Codeac
Automated pull request code review that bundles linters and security tools, run by the UK company ApeSight LTD
Quick Overview
| Company | ApeSight LTD |
|---|---|
| Category | Static Code Analysis Tools |
| Headquarters | United Kingdom, United Kingdom |
| Founded | Not stated |
| EU Presence | Yes - United Kingdom (company no. 11887760) |
| Data Location | Not stated on pages checked; Enterprise runs on your infrastructure |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | Yes - Enterprise on-premise for GitHub Enterprise and Bitbucket Server |
| Main Features | Pull request analysis, bundled linters (ESLint, PMD, RuboCop, Detekt and others), SAST tools (Bandit, TFSec, OSV Scanner), autofix, code coverage thresholds |
| Pricing | Open-source $0; Pro $25 per user per month ($21 billed annually); Enterprise on request. Prices in US dollars |
| Best For | Small teams wanting a hosted pull request reviewer with security checks |
| Replaces | Veracode (lightweight), Codacy, SonarCloud |
Detailed Review
Codeac analyses pull requests and posts the findings back, using an integrated set of existing analysers instead of a proprietary engine. The documentation lists tools such as Bandit, Hadolint, TFSec, TFlint, Kube-Score and OSV Scanner for security checks.
The terms of service state the agreement is with ApeSight LTD, a company organised under the laws of the United Kingdom, registered under ID 11887760.
What it analyses
Codeac combines code quality linters with infrastructure-as-code and dependency security checks, covering application code, configuration files and infrastructure files.
Plans
The open-source plan is free for public repositories. Pro is priced per user and includes unlimited private repositories and repositories analysed. Enterprise runs behind your firewall for GitHub Enterprise and Bitbucket Server.
Self-hosted GitLab
The documentation includes a self-hosted GitLab setup, which helps teams that keep their source control inside their own network.
Limitations to Consider
Codeac relies on bundled third-party analysers, so it has no proprietary deep-flow security engine like Veracode. Prices are listed in US dollars. The data hosting location was not stated on the pages checked, and it is a small vendor compared with the larger platforms.
Who Should Use Codeac
Small and mid-sized teams that want an affordable hosted pull request reviewer from a UK company, with an on-premise path later.
Pros and Cons
Pros
- Free for open source
- Bundles many established linters
- Per-user pricing, unlimited repos
- Enterprise on-premise option
- Prices published
Cons
- No proprietary deep security engine
- Prices in US dollars
- Hosting location not stated
- Small vendor
Alternatives to Codeac
Other European static code analysis tools worth comparing before you decide:
SonarQube
Switzerland · Swiss code-quality platform with SAST, secrets detection and AI fixes
Qodana
Czech Republic · JetBrains code quality platform that runs the IDE inspections in CI
Teamscale
Germany · Software quality platform covering code, tests, security and architecture
Codacy
Portugal · Automated code review and quality gates with AI-assisted fixes
See all European static code analysis tools or compare them directly against Veracode (lightweight) on our alternatives page.
Frequently Asked Questions
Yes for open source projects. Pro costs $25 per user per month, or $21 when billed annually.
The Enterprise version runs behind your firewall and supports GitHub Enterprise and Bitbucket Server.
It integrates tools such as Bandit, Hadolint, TFSec, TFlint, Kube-Score, Kubeval and OSV Scanner.