Qlty Cloud vs Semgrep Supply Chain
Qlty Cloud
qlty.sh
Semgrep Supply Chain
semgrep.devSide by side
| Figure | Qlty Cloud | Semgrep Supply Chain |
|---|---|---|
| Price from | $20/mo | $30/mo |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 3 | 3 |
| Spec score · Ruby Static Analysis Tools | 7.9 (#8) | 8.2 (#4) |
| Headquarters | New York, NY, US | San Francisco, California, United States |
| Integrations | Qlty Cloud integrates with GitHub through a GitHub App and supports GitHub Actions and CircleCI Orb for coverage workflows. | Semgrep lists GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, and Buildkite among its CI integrations, with Slack, email, webhooks, VS Code, and IntelliJ also listed. |
| Support | Free plan support is via Discord and GitHub on a best-effort basis; paid plans include email support, while Enterprise also offers Slack support. | The pricing page lists community-based support for Free Edition, award-winning support for Teams, and a dedicated account manager and tailored onboarding for Enterprise. |
Plans
Semgrep Supply Chain
- Free EditionFree
- Teams — Supply Chain$30 a month
- EnterprisePriced on request
In their own words
Qlty Cloud
Qlty Cloud analyzes code quality and coverage, then gives feedback on pull requests. Its automated reviews can return quality feedback and pass-fail statuses, with customizable analysis and triage rules. Analysis covers linting, defects, formatting, duplication, security, and complexity. Coverage features include gates, diff coverage, comments on GitHub pull requests, and separate tags for unit and integration suites. Qlty integrates with GitHub through a GitHub App and supports GitHub Actions and CircleCI Orb for coverage workflows. It advertises more than 70 linters, formatters, and security analyzers, and says cloud analysis requires no CI setup. The free plan includes 1,000 analysis minutes and 100 AI autofixes per month, with unlimited contributors and repositories. Pro costs $20 a month and includes 20,000 analysis minutes and 5,000 AI autofixes per month. Qlty says AI explanations and fixes for business services require opt-in, and that it does not store repository clones. Analysis runs in sandboxed AWS Fargate containers that are destroyed afterward.
Semgrep Supply Chain
Semgrep Supply Chain has no write-up on Specifiction yet; its figures are above.