Compare software

Bandit vs CodeQL: catalog facts
Bandit	CodeQL
Free Free and open source.	Freemium Free for research and open source code; other use falls under GitHub's CodeQL terms.
Windows, macOS, Linux, Command line	Command line
Focused on security issues in Python code Ready-made pre-commit hooks	Queries follow data flow from source to sink across a codebase Finds every variant of a known bug pattern
Python code only Pattern-based checks can produce false positives	Free use is limited to research and open source code Writing custom queries means learning the QL language
Downloadable app	Downloadable app
Open source	Closed source
License: Apache-2.0	License: GitHub CodeQL Terms and Conditions
No account needed	Not stated if an account is needed
Works offline	Not stated if it works offline
Official website Full listing and sources Checked September 23, 2026	Official website Full listing and sources Checked September 24, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.