Codacy vs DevStats

Codacy is a cloud platform for engineering teams focused on code quality, security, and AI coding standards. Its AI Reviewer reviews pull requests with fix suggestions and summaries, and can identify false positives automatically. Listed security capabilities include SAST, software composition analysis, secret scanning, infrastructure-as-code scanning, DAST, and container image scanning. Team offers shared coding standards across 49 languages, integrations for GitHub, Bitbucket, GitLab, Jira, and Slack, and capacity for up to 30 developers and 100 private repositories with unlimited lines of code. Developer includes an IDE plugin and integrations for VSCode, JetBrains, and Cursor; the IDE extension comparison also names Windsurf. Developer costs nothing. Team costs $18 a year with yearly billing or $21 a month with monthly billing, billed per developer per month. A 14-day free trial is available without a credit card. Codacy states that it is GDPR compliant and has SOC 2 Type II compliance; its services run on AWS, with data in transit encrypted using TLS.

DevStats is a cloud engineering analytics platform available on the web and through an API. Its Flow reporting tracks pull-request cycle time across five stages, issue cycle time, throughput, open pull requests, daily work in progress, and aging issues and branches. Planning views cover sprint health, velocity, completion rates, planning accuracy, and work breakdown. Teams can examine engineering investment across projects, features, maintenance, initiatives, products, and teams. Listed DORA metrics are Deployment Frequency, Lead Time, Change Failure Rate, and MTTR. Integrations include GitHub, GitLab, Bitbucket, Azure Repos, Jira, Linear, Azure Boards, GitHub Projects, ClickUp, Incident.io, and several AI coding tools. The Benchmark plan is free forever. Standard costs $15 a month per contributor when billed annually; Enterprise costs $27 a month per contributor, also billed annually. DevStats states that it is SOC 2 Type II certified, uses read-only repository permissions, and does not access source code.