← Back to Discover

Codacy

A platform that scans code for quality problems, security flaws, risky dependencies and AI-coding policy violations, with AI review on pull requests and guardrails for coding agents and IDEs.

Code reviewCode & secrets security
Visit website ↗

What it does

Codacy lets teams define coding standards once and apply them to every project. It checks for code quality issues, hardcoded secrets, insecure dependencies, static security flaws, infrastructure-as-code problems, duplicated code and missing test coverage, and it adds checks for AI-specific risks such as unapproved model calls. The site says you add Git projects in two clicks and see scan results within minutes. Its AI features include an AI Reviewer that comments on pull requests with fix suggestions, summaries and false-positive detection, and AI Guardrails that scan code while a coding agent or IDE is generating it so the agent can fix its own issues. An AI Risk Hub holds central AI coding policies. Dynamic testing of running apps and API endpoints is also listed. For audits, it produces SBOM exports and scan reports aimed at SOC 2, ISO 27001 and similar standards. It connects to agents, IDEs and Git providers, syncs issues with Jira and sends critical alerts to Slack. The site offers a 14-day free trial with no credit card.

Capabilities

  • One set of coding standards enforced from the IDE through to Git
  • AI Reviewer for pull requests, with fix suggestions and summaries
  • AI Guardrails that check agent-written code as it is generated
  • Secret scanning, dependency checks, static analysis and dynamic testing
  • Test coverage tracking and exportable SBOM and compliance reports
  • Jira and Slack integrations

When to use it

  • Several teams or coding agents write code and you want a single policy for all of it
  • You need audit-ready security and SBOM reports
  • You want AI-generated code checked before it reaches a pull request
  • You want fewer separate scanning tools to maintain