Ranking / Vendor profile

Codoid

Overall score: 28.1 / 100, rank 7 of 12
Headquarters: Chennai, India [e-0047]
Headcount range: Not confirmed by two sources
QA-only company: Yes, QA and testing only [e-0049]
Evidence verified on: 2026-11-11

Not ideal for

Situations where the published evidence does not support this vendor. Each line links to its source.

Buyers who need QA for a product class other than IAM: no published case covers endpoint, SIEM, network or other classes. [e-0045][e-0046]
Buyers who need a QA engagement evidenced over 12 months: no case states a duration. [e-0045][e-0046]
Buyers who need security-tagged client reviews: none of the Clutch reviews carry a cybersecurity tag. [e-0047]

Security-product QA evidence

Case studies and reviews that describe QA work on a product whose primary purpose is security. Penetration testing for other clients is excluded under the methodology.

e-0045
case-studyCase study, identity and access management
codoid.com · undated · B single source · verified 2026-11-11
Identity and access management; tests: functional, performance; team: 1; client not named; vendor-reported metric: Load testing simulated 10,000+ concurrent users
e-0046
case-studyCase study, identity and access management
codoid.com · undated · C indirect · verified 2026-11-11
Identity and access management; tests: automation, functional; client not named; vendor-reported metric: Over 1500 test cases were implemented and regularly executed through Jenkins jobs.

Score breakdown

Eight dimensions, each scored 0 to 10 by the frozen rules and multiplied by its weight. Bars are drawn from data/scores.json.

1 Security-product evidence depth weight 204.0 / 10
Two verified security-product QA items. Of these, zero name the client, one states team size or duration and two state a metric. [e-0045][e-0046]
2 Product-class coverage weight 122.0 / 10
One product class evidenced: Identity and access management. [e-0045][e-0046]
3 Test-type depth weight 156.0 / 10
Three test types evidenced on security products: functional, automation, performance. [e-0045][e-0046]
4 Engagement longevity weight 100.0 / 10
No engagement length with a security vendor is stated in the verified evidence.
5 Third-party review signal weight 120.0 / 10
No verified Clutch, GoodFirms or G2 review of security-product QA work dated within 60 months.
6 Vendor's own security posture weight 100.0 / 10
ISO 27001 is claimed without a certificate number or registry link, which scores zero under the rule. [e-0049]
7 Team scale and specialisation weight 93.0 / 10
Headcount not confirmed by two consistent sources, 0 points; QA-only company, 3 points; no dedicated security-product QA page, 0 points. [e-0049]
8 Transparency weight 125.0 / 10
Two of four items present: public rate, team locations; missing: named leadership with profiles, published QA process page. [e-0047]

Product classes covered

Verified security-product QA items per class. A class counts only when the source names the product type, for example EDR¹ for endpoint or SIEM² for detection platforms.

Product class	Evidence items
Endpoint protection and EDR	0, no evidence
SIEM, XDR and detection platforms	0, no evidence
Identity and access management	2
Network security	0, no evidence
Email and web security	0, no evidence
Data protection and backup	0, no evidence
Vulnerability and exposure management	0, no evidence
SOAR and incident response	0, no evidence
Cryptography and key management	0, no evidence
Mobile and application security products	0, no evidence

Test types evidenced on security products: functional, performance or load and automation. [e-0045][e-0046]

1 EDR: Software that watches laptops, servers and phones for suspicious behavior, records what it sees, and alerts administrators so they can investigate and respond. Source
2 SIEM: A system that collects log data from many sources into one place so security teams can search it, correlate events and spot attacks. Source

Vendor's own security posture

Controls a security vendor usually asks of a QA partner that will handle builds and test data.

ISO 27001: Claimed, certificate reference not published [e-0049]
SOC 2: Not published
Test-data handling: Not published
Security page or officer: Not published

Transparency

The four items scored in dimension 8 of the methodology.

Public rate: < $25 / hr [e-0047]
Leadership: Sasikala, Director; Ganesh Kumar, Director [e-0048]
QA process page: Not published
Team locations: Chennai, India; Bengaluru, India [e-0047]

Compare and browse

The two vendors nearest by overall score, and the facet pages that list this vendor.

Codoid vs TestDevLab TestDevLab overall 28.5
Codoid vs ELEKS ELEKS overall 28.4
Identity and access management facet page
Test automation facet page
India facet page
RFP questions to send this vendor
How to shortlist a QA vendor for a security product
Full ranking of 12 vendors

Logged corrections: changelog. Raw evidence: data download.

Scores are computed from publicly available evidence as of the verifiedOn date on each item. They describe published evidence, not service quality. Re-verify with the vendor before contracting.