Static Code Analysis Tools

Codacy vs PVS-Studio

Compare Codacy and PVS-Studio side-by-side. See feature differences and pricing in the Static Code Analysis Tools category.

Codacy

by Codacy

No reviews yet

Pricing: Developer IDE plugin free; Team $18 per developer a month billed annually or $21 billed monthly, up to 30 developers; Business by quote. 14-day trial, no card needed.

Codacy is a code quality and security platform for engineering teams, running static analysis, SAST and AI pull request review on GitHub, GitLab and Bitbucket.

18 /18 features Full profile

PVS-Studio

by PVS-Studio

No reviews yet

Pricing: Quote only: Team (under 10 developers), Enterprise 30 (10 to 30) and Enterprise 50+ on 1 to 3 year licenses; trial key on request; free license for qualifying open-source projects.

PVS-Studio is a static code analyzer and SAST tool for C, C++, C#, Java, Go, JavaScript and TypeScript teams, installed on-premise and able to run offline.

8 /18 features Full profile

Feature Comparison

Static Code Analysis Tools features side-by-side

Feature	Codacy 18/18 features	PVS-Studio 8/18 features
Quality gate that fails the build Define pass or fail thresholds on new issues, coverage or duplication that block the pipeline.	Yes	Yes
Pull request decoration with findings Post new findings as comments or status checks on the pull request in the git host.	Yes	Yes
New-code-only analysis against a baseline Report only issues introduced since a baseline so legacy debt does not block every change.	Yes	Yes
Custom rule authoring Write your own rules in a pattern language, DSL or plugin and run them with the built-in set.	Yes	No
Rule set configuration per project Enable, disable and set the severity of each rule separately for every project.	Yes	Yes
SAST security vulnerability rules Detect injection, cross-site scripting and similar security flaws, not only style issues.	Yes	Yes
Hardcoded secrets detection Flag credentials, keys and tokens committed in source files.	Yes	Yes
Software composition analysis of dependencies Report known vulnerabilities and license problems in third-party dependencies.	Yes	Yes
Code duplication detection Find copy-pasted blocks across files and report duplicated lines per project.	Yes	No
Complexity and maintainability metrics Report cyclomatic or cognitive complexity and a technical-debt estimate per file.	Yes	No
Test coverage import and tracking Ingest coverage reports from test runs and track coverage on new code over time.	Yes	No
IDE plugin with live findings Show findings in the editor as you type, using the same rules as the server.	Yes	No
Analysis for 20 or more languages The vendor lists at least twenty supported programming languages or frameworks.	Yes	No
Infrastructure-as-code scanning Analyse Terraform, Kubernetes, Docker and similar configuration for misconfigurations.	Yes	No
Automated fix suggestions for findings Offer a code change for a finding that can be applied from the UI or the pull request.	Yes	No
Portfolio-level quality dashboards Aggregate quality and security across many projects into one executive view.	Yes	No
Self-hosted analysis server Run the analysis server inside your own infrastructure instead of the vendor's cloud.	Yes	No
Free analysis for open source projects Public open source repositories are analysed at no cost on a stated plan.	Yes	Yes
Overall Rating	No reviews yet	No reviews yet

Codacy 18/18 features

Quality gate that fails the build: Yes
Pull request decoration with findings: Yes
New-code-only analysis against a baseline: Yes
Custom rule authoring: Yes
Rule set configuration per project: Yes
SAST security vulnerability rules: Yes
Hardcoded secrets detection: Yes
Software composition analysis of dependencies: Yes
Code duplication detection: Yes
Complexity and maintainability metrics: Yes
Test coverage import and tracking: Yes
IDE plugin with live findings: Yes
Analysis for 20 or more languages: Yes
Infrastructure-as-code scanning: Yes
Automated fix suggestions for findings: Yes
Portfolio-level quality dashboards: Yes
Self-hosted analysis server: Yes
Free analysis for open source projects: Yes

No reviews yet

PVS-Studio 8/18 features

Quality gate that fails the build: Yes
Pull request decoration with findings: Yes
New-code-only analysis against a baseline: Yes
Custom rule authoring: No
Rule set configuration per project: Yes
SAST security vulnerability rules: Yes
Hardcoded secrets detection: Yes
Software composition analysis of dependencies: Yes
Code duplication detection: No
Complexity and maintainability metrics: No
Test coverage import and tracking: No
IDE plugin with live findings: No
Analysis for 20 or more languages: No
Infrastructure-as-code scanning: No
Automated fix suggestions for findings: No
Portfolio-level quality dashboards: No
Self-hosted analysis server: No
Free analysis for open source projects: Yes

No reviews yet

Pricing

Codacy

Developer IDE plugin free; Team $18 per developer a month billed annually or $21 billed monthly, up to 30 developers; Business by quote. 14-day trial, no card needed.

See all plans

PVS-Studio

Quote only: Team (under 10 developers), Enterprise 30 (10 to 30) and Enterprise 50+ on 1 to 3 year licenses; trial key on request; free license for qualifying open-source projects.

See all plans

Explore Each Product

Codacy Read reviews, features & pricing

PVS-Studio Read reviews, features & pricing

Looking for more options?

Browse all Static Code Analysis Tools