We have used multiple SAST solutions in the past and POC'd many more. DeepSource is one of the few ones that has a manageable false-positive rate. The team has been very responsive working with us, forging a strong working partnership with our product security team.

I'm a big fan of DeepSource. I reviewed quite a few products to better support our engineers and the quality of problems found was far better than Codacy or Code Climate for our Python backend codebase.

We compared it against other tools and DeepSource seemed to find more meaningful things in the code. Since we've adopted it, we've hired more junior-level engineers to focus on the bug risks and security issues DeepSource finds. It finds things our engineers generally miss.

DeepSource looks at things that might create a security problem or a performance problem going forward; or if we're violating a best practice. All that gets codified into DeepSource and as developers, for code reviews, now we can focus on higher-order bits.

DeepSource is static code analysis for humans. Stop wasting your time setting up and maintaining CLI tools on CI, just use DeepSource.

Thanks to DeepSource, all our code quality practices are now automated. It automatically highlights code quality issues and helps us fix them even before someone reviews the code manually — saving a lot of the reviewer's time.