Detailed overview

Codacy is a code quality and security platform built for AI-assisted engineering, combining automated code review, SAST, secret scanning, software composition analysis (SCA), infrastructure-as-code security, and DAST with coverage tracking and compliance reporting (SOC2, ISO27001, SBOM). It offers AI Guardrails and an AI Risk Hub to enforce coding and security policies on AI-generated code from IDEs and coding agents through to git, containers, and runtime. It integrates with GitHub, GitLab, Bitbucket, CI/CD pipelines, IDEs, Jira, and Slack, providing dashboards for quality and security trends across teams. Well suited for teams needing broad language support, AI code review, and policy enforcement across the SDLC, though results can be noisy and advanced controls require paid tiers.

Pricing details

Free trial for 14 days with no credit card required; free for public repositories with paid plans for private teams.

Visit Codacy

Key features

Code quality analysis
AI code review
Security scanning (SAST, secrets, IaC)
Software composition analysis (SCA)
DAST runtime testing
Coverage tracking
Compliance and audit reports (SOC2, ISO27001, SBOM)
AI coding policy enforcement (AI Guardrails)

Systems you can build

Web applications
APIs
Containerized applications
Infrastructure-as-code deployments

Strengths

Broad language support
Good dashboards
Easy CI integration
Centralized AI coding policy enforcement across IDEs and agents

Limitations

Can be noisy
Advanced controls are paid
Needs quality policy tuning

Verification sources

Listing details are checked against official sources.

https://www.codacy.com