Qodana

As engineering teams scale, so do the demands on their tooling. Code quality checks that worked well for one repository or service often need a more resilient, automated, and infrastructure-native setup when development ecosystems grow. That’s exactly why we’re excited to introduce first-class K…

As 2025 starts racing to a close, the JetBrains Qodana team is ending the year with a series of events dedicated to what matters most in modern software development: secure workflows, high-quality code, and practical tooling that empowers developers to ship with confidence.Whether you're working in …

The phrase “bad code” gets thrown around in reviews and online forums all the time. But what does it actually mean? It’s a good example of the vague terms that occasionally make the rounds in developer circles without much to qualify them.  We’ve collected opinions on the subject, metrics, a…

On November 19, 2025, join JetBrains Qodana for a live session exploring how enterprises can embed quality, security, and compliance directly into their development workflows. Hosted by Product Specialist, Kai Schmithuesen, this session will walk you through the latest Qodana capabilities and rea…

The Qodana Public API is now live, complete with full documentation, examples, and OpenAPI specifications. This release gives all Qodana Cloud users the ability to integrate Qodana directly into their own systems, automate key workflows, and access core functionality programmatically. View Docume…

This is the English version of the Japanese article first published by Jan Maki on Qiita. This post was not commissioned by Qodana and was written independently. For more information please reach out to them in the comments or via their link tree. Qodana is JetBrains’ code analysis platform f…

Why shadow AI can be dangerous1. Data leakage2. Security vulnerabilities3. Compliance violations4. Lack of auditabilityReal-world example: Samsung’s Source Code Leak via ChatGPTHow Qodana reduces shadow AI risksCompliance assuranceSecurity-focused scanningPolicy enforcement across teamsTraceability …

Best software composition analysis tools Qodana and Mend.io: SCA inside your JetBrains workflow1. Mend.io on its own2. Snyk3. OWASP Dependency‑Check4. Black Duck by Synopsys5. FOSSAHow SCA and static code analysis work togetherQodana is more of a SAST tool but does have some SCA capabilities A…

Discover the differences when it comes to software Composition Analysis vs. Static Code Analysis with Qodana.

Improve developer experience with static code analysis. Developer experience is not only about nice editors and fast build times. It is about reducing friction so developers can focus on solving problems rather than fighting with tools. Among the most effective developer experience tools availab…

Following the recent rollout of our new Insights dashboard, Native mode, Self-Hosted Lite version, SSO functionality, and Visual Studio plugin, our Qodana 2025.2 update promises another round of improvements and extensions. Take a look at what we’ve been doing as we focus on providing greater access…

Integrate Qodana into TeamCity There are many compelling reasons to use TeamCity as your CI server. Thanks to its out-of-the-box features, smart test management capabilities, and great scalability for enterprises, TeamCity offers a robust and reliable CI solution. But if you’re really looking to …