Scribble Profiles
Browse the directory
Scribble ProfilesLiving profile dossier
Product profile Living profile

Codacy

codacy.com ↗

Codacy is a cloud-hosted platform that scans software code for quality problems and security weaknesses, including AI-generated code, and reports findings on pull requests, in IDEs, in AI coding agents, in container images and at runtime.

SecurityPublic web research
Visit product ↗AI Profile ↗
Source-backed public recordPrimary source ↗

Snapshot

Continue to About ↓
What it does
  • Codacy is a cloud-hosted platform that scans software code for quality problems and security weaknesses, including AI-generated code, and reports findings on pull requests, in IDEs, in AI coding agents, in container images and at runtime.
More detail
  • It also centralizes coding and AI policies so teams can enforce the same standards across projects, agents and editors.
Best for
  • Engineering teams on GitHub, Bitbucket or GitLab Cloud that want code quality, SAST, SCA, secrets, IaC and DAST scanning consolidated in one place, especially teams adopting AI coding agents that need guardrails and policy enforcement.
Pricing
  • Per-developer subscription with no usage limits on the paid tiers.
More detail
  • Developer is $0 forever and covers IDE, CLI and agent plugins plus local SAST, SCA and secrets scans.
  • Team starts at $18 per dev/month billed yearly or $21 per dev/month billed monthly, is scoped to teams up to 30 devs with up to 100
Main limitation
  • Organizations on self-hosted Git, Azure Repos or air-gapped environments, since Codacy's cloud scanning does not support those setups
More detail
  • teams over 30 developers should expect the quote-based Business tier rather than the published Team price.
Record
Living and monitored
Reviewed
Evidence
Public web research

About

  • Codacy is a cloud-hosted platform that scans software code for quality problems and security weaknesses, including AI-generated code, and reports findings on pull requests, in IDEs, in AI coding agents, in container images and at runtime.
  • It also centralizes coding and AI policies so teams can enforce the same standards across projects, agents and editors.

What it helps with

Capabilities

A practical view of what is available and where limitations apply.

OfferingAvailableDetail
SAST, secrets and IaC scanning YesSource code security checks for injection threats, hardcoded secrets and cloud misconfigurations
Software Composition Analysis (SCA) YesInsecure dependency detection; daily CVE and malware re-scans are a Business-tier option
AI Reviewer on pull requests YesAI-assisted review with fix suggestions; documented as currently GitHub-only, on Team and Business plans
AI Guardrails for agents and IDEs YesScans AI-generated code against policies with agent hand-off for auto-fixes
AI Inventory and AI Risk Hub LimitedListed as Business-tier options; surfacing AI models, API keys and MCP servers depends on that plan
DAST and container image scanning LimitedAvailable as Business-tier options, not on the published Team plan
Self-healing gates for Claude Code LimitedFlagged as beta on the homepage; not generally available
Self-hosted Git and Azure Repos support NoOfficial FAQ states neither is supported; Azure Repos has a waitlist
SSO/SAML and audit logs LimitedBusiness tier only
Language coverage Yes38 languages on Developer, 49 with shared coding standards on Team and above

Bot trust

How confidently AI systems can verify this profile from public evidence.

—of 100
ChatGPT—/100
Claude—/100

This profile has not completed a Bot Score assessment yet.

Evidence

Where this record came from, when it was reviewed, and how confidently it can be used.

Verification
  • Scribble researched these facts from the linked public sources.
  • The owner has not manually confirmed every field.
Last reviewed
Primary source
codacy.com
Technical profile details
Record IDc632e985-70a1-402b-b9ee-b4aa7e95a30bCanonical URLhttps://profiles.scribble.network/listing/codacy-c632e985