Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
Codacy is an essential toolbox for developers that helps build clean, secure code efficiently and fearlessly. Codacy is everything your team needs, out of the box to quickly find and fix coding issues.
Please ensure you meet the following requirements to use Codacy. A GIT Provider from the below list :
Show the rest of the publisher’s description (4 more lines)
Github Cloud
Github Enterprise Cloud
Bitbucket Cloud
Gitlab Cloud
Highlights
Highlighted by the publisher on AWS Marketplace.
Monitor and enforce coding standards on every Pull Request with Codacy Quality
Find and fix AppSec issues with SAST, SCA, Secrets, IaC, and more with Codacy Security
Get data-driven insights to improve engineering team performance with Codacy Pulse
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Plans and pricing as listed
3 listed- Users
- Users
- Users
Refund terms
As stated by the publisher on AWS Marketplace.
In case of Agreement termination, User or Customer agrees that Codacy shall have no liability or responsibility to User or Customer, and Codacy will not refund any amounts that Customer has already paid, to the fullest extent permitted under applicable law.
Sources
Publisher resources
4 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.

