CPAchecker vs Qodana

CPAchecker is a configurable software verification tool based on configurable program analysis concepts. It accepts C and SV-LIB inputs, lists predicate analysis for SV-LIB programs, and supports invariants, counterexamples, and proof artifacts. It can also validate termination witnesses in YAML formats 2.1 and 1.0. The project lists a hybrid verification method and provides a self-hosted deployment. CPAchecker is free software under the Apache 2.0 License. Version 4.2.2, released in December 2025, is available as Unix and Windows ZIP archives; Debian and Ubuntu users can install it from the SoSy-Lab APT repository, and a Docker image is available. Java 21 or later is required as of version 4.2. An older version, 1.6.1, can be accessed through a web interface, where some functions are unavailable in the restricted environment. Documentation includes installation instructions, tutorials, and getting-started guidance. Installation questions, bug reports, and suggestions can go to the users mailing list or issue tracker. The project is based in Munich, Germany.

Qodana analyzes code from the IDE through CI to find code smells, duplication, complexity, vulnerabilities, and license issues. Its baselines mark findings as new, unchanged, or resolved, and quality gates can block CI/CD pipelines based on issue counts, severity, coverage, or vulnerable and license-incompatible dependencies. Taint analysis identifies risks such as SQL injection, cross-site scripting, command injection, and path traversal. Qodana supports most JetBrains IDEs, along with VS Code, Visual Studio, and Cursor. Listed CI integrations include GitHub Actions, GitLab, TeamCity, Jenkins, and Azure Pipelines; Docker images can run in CI/CD pipelines. Self-Hosted runs within an organization’s infrastructure with Docker or Kubernetes deployment options. The Community plan is free and includes one team and 30 days of detailed history. Ultimate costs $5.00 per active contributor per month billed annually at $60.00; Ultimate Plus costs $15.00 per active contributor per month billed annually at $180.00. Licensing uses active contributors over the past 90 days, with a minimum of three.