← Back to Directory
Codacy
Code quality and security platform with AI guardrails for AI-assisted engineering
Codacy vs Semgrep
Codacy and Semgrep are both listed under Testing & security. Prices are as shown on each vendor's pricing page; the check date is in the table. On listed entry price, Semgrep starts lower (from $15/mo).
| Codacy | Semgrep | |
|---|---|---|
| Pricing | Freemium | Freemium |
| Entry price | from $18/mo | from $15/mo |
| Prices on pricing page | — | $15/mo · $30/mo |
| Verified | Not yet | Not yet |
| Key features | AI Code Review with pull-request summaries, fix suggestions, and automated false-positive detection, Codacy Guardrails that scan AI-generated code in IDEs and coding agents against defined policies, AI Risk Hub for centralized AI coding policies covering unapproved models, prompt injection, and vulnerable training-data libraries, Static Application Security Testing (SAST) across application and infrastructure code, Software Composition Analysis (SCA) with daily CVE and malware rescans, Secret scanning and hardcoded credential detection | Static application security testing (SAST) via Semgrep Code, Open-source dependency vulnerability scanning (Semgrep Supply Chain), Hardcoded secrets detection with semantic analysis, AI-generated code scanning (Semgrep Guardian) at the moment of writing, AI-assisted triage to suppress false positives and prioritize reachable vulnerabilities, Automated remediation suggestions delivered in PRs and IDEs |
| Platforms | API | — |
| Founded | — | 2017 |
| Last checked | 2026-10-28 | 2026-10-28 |