Skip to content
SPECIFICTION
Get listed

Impact Code Analysis

impactcodeanalysis.com

From $149/mo Free plan WebAPISelf-hostedBrowser extension
Visit impactcodeanalysis.com
Spec score 9.0 #3 of 26 in Code Quality Management Software

What it is

Impact Code Analysis combines code quality review, security scanning and architecture visualization for analyzed repositories. It reports a score from 0 to 100, an A–F grade, ranked issues, a project wiki and a dependency map. The platform supports 29 languages using tree-sitter parsing. Security analysis includes checks for SQL injection, XSS and hardcoded credentials, with more than 50 rules mapped to CWE numbers and OWASP Top 10 categories. It connects to GitHub, GitLab and Bitbucket and can send notifications through Slack, Teams or email. Claude-based issue explanations, suggested fix synthesis and pull request review mode are also listed. Deployment options include web, API and self-hosted offerings. The free plan costs nothing and covers one public repository, one user, one project and five rescans per project. The separate free 14-day trial has the same listed user, project and rescan limits. Paid plans start with Starter at $149 a month, with a one-year minimum commitment. Business and Enterprise list Docker deployment options.

Spec sheet

What it does
Impact combines code-quality analysis, security scanning, dependency and architecture visualization, and impact analysis in one platform.Read 15 Oct 2026 · impactcodeanalysis.com
Product
Impact describes its platform as code quality, security scanning, and architecture visualization in one system.Read 29 Sep 2026 · impactcodeanalysis.com
Integrations
The product connects to GitHub, GitLab, and Bitbucket, and supports Slack, Teams, and email notifications.Read 29 Sep 2026 · impactcodeanalysis.com
Compliance
The trust page lists SOC 2 Type II as in progress, GDPR and CCPA as compliant, and says a HIPAA BAA is available on the Enterprise tier.Read 29 Sep 2026 · impactcodeanalysis.com
Support
The pricing page lists email support for Starter, priority email support for Professional, and phone plus email support for Business.Read 29 Sep 2026 · impactcodeanalysis.com
AI assistance
Claude-powered explanations, suggested fixes, issue prioritization, pull-request review, and 90-day quality forecasting are provided.Read 15 Oct 2026 · impactcodeanalysis.com
AI triage
A LinkedIn product update says AI prioritization is intended to surface genuine risk and reduce false positives.Read 15 Oct 2026 · linkedin.com
Analysis
The product reports a 0–100 score, an A–F grade, ranked issues, a project wiki, and a dependency map for analyzed repositories.Read 29 Sep 2026 · impactcodeanalysis.com
Architecture graphs
The product provides an interactive 3D force graph with coupling, dependency depth, circular-cycle, hotspot, and blast-radius views.Read 15 Oct 2026 · impactcodeanalysis.com
Company age
LinkedIn lists the company as founded in 2026.Read 15 Oct 2026 · linkedin.com
Company location
LinkedIn lists Harmony, North Carolina as the headquarters and primary location.Read 15 Oct 2026 · linkedin.com
Company size
LinkedIn lists a company size of 2–10 employees.Read 15 Oct 2026 · linkedin.com
Company type
LinkedIn classifies Impact Code Analysis as a public company.Read 15 Oct 2026 · linkedin.com
Compliance status
The trust page lists GDPR and CCPA compliance, Enterprise BAA availability for HIPAA, and SOC 2 Type II as in progress for a Q3 2026 audit.Read 15 Oct 2026 · impactcodeanalysis.com
Continuous monitoring
GitHub, GitLab, and Bitbucket pushes can trigger HMAC-SHA256-validated rescans with version history and drift notifications.Read 15 Oct 2026 · impactcodeanalysis.com
Disclosure policy
Security reports sent to [email protected] are acknowledged within 24 hours and have a stated 90-day patch target.Read 15 Oct 2026 · impactcodeanalysis.com
Documentation depth
The documentation includes walkthroughs for quickstart, repository connections, seven pillars, benchmarking, DORA, SBOM, contract drift, AI, MCP, quality gates, CI/CD, API, Docker, and security.Read 15 Oct 2026 · impactcodeanalysis.com
Editor integration
A VS Code extension surfaces blast radius, contract drift, risk, and file context inline.Read 15 Oct 2026 · impactcodeanalysis.com
Generated remediations
A LinkedIn product update says the platform generates reviewable remediation changes for engineers to inspect and ship.Read 15 Oct 2026 · linkedin.com
Identity controls
Published controls include SAML SSO, TOTP MFA, role-based access, token revocation, and tamper-evident audit logging.Read 15 Oct 2026 · impactcodeanalysis.com
Language support
The maker lists 29 languages parsed with tree-sitter, including JavaScript, TypeScript, Python, Java, Go, C#, C++, Rust, Ruby, PHP, Kotlin, Swift, and others.Read 15 Oct 2026 · impactcodeanalysis.com
Languages
The platform supports 29 languages using tree-sitter parsing.Read 29 Sep 2026 · impactcodeanalysis.com
Legal entity
The website copyright and trademark notice identifies Impact Code Analysis LLC.Read 15 Oct 2026 · impactcodeanalysis.com
Limit: contract commitment
All paid plans require a one-year minimum commitment, even when paid monthly.Read 15 Oct 2026 · impactcodeanalysis.com
Limit: coordinated PR automation
The documentation says automatic opening of coordinated pull requests and self-verifying caller patches remain on the roadmap.Read 15 Oct 2026 · impactcodeanalysis.com
Limit: machine authentication
The documentation says per-workspace machine tokens for headless agents are planned; the MCP server currently uses a workspace session token.Read 15 Oct 2026 · impactcodeanalysis.com
Limit: trial scope
The 14-day trial is limited to one user, one project, and five rescans per project.Read 15 Oct 2026 · impactcodeanalysis.com
MCP integration
A JSON-RPC MCP endpoint exposes tools such as blast_radius, contract_drift, file_context, plan_change, simulate_change, review_change, risk, and ask.Read 15 Oct 2026 · impactcodeanalysis.com
Product description
LinkedIn describes the product as a multi-language static-analysis SaaS for detecting, triaging, and verifying code-quality and security fixes.Read 15 Oct 2026 · linkedin.com
Public API
The REST API includes project listing, analysis creation, analysis status, ranked issues, quality gates, organization-graph mapping, and ledger endpoints.Read 15 Oct 2026 · impactcodeanalysis.com
Quality analysis
It calculates cyclomatic and cognitive complexity, maintainability, duplication, documentation density, and SQALE-style technical debt.Read 15 Oct 2026 · impactcodeanalysis.com
Scan workflow
A public Git URL can be analyzed without build configuration, and a typical repository is reported as taking seconds to a couple of minutes.Read 15 Oct 2026 · impactcodeanalysis.com
Security encryption
The trust page states TLS 1.3 in transit and AES-256-GCM encryption for connected Git credentials at rest.Read 15 Oct 2026 · impactcodeanalysis.com
Security practices
The trust page says connections use TLS 1.3, connected Git credentials are encrypted with AES-256-GCM, and repository access scopes are read-only.Read 29 Sep 2026 · impactcodeanalysis.com
Security scanning
Security checks cover SQL injection, XSS, hardcoded credentials, unsafe exception handling, CWE/OWASP mappings, and OSV.dev dependency CVEs.Read 15 Oct 2026 · impactcodeanalysis.com
Self-hosting
Business and Enterprise offerings provide Docker-based self-hosted deployment, with Enterprise supporting air-gapped operation.Read 15 Oct 2026 · impactcodeanalysis.com
Seven-pillar intelligence
Its overall grade combines quality, temporal risk, architecture, security, business value, human knowledge, and ecosystem pillars.Read 15 Oct 2026 · impactcodeanalysis.com
Source handling
The trust page says repository source is held in isolated temporary scan storage during analysis and removed when the scan completes.Read 29 Sep 2026 · impactcodeanalysis.com
Source-control integrations
Scanning and pull-request automation are listed for GitHub, GitLab, Bitbucket, Azure Repos, AWS CodeCommit, and SourceForge; Codeberg, Gitea, and SourceHut are clone-only.Read 15 Oct 2026 · impactcodeanalysis.com
Source-data policy
The maker says source is held in isolated temporary storage during analysis, deleted after completion, and never used to train models.Read 15 Oct 2026 · impactcodeanalysis.com
Taint tracking
A LinkedIn product update says the scanner performs multi-language static analysis with true taint tracking for untrusted-data flows.Read 15 Oct 2026 · linkedin.com
Trial limits
The pricing page lists the free 14-day trial as limited to one user, one project, and five rescans per project; its FAQ describes the Evaluation plan as free forever for one public repository.Read 29 Sep 2026 · impactcodeanalysis.com

Plans and prices

Evaluation Free free forever 1 public repository Read 15 Oct 2026 · impactcodeanalysis.com
Free Free Free forever for 1 public repository 1 user · 1 project · 5 rescans per project · all 29 languages · read-only Code Intelligence · watermarked exports Read 29 Sep 2026 · impactcodeanalysis.com
Trial Free 14-day free trial 1 user · 1 project · 5 rescans per project · all 29 languages · read-only Code Intelligence · watermarked exports Read 15 Oct 2026 · impactcodeanalysis.com
Starter $149 a month $149/mo; 1-year minimum commitment 3 seats · up to 5 projects · unlimited rescans · 1 PR bot integration · email support Read 29 Sep 2026 · impactcodeanalysis.com
Starter $149 a month $149/mo; 1-year minimum contract 3 seats · up to 5 projects · unlimited rescans · 29 languages · quality gates · 1 PR-bot integration · email support Read 15 Oct 2026 · impactcodeanalysis.com
Professional $399 a month $399/mo; 1-year minimum commitment 10 seats · up to 25 projects · unlimited PR bot integrations · priority email support Read 29 Sep 2026 · impactcodeanalysis.com
Professional $399 a month $399/mo; 1-year minimum contract 10 seats · up to 25 projects · unlimited PR-bot integrations · AI fix synthesis and PR review · compliance reports · SCIM Read 15 Oct 2026 · impactcodeanalysis.com
Business $1,500 a month $1500/mo; 1-year minimum contract 25 seats · up to 100 projects · Docker self-hosting · audit-log export · custom rule packs · 99.5% SLA · air-gapped deployment Read 15 Oct 2026 · impactcodeanalysis.com
Business $1,500 a month $1500/mo; 1-year minimum commitment 25 seats · up to 100 projects · Docker self-hosting · 99.5% SLA · 1-year data retention Read 29 Sep 2026 · impactcodeanalysis.com
Enterprise $20,000 a month From $20,000/mo; typically $240,000–$360,000/year Unlimited seats and projects · custom integrations · 99.9% SLA · 24/7 on-call · forever data retention Read 29 Sep 2026 · impactcodeanalysis.com
Enterprise $20,000 a month From $20,000/mo; typically $240,000–$360,000/year Unlimited seats and projects · air-gapped deployment · custom integrations · 99.9% SLA · 24/7 on-call · forever retention Read 15 Oct 2026 · impactcodeanalysis.com

Every Impact Code Analysis plan and price →

Strong points and limits

Strong points

  • Reports scores, grades, ranked issues and dependency maps.
  • Supports 29 languages.
  • Connects with GitHub, GitLab and Bitbucket.
  • Offers Claude-based issue explanations and suggested fixes.
  • Free plan covers one public repository.

Limits

  • Free plan is limited to one public repository.
  • The 14-day trial allows five rescans per project.
  • Paid plans have a one-year minimum commitment.
  • Starter costs $149 a month.

Who it suits

It suits developers and teams looking for repository quality, security and architecture analysis. The plan limits and one-year minimum commitments are relevant for teams comparing evaluation and paid use.

Verdict

Impact Code Analysis combines repository analysis with security checks, integrations and issue assistance. Compare the free-plan and trial limits with the paid plans’ project and seat allowances before selecting a tier.

Where Specifiction places it

Alternatives to Impact Code AnalysisAll alternatives →