CodeQL is GitHub's semantic code analysis engine for finding security vulnerabilities in source code.
CodeQL is GitHub's semantic code analysis engine for application security. It turns source code into a queryable database so analysts can trace data flow and find variants of a vulnerability across codebases, with support for widely used languages including C/C++, C#, Go, Java, Kotlin, JavaScript, TypeScript, Python, Ruby, Rust, and Swift.
GitHub offers CodeQL through a command-line interface, a Visual Studio Code extension, and code scanning in GitHub Advanced Security. The query libraries are open source and free for research and open-source use, while analyzing closed-source code commercially requires a separate license.
Codacy
Codacy - Code Quality and Security Platform
codacy.com
Detail
Detail OSS Scans
detail.dev
Semgrep
Semgrep Code
semgrep.dev
Snyk
Snyk Code
snyk.io
Sonar
SonarQube
sonarsource.com
| Attribute | CodeQL | Codacy - Code Quality and Security Platform | Detail OSS Scans | Semgrep Code | Snyk Code | SonarQube | |
|---|---|---|---|---|---|---|---|
| Provider | | | | | | | |
| Founded | 2008 | 2012 | 2023 | 2017 | 2015 | 2008 | |
| Sells To | Enterprise | Developer | Engineering Teams | Enterprise | Enterprise | Enterprise, Software Developers | |
| Pricing Model | Recurring, Software, Usage-based | B2B Subscription, Subscription | Subscription, Usage-based | Recurring, SaaS | Recurring, Software | B2B Subscription, Freemium | |
| Ownership | Acquired Subsidiary, Equity | Private | Private | Private Equity, Venture Capital | Venture Capital | Privately Held, Venture Capital |
Provider
Founded 2008
Sells To Enterprise
Pricing Model Recurring, Software, Usage-based
Ownership Acquired Subsidiary, Equity
Provider
Founded 2012
Sells To Developer
Pricing Model B2B Subscription, Subscription
Ownership Private
Provider
Founded 2023
Sells To Engineering Teams
Pricing Model Subscription, Usage-based
Ownership Private
Provider
Founded 2017
Sells To Enterprise
Pricing Model Recurring, SaaS
Ownership Private Equity, Venture Capital
Provider
Founded 2015
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture Capital
SonarQube for IDE
sonarsource.com
