Codacy
Code Quality · #2 of 3 in category · #12 of 27 overall
Code-quality platform covering 49 languages and 12,000+ static rules, SAST, secrets, SCA, and IaC, with an AI review layer on top.
[ Where it fits ]
On the documented evidence, Codacy suits teams already standardised on GitHub and GitLab.
[ Documented strengths ]
- Rule-Centric & Default Quiet. 12,000+ configurable rules with first-class quality gates and merge blocking; rules are config, not prose.
- Dual-Workflow: Local vs. PR. IDE guardrails check AI-generated code as it's written; quality gates and AI review at the PR.
- Actionability. One-click fixes documented for AI-flagged issues.
[ Documented gaps ]
- Business Logic Validation. Reviews code, not ticket requirements; no MCP or issue-tracker validation documented.
- Sandbox Validation. Static analysis plus AI comments; no documented sandbox execution or test generation.
- Economic Transparency. No published BYOK or model choice; AI costs bundled into seat pricing.
[ Facts ]
- Category
- Code Quality
- Open source
- No — proprietary
- Pricing
- Free Developer tier (IDE plugin); Team $18/dev/mo annual ($21 monthly), up to 30 devs and 100 private repos; free for open source; Business custom source ↗
- Self-hosted
- No — Cloud-only; pricing page confirms no self-hosted option for the current cloud product.
- Model control
- unknown - no published BYOK or model choice for the AI review layer
- Last verified
- 2026-08-11
[ Against the 9 standards ]
Based on public documentation as of 2026-08-11. ✓ documented · ~ partial · ✗ not offered · ? undocumented. Undocumented scores zero — see the methodology.
Mature rule-based static analysis across the repo; AI review layer is younger with undocumented depth.
12,000+ configurable rules with first-class quality gates and merge blocking; rules are config, not prose.
IDE guardrails check AI-generated code as it's written; quality gates and AI review at the PR.
Reviews code, not ticket requirements; no MCP or issue-tracker validation documented.
Static analysis plus AI comments; no documented sandbox execution or test generation.
Quality dashboards and metrics are core to the platform; AI-review ROI metrics not documented.
[ Closest alternatives ]
[ In our coverage ]
[ FAQ ]
Is Codacy open source?
No. Codacy is proprietary — you can use it, but you cannot read or fork the review engine.
Can Codacy be self-hosted?
No. Cloud-only; pricing page confirms no self-hosted option for the current cloud product. Verified against the vendor's own documentation on 2026-08-11.
How much does Codacy cost?
Free Developer tier (IDE plugin); Team $18/dev/mo annual ($21 monthly), up to 30 devs and 100 private repos; free for open source; Business custom. Seat price is only part of the bill: Codacy handles models as unknown - no published byok or model choice for the ai review layer, which is what usually decides the real monthly cost.
How does Codacy score against the 9-pillar AI code review standard?
4 out of 9. It fully documents 3 standards, partially documents 2, does not offer 3, and leaves 1 undocumented. The score is coverage of documented capability, not a measure of review quality.
What are the alternatives to Codacy?
The closest tools in this directory are SonarQube, DeepSource, Greptile, Qodana. Each is scored against the same 9 standards, so the matrices are directly comparable.
Evaluating Codacy?
Run it through the two-week trial protocol before you commit a team to it.