Codacy

Category

Code Quality, Security

Website

codacy.com

Product

Funded in 2012, 850,000+ users

Focus

Quality, Coverage & Security for Developers

Unique value proposition

“Build clean, secure code efficiently and fearlessly”

Source

Proprietary

Access

• Free version
• Paid

Deployment

• SaaS

Certifications

• SOC 2 Type I
• SOC 2 Type II

Useful Resources

What is Codacy?

Codacy is building the only toolbox that developers will need to merge clean, quality, and secure code. We help developers find and fix common security and quality issues with a single solution. The platform uses Artificial Intelligence to explain issues and suggest code quality fixes, directly in the Git provider.

It works out of the box, connecting seamlessly with your favorite git provider or IDE, and analyzing code written in 49 languages and frameworks. Integrate it one time, and the developer will get a continuous stream of new 3rd party and open source tools, seamlessly orchestrated to achieve the analysis they need to find and fix coding issues.

Key Features

Merge clean, high-quality code faster, and skip the rework

• Take code reviews from hours to minutes
• Enforce coding standards on every Pull Request
• View the quality health of your repositories from a single dashboard and benchmark the performance with a simple grading system

Confidence with code coverage

• Monitor, maintain and expand unit test coverage
• Get consistent test coverage with specific targets and thresholds to avoid Pull Requests that don’t meet your policy standards

360° AppSec risk, simplified

Analyze all your code from the inside:

• Static Application Security Testing (SAST)
• Supply Chain Security (SCA)
• Secrets Detection: checks your code for exposed API keys, passwords, certificates, encryption keys & more
• Infrastructure as Code (IAC): scans Terraform, CloudFormation & Kubernetes infrastructure-as-code for misconfigurations

And from the outside:

• Now available: Penetration Testing (PenTest)
• Coming soon: Dynamic Application Security Testing (DAST) and Cloud Security Posture Management (CSPM)

Track and optimize engineering performance

• Data-driven insights using DORA metrics
• Find and fix performance bottlenecks
• Benchmark goals across teams and projects

Quality Engineering Use-cases

Integrations

More Features

• Pen Testing in partnership with Bulletproof
• Semgrep Pro integration
• Dynamic Application Security Testing (DAST) #coming-soon
• Cloud Security Posture Management (CSPM) #coming-soon

Testimonials

How Vevo uses Codacy to replace legacy systems while guaranteeing code coverage

How Green Flag uses Codacy for PCI DSS compliance

How Stim uses Codacy to achieve high-quality code

How O.C. Tanner is saving over 60% in costs

Background

Developers are modern day artisans, crafting code, building digital art, and changing the world and how we all work and play. Every craftsman uses a series of tools and stores them in toolboxes. Codacy is building the only toolbox that developers will need to merge clean, quality, and secure code.

By using a single set of tools that have been thoughtfully selected and built to work with each other, the developer can focus on their craft and know they will have everything they need.