# Top 10 Codacy Alternatives & Competitors **Average Rating:** 4.6/5 **Total Number of Reviews:** 29 Codacy is not the only option for Static Code Analysis Tools. Explore other competing options and alternatives. Static Code Analysis Tools is a widely used technology, and many people are seeking quick, powerful software solutions with command-line tools, test automation, and compliance testing. Other important factors to consider when researching alternatives to Codacy include configuration and security. The best overall Codacy alternative is SonarQube. Other similar apps like Codacy are Checkmarx, Black Duck Coverity Static, DeepSource, and GitHub. Codacy alternatives can be found in [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis) but may also be in [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast) or [Version Control Hosting Software](https://www.g2.com/categories/version-control-hosting). ## Best Paid & Free Alternatives to Codacy - [SonarQube](https://www.g2.com/products/sonarqube/reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) - [Black Duck Coverity Static](https://www.g2.com/products/black-duck-coverity-static/reviews) - [DeepSource](https://www.g2.com/products/deepsource/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) ## Top 10 Alternatives to Codacy Recently Reviewed By G2 Community Browse options below. Based on reviewer data, you can see how Codacy stacks up to the competition, check reviews from current & previous users in industries like Computer Software, Program Development, and Consumer Services, and find the best product for your business. ### 1. [SonarQube](https://www.g2.com/products/sonarqube/reviews) By SonarSource Sàrl **Average Rating:** 4.4/5 **Total Reviews:** 155 SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable. Reviewers say compared to Codacy, SonarQube is: - Slower to reach roi - More expensive Categories in common with Codacy: [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis](https://www.g2.com/categories/static-code-analysis), [Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis) **Compare:** [Codacy vs SonarQube](https://www.g2.com/compare/codacy-vs-sonarqube) **Compare SonarQube with other alternatives:** - [SonarQube vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-sonarqube) - [SonarQube vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-sonarqube) - [SonarQube vs DeepSource](https://www.g2.com/compare/deepsource-vs-sonarqube) - [SonarQube vs GitHub](https://www.g2.com/compare/github-vs-sonarqube) - [SonarQube vs Veracode Application Security Platform](https://www.g2.com/compare/sonarqube-vs-veracode-application-security-platform) - [SonarQube vs GitLab](https://www.g2.com/compare/gitlab-vs-sonarqube) - [SonarQube vs Wiz](https://www.g2.com/compare/sonarqube-vs-wiz-wiz) - [SonarQube vs Microsoft Defender for Cloud](https://www.g2.com/compare/microsoft-defender-for-cloud-vs-sonarqube) - [SonarQube vs Cloudflare Application Security and Performance](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-sonarqube) ### 2. [Checkmarx](https://www.g2.com/products/checkmarx/reviews) By Checkmarx **Average Rating:** 4.2/5 **Total Reviews:** 48 Identify software security vulnerabilities & fix them Reviewers say compared to Codacy, Checkmarx is: - More expensive - Slower to reach roi Categories in common with Codacy: [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis](https://www.g2.com/categories/static-code-analysis), [Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Compare:** [Codacy vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-codacy) **Compare Checkmarx with other alternatives:** - [Checkmarx vs SonarQube](https://www.g2.com/compare/checkmarx-vs-sonarqube) - [Checkmarx vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-checkmarx) - [Checkmarx vs DeepSource](https://www.g2.com/compare/checkmarx-vs-deepsource) - [Checkmarx vs GitHub](https://www.g2.com/compare/checkmarx-vs-github) - [Checkmarx vs Veracode Application Security Platform](https://www.g2.com/compare/checkmarx-vs-veracode-application-security-platform) - [Checkmarx vs GitLab](https://www.g2.com/compare/checkmarx-vs-gitlab) - [Checkmarx vs Wiz](https://www.g2.com/compare/checkmarx-vs-wiz-wiz) - [Checkmarx vs Microsoft Defender for Cloud](https://www.g2.com/compare/checkmarx-vs-microsoft-defender-for-cloud) - [Checkmarx vs Cloudflare Application Security and Performance](https://www.g2.com/compare/checkmarx-vs-cloudflare-application-security-and-performance) ### 3. [Black Duck Coverity Static](https://www.g2.com/products/black-duck-coverity-static/reviews) By Black Duck **Average Rating:** 4.3/5 **Total Reviews:** 65 Coverity static analysis by Synopsys helps development and security teams find and fix defects and security flaws in code as it’s being written. Coverity is highly accurate, supports thousands of developers, and quickly analyzes large projects exceeding 100 million lines of code, helping your teams build secure, high-quality software faster. Reviewers say compared to Codacy, Black Duck Coverity Static is: - Slower to reach roi Categories in common with Codacy: [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis](https://www.g2.com/categories/static-code-analysis) **Compare:** [Codacy vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-codacy) **Compare Black Duck Coverity Static with other alternatives:** - [Black Duck Coverity Static vs SonarQube](https://www.g2.com/compare/black-duck-coverity-static-vs-sonarqube) - [Black Duck Coverity Static vs Checkmarx](https://www.g2.com/compare/black-duck-coverity-static-vs-checkmarx) - [Black Duck Coverity Static vs DeepSource](https://www.g2.com/compare/black-duck-coverity-static-vs-deepsource) - [Black Duck Coverity Static vs GitHub](https://www.g2.com/compare/black-duck-coverity-static-vs-github) - [Black Duck Coverity Static vs Veracode Application Security Platform](https://www.g2.com/compare/black-duck-coverity-static-vs-veracode-application-security-platform) - [Black Duck Coverity Static vs GitLab](https://www.g2.com/compare/black-duck-coverity-static-vs-gitlab) - [Black Duck Coverity Static vs Wiz](https://www.g2.com/compare/black-duck-coverity-static-vs-wiz-wiz) - [Black Duck Coverity Static vs Microsoft Defender for Cloud](https://www.g2.com/compare/black-duck-coverity-static-vs-microsoft-defender-for-cloud) - [Black Duck Coverity Static vs Cloudflare Application Security and Performance](https://www.g2.com/compare/black-duck-coverity-static-vs-cloudflare-application-security-and-performance) ### 4. [DeepSource](https://www.g2.com/products/deepsource/reviews) By DeepSource **Average Rating:** 4.6/5 **Total Reviews:** 22 DeepSource is a static code analysis solution that detects bug risks, anti-patterns and security vulnerabilities before they end up in production. Reviewers say compared to Codacy, DeepSource is: - Better at support - Better at meeting requirements - More usable Categories in common with Codacy: [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis](https://www.g2.com/categories/static-code-analysis) **Compare:** [Codacy vs DeepSource](https://www.g2.com/compare/codacy-vs-deepsource) **Compare DeepSource with other alternatives:** - [DeepSource vs SonarQube](https://www.g2.com/compare/deepsource-vs-sonarqube) - [DeepSource vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-deepsource) - [DeepSource vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-deepsource) - [DeepSource vs GitHub](https://www.g2.com/compare/deepsource-vs-github) - [DeepSource vs Veracode Application Security Platform](https://www.g2.com/compare/deepsource-vs-veracode-application-security-platform) - [DeepSource vs GitLab](https://www.g2.com/compare/deepsource-vs-gitlab) - [DeepSource vs Wiz](https://www.g2.com/compare/deepsource-vs-wiz-wiz) - [DeepSource vs Microsoft Defender for Cloud](https://www.g2.com/compare/deepsource-vs-microsoft-defender-for-cloud) - [DeepSource vs Cloudflare Application Security and Performance](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-deepsource) ### 5. [GitHub](https://www.g2.com/products/github/reviews) By GitHub **Average Rating:** 4.7/5 **Total Reviews:** 2,399 GitHub is the best place to share code with friends, co-workers, classmates, and complete strangers. Over two million people use GitHub to build amazing things together. Reviewers say compared to Codacy, GitHub is: - Better at meeting requirements Categories in common with Codacy: [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast), [Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis) **Compare:** [Codacy vs GitHub](https://www.g2.com/compare/codacy-vs-github) **Compare GitHub with other alternatives:** - [GitHub vs SonarQube](https://www.g2.com/compare/github-vs-sonarqube) - [GitHub vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-github) - [GitHub vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-github) - [GitHub vs DeepSource](https://www.g2.com/compare/deepsource-vs-github) - [GitHub vs Veracode Application Security Platform](https://www.g2.com/compare/github-vs-veracode-application-security-platform) - [GitHub vs GitLab](https://www.g2.com/compare/github-vs-gitlab) - [GitHub vs Wiz](https://www.g2.com/compare/github-vs-wiz-wiz) - [GitHub vs Microsoft Defender for Cloud](https://www.g2.com/compare/github-vs-microsoft-defender-for-cloud) - [GitHub vs Cloudflare Application Security and Performance](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-github) ### 6. [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) By VERACODE **Average Rating:** 3.8/5 **Total Reviews:** 26 Veracode is the world's best automated, on-demand application security testing and code review solution. Reviewers say compared to Codacy, Veracode Application Security Platform is: - Slower to reach roi - More expensive Categories in common with Codacy: [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis](https://www.g2.com/categories/static-code-analysis), [Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis), [Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Compare:** [Codacy vs Veracode Application Security Platform](https://www.g2.com/compare/codacy-vs-veracode-application-security-platform) **Compare Veracode Application Security Platform with other alternatives:** - [Veracode Application Security Platform vs SonarQube](https://www.g2.com/compare/sonarqube-vs-veracode-application-security-platform) - [Veracode Application Security Platform vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-veracode-application-security-platform) - [Veracode Application Security Platform vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-veracode-application-security-platform) - [Veracode Application Security Platform vs DeepSource](https://www.g2.com/compare/deepsource-vs-veracode-application-security-platform) - [Veracode Application Security Platform vs GitHub](https://www.g2.com/compare/github-vs-veracode-application-security-platform) - [Veracode Application Security Platform vs GitLab](https://www.g2.com/compare/gitlab-vs-veracode-application-security-platform) - [Veracode Application Security Platform vs Wiz](https://www.g2.com/compare/veracode-application-security-platform-vs-wiz-wiz) - [Veracode Application Security Platform vs Microsoft Defender for Cloud](https://www.g2.com/compare/microsoft-defender-for-cloud-vs-veracode-application-security-platform) - [Veracode Application Security Platform vs Cloudflare Application Security and Performance](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-veracode-application-security-platform) ### 7. [GitLab](https://www.g2.com/products/gitlab/reviews) By GitLab Inc. **Average Rating:** 4.5/5 **Total Reviews:** 902 An open source web interface and source control platform based on Git. Reviewers say compared to Codacy, GitLab is: - Slower to reach roi - Better at meeting requirements Categories in common with Codacy: [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast), [Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis), [Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Compare:** [Codacy vs GitLab](https://www.g2.com/compare/codacy-vs-gitlab) **Compare GitLab with other alternatives:** - [GitLab vs SonarQube](https://www.g2.com/compare/gitlab-vs-sonarqube) - [GitLab vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-gitlab) - [GitLab vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-gitlab) - [GitLab vs DeepSource](https://www.g2.com/compare/deepsource-vs-gitlab) - [GitLab vs GitHub](https://www.g2.com/compare/github-vs-gitlab) - [GitLab vs Veracode Application Security Platform](https://www.g2.com/compare/gitlab-vs-veracode-application-security-platform) - [GitLab vs Wiz](https://www.g2.com/compare/gitlab-vs-wiz-wiz) - [GitLab vs Microsoft Defender for Cloud](https://www.g2.com/compare/gitlab-vs-microsoft-defender-for-cloud) - [GitLab vs Cloudflare Application Security and Performance](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-gitlab) ### 8. [Wiz](https://www.g2.com/products/wiz-wiz/reviews) By Wiz **Average Rating:** 4.7/5 **Total Reviews:** 844 Wiz is a CNAPP that consolidates CSPM, KSPM, CWPP, vulnerability management, IaC scanning, CIEM, DSPM, and container and Kubernetes security into a single platform. Reviewers say compared to Codacy, Wiz is: - More expensive - Slower to reach roi - Easier to do business with Categories in common with Codacy: [Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis) **Compare:** [Codacy vs Wiz](https://www.g2.com/compare/codacy-vs-wiz-wiz) **Compare Wiz with other alternatives:** - [Wiz vs SonarQube](https://www.g2.com/compare/sonarqube-vs-wiz-wiz) - [Wiz vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-wiz-wiz) - [Wiz vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-wiz-wiz) - [Wiz vs DeepSource](https://www.g2.com/compare/deepsource-vs-wiz-wiz) - [Wiz vs GitHub](https://www.g2.com/compare/github-vs-wiz-wiz) - [Wiz vs Veracode Application Security Platform](https://www.g2.com/compare/veracode-application-security-platform-vs-wiz-wiz) - [Wiz vs GitLab](https://www.g2.com/compare/gitlab-vs-wiz-wiz) - [Wiz vs Microsoft Defender for Cloud](https://www.g2.com/compare/microsoft-defender-for-cloud-vs-wiz-wiz) - [Wiz vs Cloudflare Application Security and Performance](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-wiz-wiz) ### 9. [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) By Microsoft **Average Rating:** 4.4/5 **Total Reviews:** 440 Azure Security Center provides security management and threat protection across your hybrid cloud workloads. It allows you to prevent, detect, and respond to security threats with increased visibility. Reviewers say compared to Codacy, Microsoft Defender for Cloud is: - Slower to reach roi - More expensive Categories in common with Codacy: [Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis) **Compare:** [Codacy vs Microsoft Defender for Cloud](https://www.g2.com/compare/codacy-vs-microsoft-defender-for-cloud) **Compare Microsoft Defender for Cloud with other alternatives:** - [Microsoft Defender for Cloud vs SonarQube](https://www.g2.com/compare/microsoft-defender-for-cloud-vs-sonarqube) - [Microsoft Defender for Cloud vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-microsoft-defender-for-cloud) - [Microsoft Defender for Cloud vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-microsoft-defender-for-cloud) - [Microsoft Defender for Cloud vs DeepSource](https://www.g2.com/compare/deepsource-vs-microsoft-defender-for-cloud) - [Microsoft Defender for Cloud vs GitHub](https://www.g2.com/compare/github-vs-microsoft-defender-for-cloud) - [Microsoft Defender for Cloud vs Veracode Application Security Platform](https://www.g2.com/compare/microsoft-defender-for-cloud-vs-veracode-application-security-platform) - [Microsoft Defender for Cloud vs GitLab](https://www.g2.com/compare/gitlab-vs-microsoft-defender-for-cloud) - [Microsoft Defender for Cloud vs Wiz](https://www.g2.com/compare/microsoft-defender-for-cloud-vs-wiz-wiz) - [Microsoft Defender for Cloud vs Cloudflare Application Security and Performance](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-microsoft-defender-for-cloud) ### 10. [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) By Cloudflare, Inc. **Average Rating:** 4.5/5 **Total Reviews:** 714 Cloudflare Application Security and Performance solutions provide performance, reliability, and security for all of your web applications and APIs, wherever they are hosted and wherever your users are. Reviewers say compared to Codacy, Cloudflare Application Security and Performance is: - Better at meeting requirements Categories in common with Codacy: [Application Shielding](https://www.g2.com/categories/application-shielding) **Compare:** [Codacy vs Cloudflare Application Security and Performance](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-codacy) **Compare Cloudflare Application Security and Performance with other alternatives:** - [Cloudflare Application Security and Performance vs SonarQube](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-sonarqube) - [Cloudflare Application Security and Performance vs Checkmarx](https://www.g2.com/compare/checkmarx-vs-cloudflare-application-security-and-performance) - [Cloudflare Application Security and Performance vs Black Duck Coverity Static](https://www.g2.com/compare/black-duck-coverity-static-vs-cloudflare-application-security-and-performance) - [Cloudflare Application Security and Performance vs DeepSource](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-deepsource) - [Cloudflare Application Security and Performance vs GitHub](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-github) - [Cloudflare Application Security and Performance vs Veracode Application Security Platform](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-veracode-application-security-platform) - [Cloudflare Application Security and Performance vs GitLab](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-gitlab) - [Cloudflare Application Security and Performance vs Wiz](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-wiz-wiz) - [Cloudflare Application Security and Performance vs Microsoft Defender for Cloud](https://www.g2.com/compare/cloudflare-application-security-and-performance-vs-microsoft-defender-for-cloud) ## Explore Articles - [Top tools for creating interactive data dashboards](https://www.g2.com/discussions/top-tools-for-creating-interactive-data-dashboards) - [Which disk cleanup platforms are most reliable for IT managers who need to avoid system crashes during cleanup?](https://www.g2.com/discussions/which-disk-cleanup-platforms-are-most-reliable-for-it-managers-who-need-to-avoid-system-crashes-during-cleanup ) - [Samsara vs Verizon Connect for a logistics company that needs GPS tracking, driver safety scores and maintenance alerts without three separate subscriptions?](https://www.g2.com/discussions/samsara-vs-verizon-connect-for-a-logistics-company-that-needs-gps-tracking-driver-safety-scores-and-maintenance-alerts-without-three-separate-subscriptions) - [Top-rated network monitoring service for startups](https://www.g2.com/discussions/top-rated-network-monitoring-service-for-startups) - [What are the top tools for tracking database performance in real time?](https://www.g2.com/discussions/what-are-the-top-tools-for-tracking-database-performance-in-real-time) - [Which pharmacy management platforms avoid hidden costs and lengthy implementation for mid-market teams?](https://www.g2.com/discussions/which-pharmacy-management-platforms-avoid-hidden-costs-and-lengthy-implementation-for-mid-market-teams) ## Spotlight Categories - [Knowledge Base Software](https://www.g2.com/categories/knowledge-base-software) - [Customer Communications Management Software](https://www.g2.com/categories/customer-communications-management) - [HCM Software](https://www.g2.com/categories/hcm-software)