Aevral
Listed by Better ISMS (same rules as everyone)
Reviews pull requests and scans repositories for exploitable authorization, IDOR, and business-logic flaws.
Security-focused reviewGitHub
Tool directory
68 tools. Sorted by name. No paid boost.
freemium
All-in-one code security platform with AI autofix that opens reviewable pull requests across scan types.
AWS agent that auto-reviews new GitHub pull requests and commits suggested fixes on request.
enterprise
AI agents that turn detected code vulnerabilities into merge-ready fix pull requests for developers.
freemium
Pipelineless AppSec platform running hybrid deterministic and AI SAST on pushes and pull requests with fixes.
paid
Engineering review platform with specialized AI reviewers for code, security, plans, and merges.
freemium
AI Code Review Agent using a codebase knowledge graph for cross-repository impact analysis.
open source
Free GitHub bot and Action that posts LLM generated review comments on pull requests.
Anthropic's multi-agent PR review for GitHub, plus a local /code-review command in Claude Code.
freemium
Automated code quality and security scanning with an LLM-based AI Reviewer commenting on pull requests.
paid
Code review and application security platform combining AST analysis with AI reviewers.
freemium
Optimizes Python code for speed, verifying correctness and benchmarking candidates before proposing changes.
freemium
Automated AI review of pull requests with summaries, line comments, and suggested fixes across major Git platforms.
freemium
Code health analytics platform whose ACE feature generates validated AI refactorings for flagged code smells.
OpenAI Codex reviews GitHub pull requests automatically or when tagged with @codex review.
freemium
AI-native SAST that finds business logic and auth flaws and generates fixes on pull requests.
enterprise
Enterprise SAST whose Polaris Assist adds AI issue summaries and copy-ready fix suggestions for findings.
freemium
AI code review for complex codebases, learning repository patterns to cut review noise.
General PR review agentsGitHub
paid
Cursor's PR review agent focused on finding hard logic bugs with few false positives.
freemium
Static analysis platform combining thousands of deterministic rules with AI review comments and Autofix patches.
paid
Automated pull request review feature of Cognition's Devin autonomous software engineer.
General PR review agentsGitHub
freemium
AI software platform for building and shipping full-stack apps, iterating on existing codebases, and reviewing code.
General PR review agentsGitHub
enterprise
Agentic security analysis of every pull request with findings posted as PR comments and plain-language policies.
paid
Managed coding agent platform whose agents review pull requests and automate engineering workflows.
enterprise
AppSec platform whose multi-agent AI code review flags security design risks on every pull request.
freemium
Code review that learns from a team's logged incidents, part of an agent platform that also routes AI model spend and tracks agent sessions.
freemium
AI SAST combining LLM agents with program analysis to catch logic flaws, with PR autofix.
Gemini agent that summarizes and reviews GitHub pull requests, now offered as an enterprise product.
Platform-native reviewGitHub
Copilot reviews pull requests on GitHub, posting inline comments and ready-to-apply change suggestions.
AI reviewer for GitLab merge requests, assignable as a reviewer with customizable instructions.
Platform-native reviewGitLab
open source
Open source AI code reviewer that runs in CI or locally with any LLM provider.
freemium
Code review platform combining stacked pull requests, a merge queue, and an AI review agent.
freemium
Codebase-aware PR review agent that finds cross-file bugs by indexing the full repository graph.
enterprise
On-demand network of vetted human code reviewers with AI triage, run by HackerOne.
paid
AI-native security platform that validates vulnerabilities in pull requests and runs whitebox pentests.
Security-focused reviewGitHub
heyGRC
Listed by Better ISMS (same rules as everyone)
Reviews pull requests for compliance impact, citing controls from frameworks like ISO 27001 and SOC 2.
Specialized reviewersGitHub
open core
Estimates cloud cost impact of infrastructure changes and enforces FinOps policies on pull requests.
freemium
Automatic pull request reviews on GitHub and GitLab from the open source Kilo Code project.
open core
Open source AI code review platform with full control over model choice and cost.
paid
AI code reviews with bug detection, suggested fixes, PR summaries, and team insight dashboards.
paid
AI engine that summarizes codebase changes, reviews pull requests, and finds bugs for teams.
General PR review agentsGitHub
freemium
AI infrastructure platform for engineering teams: model inference, coding agents, and agentic pre-commit code reviews.
freemium
Real-time code analysis engine that runs alongside AI coding tools to guardrail agent-written changes.
paid
Documentation agent that reads code changes and opens pull requests updating affected docs pages.
Specialized reviewersGitHub
freemium
Automated vulnerability fixer that converts SAST findings into ready-to-merge pull requests, plus a PR review mode.
paid
Autonomous AppSec agents that scan commits and PRs, validate exploitability, and open self-correcting fix PRs.
open source
Self hosted review bot from Vercel Labs, triggered by mentioning it in pull request comments.
Agentic pull request reviewer that indexes the full repository on GitHub and GitLab.
freemium
Low-noise PR review agent with security checks, now part of a broader autonomous QA platform.
enterprise
Automated product security engineer that triages scanner findings and opens convention-aware fix pull requests.
open source
Community maintained open source PR review agent supporting GitHub, GitLab, Bitbucket, and Azure DevOps.
open source
Free open source GitHub Action that reviews pull requests using your own LLM key.
General PR review agentsGitHub
paid
Drafts documentation updates from pull requests, Slack threads, and tickets, and now also improves agent instructions from session traces.
Specialized reviewersGitHub
freemium
Code Climate successor bundling 70+ linters with opt-in AI autofix suggestions and explanations.
freemium
JetBrains code quality platform running IDE grade static analysis in CI pipelines.
open core
Context-aware pull request review and management agent, built on the open source PR-Agent project.
paid
Bug-focused checker for pull requests, staged changes, and coding agent feedback loops.
Atlassian's AI reviewer for Bitbucket Cloud and GitHub, checking pull requests against linked Jira criteria.
open core
Static analysis platform with an AI assistant that triages findings and posts remediation guidance on pull requests.
freemium
Sentry feature that predicts errors, reviews pull requests, and generates tests using production context.
Platform-native reviewGitHub
open source
Extendable open source review agent that runs in CI and explores the codebase with tools.
freemium
Developer security platform whose DeepCode AI engine finds vulnerabilities and generates one-click fixes in PRs and IDEs.
open core
Static analysis platform for 30+ languages with AI CodeFix suggestions and AI pull request review.
freemium
Automated PR reviews with bug findings, security checks, and real-time feedback in the IDE.
freemium
Agentic code review tool that writes pull request descriptions and learns team standards.
General PR review agentsGitHub
Reviews pull requests and validates each suggested patch in a sandbox before posting it.
Platform-native reviewGitHub
freemium
Guardrails and AI reviews that enforce team standards on AI generated code.
paid
AI security scanner that reviews every pull request inline and proposes patches that build and pass tests.