Free and open first
Best IDE Code Security Plugins in 2026
- 19 apps
- Research read 7 Oct 2026
- How the order is worked out
- 1
Endor Labs
Free plan APIExtensionLinux+4Endor Labs brings source, dependency and agent-security capabilities into one platform, with several deployment options.
- 2
Codacy
Free plan ExtensionWebCodacy brings code review, security scanning, and coding standards into a cloud platform for engineering teams.
- 3
Qodana
Free plan APIExtensionLinux+4Qodana combines code analysis, pipeline gates, and multiple deployment options. Its contributor-based licensing minimum is worth factoring into plan selection.
- 4
PVS-Studio
Free plan LinuxMacWindowsChoose PVS-Studio if your team needs multi-language source analysis, security checks, and integrations with development tools.
- 5
CodeQL for Visual Studio Code
Free plan LinuxMacWindows - 6
Kiuwan Code Security
Free trial APILinuxMac+3Kiuwan Code Security combines source scanning, customizable rules, quality gates and compliance reporting, with both cloud and on-premises analysis options.
- 7
GitLab for VS Code
Free plan LinuxMacWindows - 8
Semgrep AppSec Platform
Free plan Web - 9
Snyk IDE Plugins
Free plan LinuxMacWindows - 10
JFrog Xray
Paid APISelf-hostedWebJFrog Xray combines software composition analysis, SBOM handling, license controls, and operational-risk signals across a wide ecosystem range.
- 11
OWASP IDE-VulScanner
Free plan - 12
Fortify Static Code Analyzer
Paid LinuxSelf-hostedWindowsChoose Fortify Static Code Analyzer if your team needs static vulnerability analysis across the listed languages, application types, and vulnerability categories, with AI insights and automated fix…
- 13
Black Duck Code Sight
Paid LinuxMacWindows - 14
Wiz API Security Posture Management
Paid APIWebWiz combines API discovery, exploitability checks and remediation prioritization in a cloud service. Buyers must request pricing and assess fit across security, development and infrastructure teams.
- 15
Klocwork
Paid LinuxWebWindowsChoose Klocwork if your team needs source code analysis with pull request scans, IDE and CI/CD integration, custom rules, or automated fixes.
- 16
- 17
Corridor
Paid Web - 18
Tencent Cloud Code Analysis (TCA) IDE Plugins
Paid LinuxMacWeb+1 - 19
Veracode SCA
Paid LinuxMacWeb+1
#1Places #1, #2, #3, #4, #5 on this list can be bought by the makers of the software on it. See the price