Codacy
Automated code review with security scanning and coverage in the pull request.
What it is
Codacy runs static analysis, security scanning (SAST, SCA, secrets, IaC) and coverage tracking on every pull request, posting inline comments and enforcing gates. It wraps many open-source linters behind one configuration and dashboard, and supports self-hosting for regulated environments.
Best for
Where it is strong
- Per-developer pricing is cheaper than SonarQube for small teams on big repositories.
- Bundles quality and security scanning in one PR check.
- Very quick to set up — connect a repository and it works.
Where it falls short
- Wrapping open-source linters means analysis depth depends on those tools.
- Configuration across many languages becomes fiddly.
- Less established than SonarQube in enterprise procurement.
Pricing
From $18 per developer/month (Team, billed annually; $21 monthly)
Free tierFree tier: Developer plan is free forever, and Team is free for open-source projects.
What drives the bill: Per-developer pricing rather than lines of code, which suits small teams with large codebases. Team covers up to 30 developers and 100 private repos; beyond that Business is quote-based.
Check current pricing on Codacy’s siteFigures are indicative and were last reviewed August 2026. Vendors change pricing often; confirm before you commit.
Works with
What people who use Codacy say
No reviews of Codacy yet. If you have used it in anger, yours would be the first.
Alternatives to Codacy
If Codacy is not the right fit, these solve the same problem differently.
SonarQube
Code Quality
The static-analysis standard: 30+ languages, quality gates, clean-as-you-code.
DeepSource
Code Quality
Static analysis with autofix, tuned hard for low false-positive rates.
Qlty (formerly Code Climate Quality)
Code Quality
Maintainability and technical-debt tracking, spun out of Code Climate as Qlty.
Qodana
Code Quality
JetBrains' IDE inspections, running as a CI quality gate.