Codecov
about.codecov.io
What it is
Codecov provides code coverage reporting and development insights, with tools for test analytics, JavaScript bundle monitoring and pull-request checks. It reports line, branch, project and patch coverage in XML, JSON and TXT formats. Pull-request annotations and coverage gates help teams review changes; Status Checks can block a merge when coverage is underperforming. Historical trends show coverage over time. Test Analytics reports failures and detects flaky tests, while Bundle Analysis flags oversized JavaScript bundles in pull requests and tracks bundle-size changes. The homepage also describes AI features for generating unit tests and reviewing pull requests. Developers can use a command-line interface or VS Code extension for coverage information and visualization. Integrations include GitHub, GitLab, Bitbucket, CI platforms and Slack. Codecov lists a broad range of supported languages, including C#, Go, Python, JavaScript, Rust and Swift. It is available through web, API, extension and self-hosted options. The free Developer plan has upload limits for private repositories; paid plans start at $5/user/mo, and a 14-day trial is available.
Spec sheet
- What it does
- Codecov measures code coverage and delivers coverage insights in code review and CI workflows.Read 15 Oct 2026 · about.codecov.io
- Purpose
- Codecov provides code coverage reporting and insights to help teams improve code quality throughout development.Read 29 Sep 2026 · about.codecov.io
- API
- Codecov documents authenticated API access using user-created access tokens and publishes API endpoints in its documentation.Read 15 Oct 2026 · docs.codecov.com
- Integrations
- Supported code hosts include GitHub, GitHub Enterprise, GitLab, GitLab CE/EE, Bitbucket, and Bitbucket Server.Read 15 Oct 2026 · about.codecov.io
- Support
- The site lists Pro Support and Enterprise Support, and the pricing comparison includes email support among plan features.Read 29 Sep 2026 · about.codecov.io
- License
- The gazebo server component uses the Functional Source License 1.1 with an Apache 2.0 license granted after two years, while the Codecov GitHub Action repository is MIT licensed.Read 15 Oct 2026 · github.com
- Headquarters
- San Francisco, CaliforniaRead 23 Sep 2026 · about.codecov.io
- Acquisition by Harness
- Harness announced acquiring Codecov from Sentry on June 2, 2026, while retaining the Codecov brand and free access for open-source projects.Read 15 Oct 2026 · harness.io
- Acquisition by Sentry
- Sentry announced acquiring Codecov on November 30, 2022.Read 15 Oct 2026 · via.tt.se
- AI capabilities
- The homepage says Codecov uses AI to generate unit tests and review pull requests.Read 15 Oct 2026 · about.codecov.io
- AI features
- The homepage says Codecov uses AI to generate unit tests and review pull requests.Read 29 Sep 2026 · about.codecov.io
- Browser extension
- The Chrome extension overlays line coverage and coverage changes on GitHub files and pull requests and supports filtering by Flags and Components.Read 15 Oct 2026 · chromewebstore.google.com
- Bundle analysis
- Bundle Analysis detects oversized JavaScript bundles, comments on pull requests, and tracks bundle-size trends.Read 15 Oct 2026 · about.codecov.io
- Changelog
- Codecov v5 added a redesigned public API v2, Components, impact analysis, critical-file labeling, improved self-hosted user management, and a redesigned interface.Read 15 Oct 2026 · docs.codecov.com
- CI integrations
- Listed CI integrations include GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI, Buildkite, TeamCity, Travis CI, and others.Read 15 Oct 2026 · about.codecov.io
- CLI
- Codecov CLI can create reports, upload coverage, and access advanced features; it installs with pip or as signed Linux and macOS binaries.Read 15 Oct 2026 · docs.codecov.com
- Code coverage
- Coverage reporting supports customizable, holistic reports with workflow feedback for any code language.Read 15 Oct 2026 · about.codecov.io
- Company profile
- LinkedIn lists Codecov by Harness as privately held, founded in 2015, headquartered in San Francisco, and employing 11–50 people.Read 15 Oct 2026 · linkedin.com
- Components
- Components group and categorize coverage using path-based filters configured in codecov.yml.Read 15 Oct 2026 · about.codecov.io
- Coverage controls
- Status Checks can block underperforming pull requests from being merged based on coverage.Read 29 Sep 2026 · about.codecov.io
- Current status
- Codecov's status page currently reports all listed systems operational and records an app-and-services outage resolved on October 5, 2026.Read 15 Oct 2026 · codecov.statuspage.io
- Developer tools
- Codecov offers a command-line interface and a VS Code extension for coverage information and visualization.Read 29 Sep 2026 · about.codecov.io
- Documentation
- The quick-start documentation walks users through CI integration, coverage upload, and viewing reports in the app and pull requests.Read 15 Oct 2026 · docs.codecov.com
- Flags
- Flags separate coverage by test type, code area, or monorepository project and retain historical trends; Carryforward Flags reuse prior coverage when tests are not rerun.Read 15 Oct 2026 · about.codecov.io
- GitHub Checks
- GitHub Checks displays uncovered lines directly in GitHub pull requests.Read 15 Oct 2026 · about.codecov.io
- Language integrations
- The integrations page lists languages including C#, Elixir, PHP, Go, Python, JavaScript, C++, Rust, Ruby, Swift, Java, Kotlin, and TypeScript.Read 15 Oct 2026 · about.codecov.io
- Language support
- The integrations page lists languages including C#, Elixir, PHP, Go, Python, JavaScript, Rust, Java, and Swift.Read 29 Sep 2026 · about.codecov.io
- Legal developer name
- The Chrome Web Store identifies the developer as Functional Software, Inc., at 45 Fremont Street, San Francisco.Read 15 Oct 2026 · chromewebstore.google.com
- Limit: pricing and depth
- A G2 reviewer calls Codecov expensive and says the web app is flat, with features largely limited to standard coverage visualization.Read 15 Oct 2026 · g2.com
- Limit: reliability and permissions
- G2 reviews mention broken email links, occasional GitHub coverage loading problems, and concerns that GitHub OAuth requests broad permissions.Read 15 Oct 2026 · g2.com
- Limit: setup complexity
- A G2 reviewer says adding all test suites and code is a long and complex process.Read 15 Oct 2026 · g2.com
- Organization approval
- Codecov states that an administrator must approve an organization before use.Read 29 Sep 2026 · about.codecov.io
- Praise: integration
- G2 reviewers repeatedly praise easy CI/GitHub integration, pull-request reporting, and coverage visualization.Read 15 Oct 2026 · g2.com
- Praise: reporting
- G2 reviewers describe the reports as informative, well structured, and useful for finding untested areas and debugging.Read 15 Oct 2026 · g2.com
- Rating on Chrome Web Store
- 4.8 out of 5 from 9 ratingsRead 15 Oct 2026 · chromewebstore.google.com
- Rating on G2
- 3.9 out of 5 from 10 reviewsRead 15 Oct 2026 · g2.com
- Security certification
- Codecov's security page states that it is SOC 2 Type II certified and gives an audit period through August 31, 2024.Read 29 Sep 2026 · about.codecov.io
- Security controls
- Codecov says user tokens are encrypted at rest with AES-256 and the encryption key is split across separate stack locations.Read 15 Oct 2026 · about.codecov.io
- Security incident
- Codecov's April 2021 postmortem says its Bash Uploader was modified to exfiltrate git remote URLs and environment variables, prompting a signed, SHA-verifiable uploader and monitoring controls.Read 15 Oct 2026 · about.codecov.io
- Security practices
- Codecov says it performs daily vulnerability scanning and uses endpoint detection, code scanning, dependency scanning, and security code reviews.Read 29 Sep 2026 · about.codecov.io
- Self-hosting
- Self-hosted Codecov is configurable with YAML or environment variables and the documentation says it requires a license technically but does not require purchasing one from Codecov.Read 15 Oct 2026 · docs.codecov.com
- Source handling
- Codecov says it does not store source code in general, though archived raw uploads may contain it and cloud coverage reports are stored indefinitely unless archiving is disabled.Read 29 Sep 2026 · about.codecov.io
- Source overlays
- Source Code Coverage overlays absolute coverage and coverage changes on source files.Read 15 Oct 2026 · about.codecov.io
- Source retention
- Coverage uploads are archived for one month by default and users can disable archiving; reports may contain source code that Codecov attempts to scrub.Read 15 Oct 2026 · about.codecov.io
- Status checks
- Codecov status checks can block pull requests that fall below configured coverage requirements.Read 15 Oct 2026 · about.codecov.io
- Test analytics
- Test Analytics reports failed tests, detects flaky tests, shows stack traces, and tracks test-suite performance statistics.Read 15 Oct 2026 · about.codecov.io
Plans and prices
Developer Free Free 1 user for private repositories · unlimited public repositories · 250 private-repository uploads · unlimited public uploads Read 15 Oct 2026 · about.codecov.io
Team $5 a month $5 per user/month Up to 10 users · unlimited public and private repositories · 2,500 private-repository uploads · unlimited public uploads Read 15 Oct 2026 · about.codecov.io
Pro $12 a month $12 per user/month Unlimited users · unlimited public and private repositories · unlimited uploads · bundle analysis · test analytics · SAML and Okta login Read 15 Oct 2026 · about.codecov.io
Enterprise Priced on request Custom pricing Custom users and unlimited repositories/uploads · dedicated IP allowlisting · dedicated support and account team Read 15 Oct 2026 · about.codecov.io
Strong points and limits
Strong points
- Reports line, branch, project and patch coverage.
- Coverage gates can block underperforming pull requests.
- Includes test analytics and bundle analysis.
- Offers self-hosted and VS Code extension options.
Limits
- Organization approval by an administrator is required.
- Developer plan limits private repository uploads.
- Cloud coverage reports are stored indefinitely unless archiving is disabled.
Who it suits
Codecov suits development teams that want coverage checks in pull requests alongside test and bundle analysis. Its Developer plan offers a free option, while larger usage needs may call for paid tiers.
Codecov in depth
Read the full write-up
Codecov is a coverage and test-quality service for development teams that want pull requests and CI to enforce measurable standards. It suits organizations working across many languages and code hosts, especially those that need more than a standalone coverage report. The principal trade-off is scale: private-upload limits shape the free and entry plans, while paid plans charge per user.
Overview
Codecov measures line, branch, project, and patch coverage, then carries those results into code review through pull-request annotations and status checks. Coverage gates can block an underperforming pull request from merging, turning an agreed threshold into an enforceable control rather than a dashboard metric. Historical trends help teams see whether coverage is improving or eroding over time.
Test Analytics reports test failures and identifies flaky tests, giving CI maintainers evidence about unstable or costly suites. Bundle Analysis warns about oversized JavaScript bundles in pull requests and records bundle-size changes over time. Those additions make Codecov more useful to teams that want test and frontend signals beside coverage; a project seeking only occasional coverage output may not need the broader service.
Key features
Coverage workflow
Reports can be supplied in XML, JSON, or TXT. A command-line interface supports terminal workflows, while the VS Code extension brings coverage information and visualization into the editor. Status checks and gates are the most consequential features for teams that want quality criteria applied before merge.
Integrations and language breadth
Codecov connects with GitHub, GitLab, and Bitbucket, multiple CI platforms, and Slack. Its supported languages include Bash, C, C#, C++, Clojure, D, Dart, Elixir, Erlang, Fortran, F#, Go, Haskell, Java, JavaScript, Julia, Lua, MATLAB, Perl, PHP, Python, R, Ruby, Rust, Salesforce, Scala, TypeScript, Vala, Xcode, Objective-C, Swift, Kotlin, and Groovy. That range favors polyglot organizations over teams tied to one ecosystem.
AI, security, and source handling
The homepage says Codecov uses AI to generate unit tests and review pull requests. Codecov states that it is SOC 2 Type II certified, with an audit period through August 31, 2024, and describes daily vulnerability scanning, endpoint detection, code scanning, dependency scanning, and security code reviews. It says source code is not generally stored, although archived raw uploads may contain source; cloud coverage reports are stored indefinitely unless archiving is disabled. An administrator must approve an organization before use, an important operational step for controlled deployments.
Pricing
Codecov uses a freemium model, offers a 14-day trial, and starts paid access at $5/user/mo. The free Developer plan costs nothing. It allows one user for open-source projects or unlimited users for private projects, 250 private repository uploads, and unlimited public repositories and uploads. That is a workable on-ramp for open source and small private workloads, but the private-upload ceiling can become the limiting factor as CI activity grows.
Team costs $5 a month, billed at $5 per user/month, with a maximum of 10 users, 2,500 private repository uploads, unlimited public and private repositories, and unlimited public uploads. It fits a small private engineering group that can forecast upload volume; both the seat cap and quota matter for larger teams.
Pro costs $12 a month, billed at $12 per user/month, and removes those scale constraints with unlimited users, repositories, and uploads. It is the straightforward choice for growing organizations, though per-user billing raises the recurring cost as membership expands. Enterprise has custom pricing, a custom user limit, unlimited repositories and uploads, and a dedicated cloud option for organizations requiring that deployment arrangement. The pricing comparison includes email support, with Pro Support and Enterprise Support also offered.
Platforms
Codecov is available as an API, web service, extension, and self-hosted deployment. That combination supports hosted workflows, editor use, automation, and organizations that need to run the service in their own environment.
Who it's for
Choose Codecov when pull-request controls, CI integrations, historical coverage, and multi-language support are central requirements. It is particularly well matched to teams that want coverage gates alongside flaky-test analysis or JavaScript bundle tracking. Open-source projects receive the strongest value from the free plan because public repositories and uploads are unlimited. Private teams should estimate uploads and seats before committing: the Developer and Team limits can be restrictive, while Pro is priced per user.
Pros and cons
Pro: Coverage gates and status checks make coverage enforceable during review.
Pro: Broad language, code-host, CI, and Slack integrations suit polyglot delivery environments.
Pro: Test Analytics and Bundle Analysis add actionable CI and frontend signals.
Con: The free plan permits only 250 private repository uploads, limiting sustained private CI use.
Con: Team is capped at 10 users and 2,500 private uploads, while Pro's per-user billing can grow with headcount.
Con: Archived uploads may contain source code and cloud reports persist indefinitely unless archiving is disabled.
Alternatives
Coveralls is the better fit when always-free treatment for open-source and public repositories is the priority.
ReportGenerator suits readers seeking a local cross-platform reporting tool with an open-source basic tier and paid individual options.
BullseyeCoverage is an option for teams wanting a dedicated commercial coverage product with a temporary evaluation license.
OpenClover is appropriate when a forever-free, no-license-key tool with no usage limits is preferred.
gcov fits projects already compiled with GCC that need a free, instrumented coverage workflow.
SimpleCov is the focused choice for MIT-licensed Ruby coverage.
cargo-llvm-cov targets Rust projects wanting an Apache-2.0 or MIT-licensed free tool.
Coverage.py is the natural alternative for open-source Python coverage, with an enterprise subscription available through Tidelift.
See the Test Coverage Tools list for more options.
Verdict
Codecov is a strong choice for teams that want coverage to govern pull-request merges while also tracking flaky tests, historical trends, and bundle growth across a broad technical stack. Its main reason to look elsewhere is predictable: private projects may outgrow the free and Team upload quotas, and Pro's per-user pricing may not suit large organizations.
Verdict
Codecov combines coverage reporting with pull-request controls, test analytics and bundle tracking. Review its upload limits and source-handling details when choosing a deployment and plan.
Where Specifiction places it
- Test Coverage Tools#1 of 279.4
