar · How we check: https://www.usedby.ai/methodology