Codiga

Codiga is a static code analysis platform that flags code quality issues, security vulnerabilities, and leaked secrets as developers write code, rather than only at review time. It runs inside IDEs such as VS Code, JetBrains, and Visual Studio, and integrates with CI/CD pipelines on GitHub, GitLab, and Bitbucket, giving teams the same checks whether they are typing locally or merging a pull request. The platform ships with over 1,800 predefined rules across more than a dozen languages, covering standards like the OWASP Top 10 and SANS-CWE Top 25, and it lets teams write their own custom analysis rules rather than relying only on defaults. It also detects hardcoded secrets such as API tokens and SSH keys, analyzes infrastructure-as-code files like Terraform and Docker configurations, and includes a searchable library of reusable code snippets. Codiga was acquired by Datadog, and its analyzer now underpins Datadog's own code analysis product, though the standalone Codiga tooling remains reachable. It suits engineering teams that already have (or are building) a CI/CD pipeline and want automated, real-time guardrails on code quality and security without hiring a dedicated security review step for every change. One limitation worth noting: pricing and plan details are not published on the current site, so evaluating cost requires contacting the vendor directly.