Developer Tools·Standings
IDE Code Security Plugins
IDE code security plugins check code for security issues from within or alongside a code editor. This list covers tools for people who want to review code without switching away from the apps they use to write it.
Compare IDE coverage, security analysis, taint analysis, code quality checks, in-IDE fixes and supported languages. The signal score is out of 10; marks show whether a tool has a public API, open-source code or a free tier.
- 19 platforms
- 1 with a public API on this page
- 9 with a free tier
- Checked 7 Oct 2026
- 1 Q
Qodanajetbrains.comA code analyzer that checks for vulnerabilities, code smells, and license issues; free plan available.
- 2 EL
Endor Labsendorlabs.comAn application security platform with tools to scan and fix vulnerabilities; free plan, pricing on request.
- 3 PS
PVS-Studiopvs-studio.comA code analyzer that finds bugs and potential vulnerabilities; pricing on request, with a 7-day trial.
- 4 C
Codacycodacy.comA code quality and security platform with pull request reviews; free plan, paid from $18/user/month.
- 5 KC
Kiuwan Code Securitykiuwan.comA code scanner that finds and prioritizes vulnerabilities; plans start at $49/user/month.
- 6 JX
JFrog Xrayjfrog.comA tool that scans open-source components for vulnerabilities and license issues; includes a 30-day trial.
- 7 SASemgrep AppSec Platformsemgrep.dev
A cloud security platform with infrastructure and container scanning; free plan, paid from $15/month.
- 8 SISnyk IDE Pluginssnyk.io
IDE plugins for security and taint analysis; free plan, paid from $25/month.
- 9 CFCodeQL for Visual Studio Codegithub.com
A free Visual Studio Code extension for security and taint analysis.
- 10 GFGitLab for VS Codedocs.gitlab.com
A free Visual Studio Code extension for security scanning, with paid plans from $29/user/month.
- 11 FSFortify Static Code Analyzeropentext.com
A source code analyzer that finds vulnerabilities and suggests fixes; pricing is available on request.
- 12 WAWiz API Security Posture Managementwiz.io
A tool that discovers APIs and helps prioritize exploitable security risks; pricing on request.
- 13 OIOWASP IDE-VulScannerowasp.github.io
A free IDE plugin that checks for security issues and offers in-IDE fixes.
- 14 VSVeracode SCAveracode.com
A cloud tool that scans software components, checks reachability, and creates software inventories; pricing on request.
- 15 K
Klocworkperforce.comA source code analyzer with IDE support, pull request scans, and CI/CD integration; pricing on request.
- 16 TCTencent Cloud Code Analysis (TCA) IDE Pluginsintl.cloud.tencent.com
IDE plugins that check code security and quality; pricing is available on request.
- 17 BDBlack Duck Code Sightblackduck.com
An IDE plugin that checks code security and quality and offers fixes; paid plans start at $500.
- 18 CCorridorcorridor.dev
A web-based tool for security analysis across IDEs; pricing is available on request.
- 19 CICheckmarx IDE Pluginscheckmarx.com
IDE plugins that analyze code for security issues; pricing is available on request.
Places #1, #2, #3, #4, #5 on this board are open to sponsors. Take #1 · Other ways to advertise
How to choose
Check editor and platform fit
Start with IDE coverage, then check the platforms listed for a tool. Windows, Linux, macOS, web and self-hosted options can suit different setups.
If you need a public API, check that mark separately from platform availability; the list tracks them as distinct details.
Match the checks to your needs
Compare security analysis, taint analysis and code quality checks. Taint analysis follows how data moves through code to help find unsafe paths.
Look for in-IDE fixes if you want to address findings in the editor, and check supported languages against the code you work with.
Understand the price before choosing
Pricing can be free, freemium, paid at a listed starting price or available by request. Check whether a free plan or trial is offered and what the paid price covers.
For example, Codacy lists a free plan, paid pricing from $18 per user per month with annual billing, and a 14-day trial. Black Duck Code Sight lists paid pricing from $500.
Check how it fits your workflow
Confirm that the plugin covers the editor and platforms you rely on, then compare the checks and fixes it offers. Also review the API, open-source and free-tier marks when those matter to your setup.
For example, Fortify Static Code Analyzer lists Linux, Windows and self-hosted platforms, while Corridor lists web.
Questions
What does an IDE code security plugin do?
It checks code for security issues from within or alongside a code editor. Compare the listed analysis, language support and IDE coverage before choosing.
What is taint analysis?
Taint analysis follows how data moves through code to help identify unsafe paths. Check whether a tool lists this check if it matters to your work.
Does a free plan mean the tool is open source?
No. A free plan is a pricing option; open source means the code is available under an open-source license. Check the two marks separately.
How should I compare pricing?
Check whether pricing is free, freemium, a listed starting price or available by request. Review trial terms and billing details before committing.
What does the signal score mean?
It is a score out of 10 based on maker-published information about use, public API, documentation depth, open-source code and a free tier.
Some top positions on this board can be paid placements, standing where they were sold. The facts on each platform are not for sale. How we rank · Disclosure