diff --git a/.changeset/lazy-books-design.md b/.changeset/lazy-books-design.md
new file mode 100644
index 0000000000..c7f24fb0cc
--- /dev/null
+++ b/.changeset/lazy-books-design.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-sonarqube': patch
+---
+
+amend getSecurityHotspotsUrl to conditionally remove project path if sonarqube is self hosted
diff --git a/plugins/sonarqube/src/api/SonarQubeClient.ts b/plugins/sonarqube/src/api/SonarQubeClient.ts
index f742fe026f..171e0c3187 100644
--- a/plugins/sonarqube/src/api/SonarQubeClient.ts
+++ b/plugins/sonarqube/src/api/SonarQubeClient.ts
@@ -130,9 +130,9 @@ export class SonarQubeClient implements SonarQubeApi {
           'en-US',
         )}&resolved=false&view=list`,
       getSecurityHotspotsUrl: () =>
-        `${baseUrl}project/security_hotspots?id=${encodeURIComponent(
-          componentKey,
-        )}`,
+        `${baseUrl}${
+          baseUrl === 'https://sonarcloud.io/' ? 'project/' : ''
+        }security_hotspots?id=${encodeURIComponent(componentKey)}`,
     };
   }
 }