What Norma by Quality Clouds Is
Norma is an AI code governance tool from Quality Clouds. It connects to MCP-capable editors such as Cursor, Claude Code, Windsurf, VS Code, Lovable and Replit, and enforces your organization's rules while an AI agent writes code. Before code lands, Norma answers three questions: does it follow policy, are any secrets or credentials exposed, and is the architecture sound?
How It Works
- Prevention in the editor: Your editor queries Norma for your organization's rules before each suggestion, with unlimited enforcement on the free tier.
- Detection in the repository: Connect GitHub or Bitbucket to run a deterministic audit of the whole repository, with auto discovery of stack, frameworks and integrations and weekly full scans processed in memory.
- Repeatable verdicts: Norma runs checks outside the model and returns a fixed result: rule ID, severity, line and fix. The same file with the same rules returns the same answer, whichever agent is driving.
Rule Library and Evidence
Rules are grounded in SOLID principles and stack best practice, and your architects decide what applies. Every finding records the rule, version, file, line, commit, author and timestamp, and every exception is logged with its reason. An AI Authorship Ratio shows what share of your codebase was written by a model, banded as Native (under 30%), Hybrid (30 to 70%) or Delegated (over 70%).
Extras and Pricing
A Quality Certified Badge gives your README a verifiable signal that expires automatically if your code stops meeting the standard. The free tier is permanent, Pro is $199 per month, and Business is quoted per organization. Code is processed in memory by default, with opt-in persistence, and Quality Clouds is ISO 27001:2022 certified and SOC 2 Type II attested.