Codacy

Codacy sits earlier in the pipeline than most tools in this category: instead of writing code, it reviews and cleans up what other tools — human or AI — already wrote. AI Reviewer comments on pull requests, Guardrails auto-fixes AI-generated code before it reaches the editor, and for files with low coverage it can AI-generate the missing unit tests. Across 49 languages, that covers the housekeeping a fast-moving team using Copilot, Cursor or Continue tends to skip.

The company operates under the entity Qamine Portugal S.A. from Lisbon, founded in 2012, and states SOC 2, ISO 27001 and GDPR compliance on its own site — a longer paper trail than most newer AI review tools carry. The Developer plan is free for individuals, and open-source projects get the product free forever, which is how it gets tried before it gets bought.

Team pricing starts at $18 per developer per month annually (up to 30 developers), rising to a custom Business quote for larger, security-conscious organisations. It is not an editor plugin that writes code for you — it is the layer that checks the code afterwards, which makes it a companion to an assistant in this category rather than a substitute for one.

What Codacy does well

• AI Reviewer comments directly on pull requests
• Guardrails auto-fixes AI-written code before merge
• AI-generates missing unit tests for low-coverage files
• Free for individual developers and for open source
• Portuguese vendor stating SOC 2, ISO 27001 and GDPR

Where Codacy falls short

• Reviews code rather than writing it — needs a generator alongside it
• Business-tier pricing is quote-only
• No published on-premise option
• Team plan caps at 30 developers before Business pricing applies

Standout feature. Guardrails catches and auto-fixes AI-written code before a human ever reviews it — quality control built for an AI-assisted pipeline.