# Codacy Security and Code Quality Codacy Security and Code Quality is an Application Security Posture Management product by Codacy. It runs in the cloud. Pricing is commercial. Code security and quality platform with SAST, SCA, DAST, and AI code protection Checked October 2026. ## What is Codacy Security and Code Quality? Codacy is a code security and quality platform that provides automated analysis across the software development lifecycle. The platform performs static application security testing (SAST) to identify vulnerabilities and security issues in source code across 40+ programming languages. It includes software composition analysis (SCA) for detecting insecure and outdated third-party dependencies with daily vulnerability database updates. The platform offers dynamic application security testing (DAST) and penetration testing capabilities to scan applications for runtime vulnerabilities. Infrastructure-as-code scanning detects misconfigurations and security risks before deployment. Secret scanning identifies exposed credentials and sensitive data in code repositories. Codacy provides AI Guardrails functionality that scans and auto-fixes AI-generated code for security and quality violations. The platform integrates with IDEs including VS Code, Cursor, and Windsurf to provide real-time feedback during development. An MCP server allows querying security and quality metrics across teams and repositories. The platform includes automated pull request checks, test coverage tracking, code duplication detection, and code complexity analysis. It enforces centralized security rules and quality standards across organizations. Codacy supports continuous monitoring throughout the CI/CD pipeline from IDE to production runtime. Tags: DAST, Dependency Scanning, IDE, Infrastructure as Code, SCA, Secret Detection ## Where it fits in your security program (NIST CSF 2.0) - [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks. - [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe. - [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity. ## Quick facts - Category: [Application Security](https://cybersectools.com/categories/application-security) ยท [Application Security Posture Management](https://cybersectools.com/categories/aspm) - Vendor: [Codacy](https://cybersectools.com/companies/codacy) - Deployment: Cloud - Company size fit: Startup, SMB, Mid-Market, Enterprise - Pricing: Free plan - Features: 10 listed - Integrations: 4 listed - Website: codacy.com The full feature and integration lists are on the page for signed-in visitors. ## Where it ranks No shortlist covers this product's category yet. The closest is [Best Application Security Solutions for Business](https://cybersectools.com/shortlists/best-application-security-solutions). ## Codacy Security and Code Quality FAQ ### What is Codacy Security and Code Quality? Codacy Security and Code Quality is a product by Codacy in the Application Security Posture Management category. It covers DAST, Dependency Scanning and IDE. ### What is the pricing for Codacy Security and Code Quality? Codacy Security and Code Quality is a commercial product. For pricing, visit https://www.codacy.com/ or contact Codacy. ### What are alternatives to Codacy Security and Code Quality? Alternatives to Codacy Security and Code Quality listed on CybersecTools: 1. [Aikido All in one Security platform](https://cybersectools.com/tools/aikido-all-in-one-security-platform) - All-in-one security platform covering code, cloud, and runtime protection (Commercial) 2. [Cantina Apex](https://cybersectools.com/tools/cantina-apex) - AI appsec platform that traces attack paths, proves exploits, and auto-remediates. (Commercial) 3. [Checkmarx One Application Security Platform](https://cybersectools.com/tools/checkmarx-one-application-security-platform) - Unified AppSec platform with SAST, SCA, DAST, IaC, ASPM & AI remediation (Commercial) 4. [ArmourZero Automated Vulnerability Management](https://cybersectools.com/tools/armourzero-automated-vulnerability-management) - AI-powered automated vuln scanning for apps, APIs, domains, and cloud (Commercial) 5. [Plexicus ASPM](https://cybersectools.com/tools/plexicus-aspm) - ASPM platform with automated remediation for code, dependencies, IaC, and APIs (Commercial) Compare all Codacy Security and Code Quality alternatives at [https://cybersectools.com/alternatives/codacy-security-and-code-quality](https://cybersectools.com/alternatives/codacy-security-and-code-quality) ### What deployment and organization size does Codacy Security and Code Quality fit? Codacy Security and Code Quality is available as a cloud service. It is listed for startups, small businesses, mid-market companies and enterprises. Pricing is commercial. Ask Codacy for pricing and support terms. ## Compare Codacy Security and Code Quality with similar solutions - [Codacy Security and Code Quality vs Aikido All in one Security platform](https://cybersectools.com/compare/aikido-all-in-one-security-platform-vs-codacy-security-and-code-quality) - [Codacy Security and Code Quality vs Cantina Apex](https://cybersectools.com/compare/cantina-apex-vs-codacy-security-and-code-quality) - [Codacy Security and Code Quality vs Checkmarx One Application Security Platform](https://cybersectools.com/compare/checkmarx-one-application-security-platform-vs-codacy-security-and-code-quality) All alternatives to Codacy Security and Code Quality: [/alternatives/codacy-security-and-code-quality](https://cybersectools.com/alternatives/codacy-security-and-code-quality) --- Source: https://cybersectools.com/tools/codacy-security-and-code-quality For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL). More on Codacy Security and Code Quality and Codacy: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md