Codacy vs Semgrep Supply Chain
Codacy
codacy.com
Semgrep Supply Chain
semgrep.devSide by side
| Figure | Codacy | Semgrep Supply Chain |
|---|---|---|
| Price from | $1.50/mo | $30/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 4 | 3 |
| Spec score · Ruby Static Analysis Tools | 8.4 (#3) | 8.2 (#4) |
| Company history | Codacy says it was founded in 2012 by developers Jaime Jorge and João Caxaria. | Semgrep says it was founded in 2017 by Drew Dennison, Isaac Evans, and Luke O’Malley. |
| Founded | 2012 | 2017 |
| Headquarters | Lisbon, Portugal | San Francisco, California, United States |
| Integrations | The pricing page lists GitHub, Bitbucket, GitLab, Jira, and Slack integrations for the Team plan. | Semgrep lists GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, and Buildkite among its CI integrations, with Slack, email, webhooks, VS Code, and IntelliJ also listed. |
| Purpose | Codacy provides a platform for code quality, security, and AI coding standards for engineering teams. | Semgrep Supply Chain detects vulnerabilities in open-source dependencies, blocks malware, and provides codebase-aware reachability analysis and upgrade guidance. |
| Support | The Business plan offers a dedicated customer success manager and premium support. | The pricing page lists community-based support for Free Edition, award-winning support for Teams, and a dedicated account manager and tailored onboarding for Enterprise. |
Plans
Codacy
- DeveloperFree
- Team (Yearly)$18 a year
- Team (Monthly)$21 a month
- BusinessPriced on request
Semgrep Supply Chain
- Free EditionFree
- Teams — Supply Chain$30 a month
- EnterprisePriced on request
In their own words
Codacy
Codacy is a cloud platform for engineering teams focused on code quality, security, and AI coding standards. Its AI Reviewer reviews pull requests with fix suggestions and summaries, and can identify false positives automatically. Listed security capabilities include SAST, software composition analysis, secret scanning, infrastructure-as-code scanning, DAST, and container image scanning. Team offers shared coding standards across 49 languages, integrations for GitHub, Bitbucket, GitLab, Jira, and Slack, and capacity for up to 30 developers and 100 private repositories with unlimited lines of code. Developer includes an IDE plugin and integrations for VSCode, JetBrains, and Cursor; the IDE extension comparison also names Windsurf. Developer costs nothing. Team costs $18 a year with yearly billing or $21 a month with monthly billing, billed per developer per month. A 14-day free trial is available without a credit card. Codacy states that it is GDPR compliant and has SOC 2 Type II compliance; its services run on AWS, with data in transit encrypted using TLS.
Semgrep Supply Chain
Semgrep Supply Chain has no write-up on Specifiction yet; its figures are above.