Codacy vs QualityGate

Codacy is a cloud platform for engineering teams focused on code quality, security, and AI coding standards. Its AI Reviewer reviews pull requests with fix suggestions and summaries, and can identify false positives automatically. Listed security capabilities include SAST, software composition analysis, secret scanning, infrastructure-as-code scanning, DAST, and container image scanning. Team offers shared coding standards across 49 languages, integrations for GitHub, Bitbucket, GitLab, Jira, and Slack, and capacity for up to 30 developers and 100 private repositories with unlimited lines of code. Developer includes an IDE plugin and integrations for VSCode, JetBrains, and Cursor; the IDE extension comparison also names Windsurf. Developer costs nothing. Team costs $18 a year with yearly billing or $21 a month with monthly billing, billed per developer per month. A 14-day free trial is available without a credit card. Codacy states that it is GDPR compliant and has SOC 2 Type II compliance; its services run on AWS, with data in transit encrypted using TLS.

QualityGate continuously measures source-code quality and development-team performance, with analysis run inside the customer’s infrastructure and only results uploaded to its servers. Its current static analyzers support Java, C# and JavaScript, and can analyze code stored in Git or TFS. Metrics cover size, complexity, inheritance, coupling, cohesion, documentation and duplication; analyzers also identify hundreds of coding issues, including security vulnerabilities and possible runtime exceptions. Dataflow analysis and symbolic code execution can find vulnerabilities listed in the OWASP Top Ten. QualityGate scores maintainability on a ten-grade scale against benchmarks that include other customers’ systems. It checks every check-in on a selected branch and can fit into sprints, code reviews and CI/CD pipelines. Results are queryable through a REST API, and users can build custom quality models from more than one hundred metrics. The agent runs as a Docker image on Linux or a Windows service. It is available on Linux, Windows, web, API and self-hosted deployments, with a free plan and free trial.