Qodana

Testing applications before release alone is no longer enough when it comes to quality assurance for modern software development. It needs a more dynamic approach that makes QA a part of the ongoing process. According to the 2025 Stack Overflow Developer Survey, 84% of developers use or plan to u…

The public sector handles sensitive citizen data, which is why software projects built with secure coding are imperative to deliver high trust levels. Code compliance with data protection laws, financial governance standards, and various regulations and policies is an obligation. It should be consis…

Modern software development teams face a difficult balancing act. Applications are growing more complex, release cycles are accelerating, and security expectations continue to rise.  This is especially true in a time where much more code is generated daily, which needs to be checked. Teams need…

A developer in DevOps pushes a Kubernetes deployment with no resource limits, a pod running as root explicitly, and a GitHub Actions workflow runs with mutable tags - and it goes straight to production, unnoticed. No quality gate. No IDE warning. No CI failure…

20 Years, 1 MissionMeet Qodana Lead Alex Gopachenko https://www.youtube.com/watch?v=OwX_Qs_k0AQ Twenty years is a lifetime in software engineering. Languages rise and fall. Frameworks become obsolete. Entire categories of developer tools appear, dominate the industry, and quietly disappear a…

Drew Penrod is an experienced fullstack engineer at a company that makes phones designed for kids using Samsung Galaxy hardware running custom software. He and his team develop and maintain an Android-based platform that gives parents control over apps, contacts, screen time, messaging, and browsing…

Qodana 2026.2 makes it easier for development teams to act on code quality, security, and compliance findings throughout the development workflow. This release introduces clearer code coverage insights for pull requests, highlights uncovered new lines directly in the IDE, and automatically detects c…

Code coverage is one of those metrics that every development team talks about but few use to its full potential. Whether you’re shipping a SaaS product or maintaining a legacy monolith, understanding what your tests actually exercise-and what they miss-can make the difference between a confiden…

It’s a situation you’ve probably experienced before: late in your development process, a security vulnerability surfaces during final testing, weeks after the code was written. As a result, you find yourself context-switching from your current sprint, reconstructing decisions you made a month ago, a…

What’s at stake with every commitWhy compliance is an engineering workflow problemWhy manual reviews don't scale at audit timeWhat static code analysis actually doesThe case for catching problems earlierHow static analysis supports specific compliance workflowsPCI DSS coding requirementsSOC 2 change…

When news broke that SpaceX would acquire Cursor's parent company, Anysphere, in a reported $60 billion all-stock deal, most of the discussion centered around AI. This was another milestone and enormous valuation, and signal that AI is still bringing enormous disruption. Those reactions aren't wr…

PHP Version Migration Demo PHP powers 71.8% of all websites with a known server-side language. It is a living language that underpins a significant portion of the modern web and one that keeps getting better. For example, EKSNEKS notes that migrating from PHP 7 to PHP 8 alone can deliver 18–42% p…