The AI dev-tools landscape 2026

Coding agents

Agents that write and change code from a task, in the editor, the terminal or the cloud.

• Aider

  Open-source AI pair programming in the terminal.

• Amazon Q Developer

  AWS's AI coding assistant for the IDE.

• Amp

  A coding agent and development environment.

• Augment Code

  Agentic software development for whole engineering organisations.

• Claude Code

  Anthropic's agentic coding tool for the terminal and IDE.

• Cline

  An open-source coding agent with plan and act modes.

• Codex

  OpenAI's coding agent.

• Cursor

  An AI code editor with agents you hand tasks to.

• Devin

  An autonomous coding agent, with parallel cloud agents.

• Ellipsis

  Managed cloud agents, defined as config files in your repository.

• Factory

  Agents ("Droids") that automate coding, testing and deployment.

• Gemini CLI

  Google's open-source AI agent for the terminal.

• GitHub Copilot

  GitHub's AI assistant and coding agent, from the editor to pull requests.

• Jules

  Google's asynchronous coding agent.

• Junie

  JetBrains' AI coding agent.

• Kiro

  An agentic coding tool that turns prompts into executable specs.

• OpenHands

  An open-source platform for running AI coding agents.

• Roomote

  A cloud coding agent that opens reviewable pull requests, hosted or self-hosted.

AI app builders

Build a working app or website from a plain-language description.

• Bolt

  Builds websites, apps and prototypes from a prompt.

• Lovable

  Builds full-stack apps, websites and internal tools from a description.

• Replit

  Builds apps and websites from a description.

• v0

  Vercel's AI builder for full-stack web apps.

AI code review

Read pull requests and comment on bugs, security and style before a person merges.

• Bugbot

  Cursor's AI code review for pull requests.

• CodeRabbit

  AI code review, PR triage and change explanations.

• DeepSource

  An AI code review platform.

• Graphite

  A code review platform for teams on GitHub, with AI review.

• Greptile

  AI code review with context from the whole codebase.

• Qodo

  AI code review with codebase context, in the IDE and on pull requests.

• Sourcery

  AI code review for human and agent-written code.

AI testing and verification

Generate, run and maintain tests, or check changes against real behaviour.

• Diffblue

  A testing agent that writes and maintains unit tests.

• Early

  Finds bugs and opens fix pull requests, with verification evidence.

• Keploy

  Verifies changes in CI against recorded production API traffic.

• mabl

  An agentic test automation platform.

• Meticulous

  Generates and maintains visual frontend tests.

• Momentic

  AI QA with tests written in plain English.

• QA Wolf

  Writes and runs end-to-end tests for web and mobile apps.

Application security

Find and fix vulnerabilities in code, dependencies and configuration, often with AI-suggested fixes.

• Aikido Security

  Code, cloud and runtime security in one platform.

• Checkmarx

  Application security testing with AI agents.

• Corgea

  Finds, triages and fixes vulnerabilities in code and packages.

• Endor Labs

  Application security for AI-generated and human-written code.

• GitHub Advanced Security

  Built-in, AI-powered security for GitHub repositories.

• Mend.io

  Application security and AI security in one platform.

• Semgrep

  AI-assisted SAST, SCA and secrets detection.

• Snyk

  Secures code, AI agents and the apps they build.

Supply chain and SBOM

Know what your software is made of, where it came from, and whether it was tampered with.

• Anchore

  SBOM-based software composition analysis and container scanning.

• Chainguard

  Trusted open-source container images, libraries and VM images.

• CycloneDX

  The OWASP bill of materials standard.

• Dependency-Track

  An open-source OWASP platform for analysing SBOMs.

• FOSSA

  SBOM generation, license compliance and vulnerability management.

• OpenSSF Scorecard

  Checks open-source projects for risky practices.

• OSV

  An open database of vulnerabilities in open-source packages.

• Sigstore

  Signing and verifying software artifacts.

• SLSA

  A framework of levels for build integrity and provenance.

• Socket

  Detects and blocks malicious and risky dependencies.

• Syft

  An open-source CLI that generates SBOMs from images and filesystems.

• Trivy

  An open-source scanner for vulnerabilities, misconfigurations, secrets and SBOMs.

Secrets detection

Stop API keys, tokens and passwords from leaking through code and history.

• GitGuardian

  Secrets and credential security.

• Gitleaks

  An open-source scanner for secrets in git repositories.

• TruffleHog

  Finds secrets and checks whether they are live.

Governance, policy and quality gates

Decide what may merge and ship, enforce it, and keep a record of why.

• AI CodeOps

  Quality gates and human approval for AI-written changes, with signed evidence packs.

• Codacy

  Code quality, security and AI coding policies in one place.

• Open Policy Agent

  An open-source, general-purpose policy engine.

• SonarQube

  Code quality and security analysis with quality gates.

Engineering intelligence and AI impact

Measure delivery, developer experience and what AI tools change.

• DX

  Measures developer productivity, including the shift to AI.

• Faros

  Tracks and governs token spend across AI coding agents.

• Jellyfish

  A software engineering intelligence platform.

• LinearB

  Engineering productivity metrics, including AI's effect on delivery.

• Swarmia

  Engineering intelligence for software teams.

Agent infrastructure

Sandboxes and protocols that coding agents run on and connect through.

• Daytona

  Secure sandboxes for running AI-generated code.

• E2B

  Isolated cloud machines for AI agents.

• Model Context Protocol

  An open protocol for connecting AI applications to tools and data.

Frequently asked questions

How did you choose the tools?

We listed tools that software teams use to write, review, test, secure and govern code with AI, plus the supply-chain and infrastructure tools that sit around them. Each one has an official website we opened on the date shown, and its own site describes it as doing what its category says.

Is this a ranking?

No. Tools are listed alphabetically within each category. Being listed is not an endorsement, and not being listed is not a judgement.

Our tool is missing or in the wrong category. How do we fix it?

Email [email protected] with the tool's official site and the category you think fits. We add tools that match a category and re-check every link when we update the map.

Can I use the map in my article or talk?

Yes. The map and the list are licensed CC BY 4.0: use them anywhere, with a link back to this page. The embed code below shows the image with that link.

Cite this

AI CodeOps (2026). The AI dev-tools landscape 2026. https://aicodeops.dev/research/ai-devtools-landscape-2026

The data and charts on this page are licensed CC BY 4.0: reuse them anywhere, with a link back to this page.