Impact Code Analysis
Impact Code Analysis combines repository code quality review, security scanning, and architecture visualization.
What Impact Code Analysis is
Impact Code Analysis combines repository code quality review, security scanning, and architecture visualization. For analyzed repositories, it reports a score from 0 to 100, an A–F grade, ranked issues, a project wiki, and a dependency map. It supports 29 languages using tree-sitter parsing. Security checks include SQL injection, XSS, and hardcoded credentials, with more than 50 rules mapped to CWE numbers and OWASP Top 10 categories. The platform connects to GitHub, GitLab, and Bitbucket, and can send notifications through Slack, Teams, or email. AI assistance uses Claude for issue explanations and also offers suggested fix synthesis and pull request review mode. It is available through web, API, and self-hosted options. The free plan covers one public repository, one user, one project, and five rescans per project. A separate free 14-day trial is limited to one user, one project, and five rescans per project.
Good
- Reports grades, scores, ranked issues, and dependencies.
- Supports 29 programming languages.
- Security rules map to CWE and OWASP categories.
- Connects with GitHub, GitLab, and Bitbucket.
- Offers pull request review mode.
Watch out
- Free plan covers one public repository.
- Free trial is limited to one project and five rescans.
- Starter requires a one-year minimum commitment.
Who it suits
It may suit developers or teams seeking code quality, security, and architecture information across repositories. The free plan is limited to one public repository, while paid plans add capacity and other listed options.
Verdict
Impact Code Analysis combines several types of repository analysis and supports common code-hosting connections. Check the free-plan scope, trial limits, and one-year minimum commitment for paid plans against your team's needs.
Plans and prices
From Impact Code Analysis's own pricing page, checked 29 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | 1 user · 1 project · 5 rescans per project · all 29 languages · read-only Code Intelligence · watermarked exports · Free forever for 1 public repository |
| Evaluation | Free | 1 public repository · free forever |
| Trial | Free | 1 user · 1 project · 5 rescans per project · all 29 languages · read-only Code Intelligence · watermarked exports · 14-day free trial |
| Starter | $149 a month | 3 seats · up to 5 projects · unlimited rescans · 29 languages · quality gates · 1 PR-bot integration · email support · $149/mo; 1-year minimum contract |
| Professional | $399 a month | 10 seats · up to 25 projects · unlimited PR-bot integrations · AI fix synthesis and PR review · compliance reports · SCIM · $399/mo; 1-year minimum contract |
| Business | $1,500 a month | 25 seats · up to 100 projects · Docker self-hosting · audit-log export · custom rule packs · 99.5% SLA · air-gapped deployment · $1500/mo; 1-year minimum contract |
| Enterprise | $20,000 a month | Unlimited seats and projects · air-gapped deployment · custom integrations · 99.9% SLA · 24/7 on-call · forever retention · From $20,000/mo; typically $240,000–$360,000/year |
The facts
Each one read from Impact Code Analysis's own pages, with the date it was checked.
What it does
- AI assistance
- Claude-powered explanations, suggested fixes, issue prioritization, pull-request review, and 90-day quality forecasting are provided.checked 15 Oct 2026
- AI triage
- A LinkedIn product update says AI prioritization is intended to surface genuine risk and reduce false positives.checked 15 Oct 2026
- Analysis
- The product reports a 0–100 score, an A–F grade, ranked issues, a project wiki, and a dependency map for analyzed repositories.checked 29 Sep 2026
- Architecture graphs
- The product provides an interactive 3D force graph with coupling, dependency depth, circular-cycle, hotspot, and blast-radius views.checked 15 Oct 2026
- Compliance
- The trust page lists SOC 2 Type II as in progress, GDPR and CCPA as compliant, and says a HIPAA BAA is available on the Enterprise tier.checked 29 Sep 2026
- Compliance status
- The trust page lists GDPR and CCPA compliance, Enterprise BAA availability for HIPAA, and SOC 2 Type II as in progress for a Q3 2026 audit.checked 15 Oct 2026
- Continuous monitoring
- GitHub, GitLab, and Bitbucket pushes can trigger HMAC-SHA256-validated rescans with version history and drift notifications.checked 15 Oct 2026
- Disclosure policy
- Security reports sent to [email protected] are acknowledged within 24 hours and have a stated 90-day patch target.checked 15 Oct 2026
- Documentation depth
- The documentation includes walkthroughs for quickstart, repository connections, seven pillars, benchmarking, DORA, SBOM, contract drift, AI, MCP, quality gates, CI/CD, API, Docker, and security.checked 15 Oct 2026
- Editor integration
- A VS Code extension surfaces blast radius, contract drift, risk, and file context inline.checked 15 Oct 2026
- Generated remediations
- A LinkedIn product update says the platform generates reviewable remediation changes for engineers to inspect and ship.checked 15 Oct 2026
- Identity controls
- Published controls include SAML SSO, TOTP MFA, role-based access, token revocation, and tamper-evident audit logging.checked 15 Oct 2026
- Integrations
- The product connects to GitHub, GitLab, and Bitbucket, and supports Slack, Teams, and email notifications.checked 29 Sep 2026
- Languages
- The platform supports 29 languages using tree-sitter parsing.checked 29 Sep 2026
- Language support
- The maker lists 29 languages parsed with tree-sitter, including JavaScript, TypeScript, Python, Java, Go, C#, C++, Rust, Ruby, PHP, Kotlin, Swift, and others.checked 15 Oct 2026
- Legal entity
- The website copyright and trademark notice identifies Impact Code Analysis LLC.checked 15 Oct 2026
- Limit: contract commitment
- All paid plans require a one-year minimum commitment, even when paid monthly.checked 15 Oct 2026
- Limit: coordinated PR automation
- The documentation says automatic opening of coordinated pull requests and self-verifying caller patches remain on the roadmap.checked 15 Oct 2026
The company
- Company age
- LinkedIn lists the company as founded in 2026.checked 15 Oct 2026
- Company location
- LinkedIn lists Harmony, North Carolina as the headquarters and primary location.checked 15 Oct 2026
- Company size
- LinkedIn lists a company size of 2–10 employees.checked 15 Oct 2026
- Company type
- LinkedIn classifies Impact Code Analysis as a public company.checked 15 Oct 2026
Where it runs
- Limit: machine authentication
- The documentation says per-workspace machine tokens for headless agents are planned; the MCP server currently uses a workspace session token.checked 15 Oct 2026
Money
- Limit: trial scope
- The 14-day trial is limited to one user, one project, and five rescans per project.checked 15 Oct 2026
Alternatives to Impact Code Analysis
- 1
DeepSource
Free planWebAPILinuxmacOS8.0From $30 a month - 2
Qodana
Free planWebAPIExtensionLinux7.9From $5 a month - 3
CodeAnt AI
Free planWebAPIExtensionSelf-hosted7.5From $20 a month - 4
Gitar
Free planWebAPISelf-hosted7.2From $20 a month - 5
Qlty Cloud
Free planWebAPIExtensionLinux7.2From $20 a month - 6
Qodo
WebExtensionLinuxmacOS7.1From $30 a month