freemium
All-in-one code security platform with AI autofix that opens reviewable pull requests across scan types.
Security-focused review
Live directory listings whose primary category is security-focused review. Alphabetical, not ranked. No paid placement.
Catalog last reviewed 2026-09-04. Page copy reviewed 2026-08-10. Next editorial review by 2026-09-10. Alphabetical order, no paid placement. 14 matched live listings.
AppSec and security engineering teams often want AI that reviews code changes for vulnerabilities, not only style or generic bugs. This shortlist is the live catalog slice for primary category security-review. Products range from AI-native SAST-style reviewers to broader AppSec platforms that added pull-request review agents. Confirm each product surface in its listing before treating a row as full AppSec coverage.
Who this is for. Security engineers, AppSec leads, and platform teams evaluating AI review that prioritizes vulnerability detection, auto-triage, or fix proposals on pull requests.
Eligibility. Included only when a live listing has primary category security-review. General PR review agents that mention security as a secondary signal stay under general-pr-review. Inclusion is category-tag based from the directory seed, not a penetration-test endorsement or ranking.
How order works. Matched tools are filtered from the live catalog by primary category, then sorted alphabetically by name. Paid skip-the-queue fees buy publish timing only, never rank or praise on this page. The house product (heyGRC) appears under the same rules with an ownership note when listed. See /transparency.
Target query: best AI security code review tools. Full catalog: /directory.
enterprise
AI agents that turn detected code vulnerabilities into merge-ready fix pull requests for developers.
freemium
Pipelineless AppSec platform running hybrid deterministic and AI SAST on pushes and pull requests with fixes.
freemium
AI-native SAST that finds business logic and auth flaws and generates fixes on pull requests.
enterprise
Agentic security analysis of every pull request with findings posted as PR comments and plain-language policies.
enterprise
AppSec platform whose multi-agent AI code review flags security design risks on every pull request.
freemium
AI SAST combining LLM agents with program analysis to catch logic flaws, with PR autofix.
paid
Autonomous security agents that hunt for vulnerabilities on every code change.
Security-focused reviewGitHub
freemium
Automated vulnerability fixer that converts SAST findings into ready-to-merge pull requests, plus a PR review mode.
paid
Autonomous AppSec agents that scan commits and PRs, validate exploitability, and open self-correcting fix PRs.
enterprise
Automated product security engineer that triages scanner findings and opens convention-aware fix pull requests.
open core
Static analysis platform with an AI assistant that triages findings and posts remediation guidance on pull requests.
freemium
Developer security platform whose DeepCode AI engine finds vulnerabilities and generates one-click fixes in PRs and IDEs.
paid
AI security scanner that reviews every pull request inline and proposes patches that build and pass tests.