Why Norma exists #
Norma is the AI Code Quality and Governance platform from Quality Clouds. It scans the code your team — or your AI assistants — write, finds the issues that matter, and tells you how to fix them.
AI tools now write a large share of production code. They’re fast, but they don’t own the result — you do. Norma puts a layer of governance between “AI wrote it” and “users run it”:
- Connect any repository. GitHub or Bitbucket today (GitLab coming). Public or private. Norma scans the code wherever it lives.
- Get actionable findings, not just warnings. Every issue comes with severity, impact area, and a concrete fix recommendation — not a wall of red text.
- Know whether you’re production-ready. The Production Ready Score rolls every scan up into a single number you can put on a dashboard or block a deploy on.
- Govern AI-generated code. Detect which LLM or IDE produced the code, what rules it broke, and what patterns to enforce going forward.
What you can do with it #
- Connect repositories from GitHub or Bitbucket and run a first scan in under a minute.
- Browse issues by severity (High, Medium, Low) and impact area (Security, Performance, Maintainability, Scalability).
- See your Production Ready Score per repository — a single number that summarises whether the code is safe to ship.
- Connect a local AI editor (Cursor, Windsurf, Claude) via MCP to get findings inside your IDE.
How it fits together #
┌─────────────┐
│ Your code │ ← GitHub / Bitbucket / GitLab
└──────┬──────┘
▼
┌─────────────┐
│ Norma │ ← Scans run on every connected repository
│ Scanners │ 198 rules across 8 frameworks
└──────┬──────┘
▼
┌─────────────┐
│ Issues │ ← Severity, impact area, fix recommendation
└──────┬──────┘
▼
┌─────────────┐
│ Production │ ← Single score per repo
│ Ready Score │
└─────────────┘
Pricing #
Norma has two tiers — Free and Pro. See Tiers and quotas for what’s included in each.
Next steps #
- Sign up — create your account in one click.
- Connect your first repository — get scanning in under a minute.
- Your first scan — what the results mean.