Full-Time
Develops IDEs and developer tools
No salary listed
Madrid, Spain + 2 more
More locations: Berlin, Germany | Munich, Germany
Hybrid
Remote up to 30 days/year from abroad; multiple European offices listed.
| , |
See people who can refer or advise you
JetBrains builds developer tools and IDEs that help programmers write, test, and manage software. Its main IDEs include IntelliJ IDEA, PyCharm, WebStorm, Rider, and CLion, which perform deep code analysis and refactoring, complemented by Kotlin, ReSharper, TeamCity, and YouTrack. The company sells mostly on subscriptions, with an All Products Pack and a perpetual fallback license, and it also offers free Community Editions and free licenses for non-commercial use, students, and open-source projects. JetBrains aims to help developers be more productive and deliver reliable software across many languages and workflows.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Amsterdam, Netherlands
Founded
2000
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Flexible Work Hours
Remote Work Options
Conference Attendance Budget
Professional Development Budget
JetBrains unifies fragmented AI software development with governance suite: what it means for your SaaS. JetBrains is building a governance suite to bring order to chaotic AI-assisted coding. DevsandLogics break down what this means for software development teams building SaaS products, and how to prepare for AI governance standards. Muhammad Talha Founder & Lead Engineer, Devs & Logics Why ai-based software development is fragmented right now. Every week there's a new AI coding assistant promising to double your team's output. GitHub Copilot, Amazon CodeWhisperer, Tabnine, Cursor, Replit Ghostwriter - the list keeps growing. Each tool has its own model, its own prompt style, its own way of injecting code into your editor. Teams end up with a patchwork of AI tools that don't talk to each other. One developer uses Copilot for autocomplete, another uses ChatGPT for debugging, and a third uses Claude for writing unit tests. The result? Inconsistent code patterns, duplicated efforts, and no clear audit trail of what AI generated what. This fragmentation creates real problems. When you're building a SaaS MVP with AI-assisted development, you need reliability and consistency. You can't have half your codebase written with one AI style and the other half with another. More importantly, you lose visibility into security risks - AI models can introduce vulnerabilities or license issues, and without a unified view, those problems slip through unnoticed. What JetBrains' governance suite aims to solve. JetBrains, the company behind IntelliJ IDEA and ReSharper, has a long history of building integrated developer tools. Their proposed governance suite is designed to bring order to the chaos. Instead of leaving teams to manage multiple AI assistants independently, JetBrains wants to provide a central layer that governs how AI is used across the entire development workflow. Think of it as a policy engine for AI-generated code. You define rules - like "only use approved models" or "always review AI-generated code for security vulnerabilities" - and the suite enforces them across your team's IDEs. It logs every AI suggestion, tracks which developer accepted or rejected it, and can even block certain types of completions based on your compliance requirements. This is a big step toward making AI-assisted coding auditable and safe for production environments. How this affects SaaS teams using AI coding assistants. If you run a SaaS team, you've probably felt the tension between speed and safety. AI coding assistants make you faster, but they also introduce risk. JetBrains' governance suite directly addresses that tension. It gives you a way to standardize AI usage without slowing down your developers. For example, imagine your team is working on a payment processing feature. You can configure the governance suite to only allow AI suggestions from models that have been vetted for PCI compliance. If a developer tries to use an unapproved model, the suite blocks the completion and logs the attempt. This kind of control is critical when you're handling sensitive data or building features that must meet regulatory standards. Another practical impact: onboarding new developers becomes easier. With a unified AI governance layer, new hires can start using AI assistants immediately, knowing that the tools are already configured to match your team's coding standards. You don't have to manually set up each developer's AI toolchain - the governance suite handles it centrally. Key features DevsandLogics expect from JetBrains' AI governance tools. Based on JetBrains' history and the current pain points, DevsandLogics can anticipate several key features: * Centralized Policy Management - Define which AI models are allowed, what types of completions are acceptable, and how AI-generated code should be reviewed. Policies can be applied globally or per project. * Audit Trails - Every AI interaction is logged: what was suggested, who accepted or rejected it, and what the final code looked like. This makes it easy to trace bugs or security issues back to their origin. * Model Approval Workflows - Before a new AI model can be used by the team, it must go through an approval process. This ensures that only vetted models with appropriate training data are in use. * Integration with Existing JetBrains IDEs - Since JetBrains owns the IDE layer, the governance suite can be deeply integrated. Expect seamless plugins for IntelliJ, PyCharm, WebStorm, and others. * Compliance Reporting - Generate reports on AI usage for audits or internal reviews. Show stakeholders exactly how AI is being used and what safeguards are in place. These features align with what many teams are already asking for. In fact, its AI coding standards for your team guide recommends similar practices, even without a dedicated governance tool. Practical steps to prepare your dev team for AI governance. You don't have to wait for JetBrains to ship their suite. Start preparing now so that when a governance layer becomes available, your team can adopt it quickly. * Inventory your AI tools - List every AI coding assistant your team uses. Note which models they rely on and what data they send to third-party servers. * Document your current AI policies - Even if they're informal, write them down. What types of code is AI allowed to generate? What review process is required? * Standardize on one or two tools - Reduce fragmentation now. Choose the AI assistants that best fit your stack and enforce their use across the team. * Set up a review process for AI-generated code - Make it a habit for every AI suggestion to be reviewed by a human before it's merged. This builds discipline and catches issues early. * Monitor AI-related incidents - Track bugs or security issues that originated from AI-generated code. Use that data to inform your future governance policies. These steps will make the transition to JetBrains' governance suite much smoother. More importantly, they'll improve your code quality and security right now. Balancing speed and safety in ai-assisted SaaS development. One concern I hear from founders is that governance will slow down development. It's a valid worry. If every AI suggestion needs to be approved by a committee, you lose the speed advantage that AI promises. But JetBrains' approach seems to understand that balance. The governance suite is not about blocking AI - it's about channeling it effectively. For example, instead of requiring manual approval for every suggestion, you can set up automated checks. The suite can flag only high-risk completions (e.g., code that calls external APIs or accesses sensitive data) and let low-risk suggestions pass through automatically. This way, developers maintain their flow while still benefiting from oversight. Another aspect is that governance actually saves time in the long run. When you have a clear policy, developers don't waste time debating which AI tool to use or how to format a prompt. They just follow the rules and get to work. And because the suite logs everything, debugging becomes faster - you can pinpoint exactly where a bad suggestion came from and fix the root cause. For SaaS teams shipping MVPs, this balance is crucial. You need to move fast, but you also can't afford to ship code with hidden vulnerabilities. JetBrains' governance suite, once released, will be a powerful tool for maintaining that balance. What this means for your Next SaaS MVP. If you're planning a new SaaS product, now is the time to think about AI governance - even before JetBrains releases their suite. The industry is moving toward standards, and early adopters will have an advantage. By implementing basic governance practices now, you'll be ahead of the curve when tools like JetBrains' suite become mainstream. Start by choosing a single AI coding assistant that aligns with your tech stack. For most Next.js + TypeScript teams, GitHub Copilot is a solid choice. Pair it with a lightweight review process - maybe a checklist in your PR template that asks "Was this code AI-generated? If so, was it reviewed?" - and you're already practicing governance. As JetBrains rolls out their suite, you'll be able to plug it into your existing workflow and instantly get the benefits of centralized policy management and audit trails. Your team will be accustomed to the discipline, so adoption will be frictionless. At Devs & Logics, DevsandLogics has been helping SaaS teams integrate AI tools responsibly. If you want to discuss how to prepare for AI governance or need help building a SaaS MVP with AI-assisted development, reach out. The future of AI-assisted development is unified, governed, and safer - and it's coming sooner than you think. Explore Devs & Logics. Services. Top locations. Guides & proof. Ready to build your AI SaaS? Devs & Logics helps startups and businesses build production-ready AI SaaS products. Let's discuss your project.
Introducing the Kotlin Benchmark for AI coding agents. July 8, 2026 Agentic coding benchmarks are getting closer to real-world software development. For Kotlin teams, the most important question is how reliably AI agents can complete end-to-end Kotlin tasks, from reading an issue to producing a solution that passes validation. JetBrains is taking the first step in addressing that gap by releasing the Kotlin Benchmark, JetBrains' official benchmark for evaluating AI coding agents on Kotlin software engineering tasks. Its goal is to give developers a credible, public way to assess how different agents perform on Kotlin and compare agent setups using tasks that are closer to day-to-day dev work. Alongside the benchmark release, JetBrains is publishing the benchmark assets on GitHub and launching the official leaderboard to track the evaluation results. How the Kotlin Benchmark works. The first public iteration of the Kotlin Benchmark is based on the SWE-bench methodology and focuses on repository-level Kotlin software engineering tasks. Kotlin already has strong model-focused evaluation assets, including Kotlin_HumanEval and Kotlin_QA, which help measure a model's understanding of the language's syntax and core concepts. The Kotlin Benchmark looks at a different layer: how well an AI coding agent can complete validated software engineering tasks in existing Kotlin projects. The dataset features 105 engineering tasks sourced from active open-source repositories. Each task requires the AI agent to interpret a real issue description, navigate the project's context, and generate a functional patch. Solutions are strictly verified in containerized environments, and a task is only marked as resolved when the generated solution passes the required test verification. You can read more about its environment setup and data collection on the Methodology page. First results. The first evaluations show that leading coding agents can complete a large share of the current Kotlin Benchmark tasks. These results reflect the first public iteration of the benchmark and do not yet include the most recent model releases. JetBrains is already working on the second iteration and will update the leaderboard as newer evaluations are added. In this run, the top result came from Claude Code with Opus 4.7 xhigh, which resolved 90 of 105 tasks, an 85.71% resolution rate. JetBrains Junie with Opus 4.7 max (81.9%) and Codex with GPT 5.5 xhigh (81.9%) followed closely. The full leaderboard is available on kotlinlang.org/benchmark, where you can compare agents and configurations in detail. For teams evaluating coding agents, the benchmark provides a shared frame of reference for comparing setups on Kotlin tasks instead of relying only on vendor claims. The scores are intended as a signal, not a guarantee for every codebase. Real-world results depend on your architecture, internal APIs, coding standards, tooling, and validation process. What's next. JetBrains value an open approach, which is why JetBrains built this benchmark on the open-source Multi-SWE-bench infrastructure and made all datasets and test harnesses publicly available. JetBrains treat benchmarks as a continuous quality measurement pipeline. Moving forward, JetBrains plan to expand the framework in these areas: * Broader Kotlin ecosystem coverage: JetBrains want the task mix to better reflect how Kotlin is used in practice, including areas such as Android and Kotlin Multiplatform, and cover a wider range of task difficulty levels. * More evaluation metrics: Passing tests is a useful correctness signal, but it is only one part of agent evaluation. Future iterations will look at cost, performance, maintainability, and code quality. * More agents and model setups: JetBrains plan to evaluate more commercial agents, agent-model configurations, and open-weight models, so teams can compare a wider range of setups. The benchmark is open, so you can inspect the tasks, compare results, and tell JetBrains which Kotlin scenarios JetBrains should cover next.
Security advisory: critical authentication and privilege escalation flaws discovered in JetBrains Hub. July 2, 2026 JetBrains has issued an urgent security advisory following the discovery of several high-severity vulnerabilities within JetBrains Hub. Because Hub functions as the central identity and access management (IAM) engine for the broader JetBrains ecosystem - including critical DevOps tools like YouTrack and TeamCity - these flaws present a significant risk of lateral movement and complete infrastructure compromise. Administrators managing integrated development and deployment environments are strongly encouraged to review their current versioning and apply the necessary patches immediately. Technical breakdown of identified vulnerabilities. According to JetBrains' official security bulletin, three distinct vulnerabilities have been addressed. These issues span a range of attack vectors, from cryptographic weaknesses to improper object attribute manipulation. CVE-2026-56141: account takeover via weak PRNG. Discovered by security researcher Ngoc Thuan, this vulnerability stems from a flaw in the account recovery workflow. The system utilized a cryptographically weak Pseudo-Random Number Generator (PRNG), categorized under CWE-338, to generate account restore codes. Because these codes lacked sufficient entropy, they became predictable. An attacker could theoretically perform a brute-force or prediction attack on restore codes to hijack user accounts. In a Hub environment, hijacking a single high-privilege identity provides a "skeleton key" to all connected services, allowing unauthorized access to issue trackers, source code discussions, and CI/CD pipelines. CVE-2026-56142: privilege escalation via attribute manipulation. The second flaw, CVE-2026-56142, is an instance of CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes). This vulnerability allows an authenticated user to manipulate the authentication details attached to their own account. By exploiting this improper validation, a low-privileged user could "bind" a more powerful authentication context to their profile. In organizations using Hub as a Single Sign-On (SSO) broker, this effectively allows a standard user to escalate their permissions to administrative levels, granting them unauthorized access to restricted projects and sensitive organizational resources. CVE-2026-50242: authentication bypass via database logic. Reported by Tuan Anh Lai, CVE-2026-50242 represents a critical authentication bypass identified as CWE-306 (Missing Authentication for Critical Function). This vulnerability allowed attackers to bypass standard sign-in protocols by exploiting logic flaws related to direct database access, potentially granting administrative control over the Hub instance. Notably, this CVE also applies to YouTrack, highlighting a shared risk profile across the JetBrains product suite. If Hub is compromised, the security boundary for all integrated products is effectively nullified. Remediation and patch information. JetBrains has released patches to resolve these issues by strengthening restore code entropy, enforcing strict server-side validation for authentication mappings, and hardening database-level access controls. Required Versions: * Mainline: Hub version 2026.1.13757 * LTS Branches: 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429 Recommended Security Posture: Beyond immediate patching, security teams should implement the following defensive measures: * Audit Log Review: Inspect logs for unusual patterns in account recovery requests or unexpected changes to authentication mappings. * Credential Rotation: Consider rotating sensitive service credentials and administrative passwords. * Enforce MFA: Ensure robust Multi-Factor Authentication (MFA) is enforced across all Hub identities to provide a secondary layer of defense against hijacked credentials. * Network Segmentation: Ensure internet-facing Hub instances are strictly monitored and, where possible, placed behind a VPN or zero-trust access gateway.
Improving embedded software quality with Parasoft C/C++test, CLion, and AI. June 30, 2026 Embedded software development comes with a unique set of pressures: strict safety and security standards, complex toolchains, and the constant challenge of catching defects as early as possible. Starting with CLion 2026.1.2, you can open SARIF findings from Parasoft C/C++test analyses for standards such as MISRA C/C++, AUTOSAR C++14, CERT C/C++, and CWE directly in CLion. From there, you can navigate to the relevant source code and keep the entire triage process within your development workflow. JetBrains has teamed up with Parasoft for a webinar to show how CLion and C/C++test work together to bring advanced static analysis directly into your development workflow. Watch the webinar recording. What the webinar covers. This live demo and Q&A session focuses on practical embedded development workflows. Whether you're working on safety-critical, security-critical, or high-reliability software, you'll come away with concrete techniques for: * Running advanced static code analysis without leaving CLion. * Detecting defects and coding standard violations earlier in the development cycle. * Supporting compliance with industry standards, including MISRA C/C++, AUTOSAR C++14, CERT C/C++, and CWE. * Reducing context switching between development and verification activities. * Leveraging AI-assisted and MCP-enabled workflows to understand violations and accelerate remediation. How the integration works. CLion calls the Parasoft C/C++test command-line launcher, which writes a SARIF report into your project. You can open this report directly in CLion's built-in SARIF Viewer, letting you navigate from findings straight to the affected source code. The result is a tight feedback loop: configure, analyze, review violations, and fix issues right inside the IDE. Beyond general-purpose inspections. CLion already provides solid built-in inspections for C and C++ code. What Parasoft C/C++test adds on top is compliance-grade analysis purpose-built for embedded and safety-critical projects. This means full rule sets and detailed documentation for standards like MISRA C/C++, AUTOSAR C++14, CERT C/C++, and CWE, plus traceability and compliance reporting that holds up in audits and certification activities. For teams building software for automotive (ISO 26262), medical devices (IEC 62304), rail (EN 50716), aerospace, or industrial automation, this level of compliance support isn't optional. It's essential. The integration also supports consistent verification across the development life cycle: The same Parasoft C/C++test analysis configurations used in CLion can be reused in CI/CD pipelines, so the checks that catch issues during development are the same checks that run at integration time. AI-assisted fixes. One of the more forward-looking aspects of the integration is support for AI-assisted workflows. Developers can use Parasoft C/C++test's AI skills and MCP-enabled capabilities to better understand why a violation was flagged, review the relevant coding standard requirements, and get suggestions for fixing the issue, while staying in full control of the actual code changes. This is particularly valuable when working with dense standards like MISRA or AUTOSAR, where the rationale behind a rule isn't always obvious.
The State of PHP 2026 survey is now open. JetBrains and The PHP Foundation have launched the first State of PHP survey, a joint effort to get a clearer picture of how PHP is used today and who is building with it. The two teams are trying to reach as broad and diverse an audience as possible so the results truly represent the wider PHP community. If you write PHP, this is a chance to put your experience on the record. The survey is open to every PHP developer regardless of experience level, location, framework, or the tools you reach for. #What it covers. The survey looks at the people behind PHP and how they work, including: * Years of experience and developer demographics * Preferred frameworks and tools * AI preferences and how developers are using it * Challenges developers run into * Sentiment about PHP and its future direction #Why it matters. The goal is to turn that input into a shared reference for the whole community. As The PHP Foundation puts it in its announcement: To support PHP effectively, we need better insight into that ecosystem. JetBrains frames the survey the same way, describing the aim as drawing "the most representative picture of the PHP ecosystem and the developers behind it, and share insights that will benefit the community and help shape the future direction of PHP." The aggregated results will be published in the State of PHP 2026 report later this year, with insight for contributors, maintainers, tool authors, educators, and companies working with PHP. #Prizes. Everyone who completes the survey can enter a drawing for one of five €500 vouchers (or the equivalent in local currency) redeemable through Tremendous, Keep in mind evil bots, dishonest respondents, and AI agents will be excluded from prize distribution. So don't try it.:) #Take the survey. The survey is open now, with results due in October 2026. You can take it at surveys.jetbrains.com, and you can read more in the announcements from JetBrains and The PHP Foundation. Give it a few minutes and help shape the future of PHP. Eric is the creator of Laravel News and has been covering Laravel since 2012.