Showing 24 of 33 tools
Google's proactive coding agent for async repository maintenance
Jules is Google's coding agent that proactively scans repositories for TODO comments, bug patterns, and improvement opportunities, proposing code changes without explicit user requests. Built on Gemini models, it operates asynchronously in the background, completing over 140,000 code improvements. Handles routine maintenance tasks like dependency updates, code cleanup, and follow-on work from completed features.
LSP-based AI code review agent backed by Y Combinator
mrge is a YC-backed AI code review agent that uses Language Server Protocol analysis to provide deep, context-aware pull request reviews. It goes beyond surface-level pattern matching by understanding project structure, type information, and cross-file dependencies. Integrates with GitHub and GitLab to deliver automated reviews that catch logic errors, security issues, and architectural inconsistencies.
Git-native AI agent session capture and reasoning traceability
Checkpoints by Entire captures the full reasoning context behind AI-generated code directly in Git. Founded by former GitHub CEO Thomas Dohmke with a 60 million dollar seed round, it records transcripts, prompts, files touched, token usage, and tool calls alongside every commit. Session metadata lives on a separate branch keeping your history clean, with rewind capabilities to restore any previous agent checkpoint when things go sideways.
Human-in-the-loop approval and oversight layer for AI coding agents
HumanLayer is a YC-backed platform that adds human approval, oversight, and escalation workflows to AI coding agents. Instead of letting agents execute autonomously, HumanLayer provides checkpoints where humans review and approve agent actions before they touch real codebases and infrastructure. It bridges the gap between autonomous AI coding and enterprise-safe deployment by making human oversight programmable.
AI-powered pull request summaries and code review
WhatTheDiff is an AI tool that generates human-readable pull request summaries and suggests code improvements. It analyzes code diffs to explain what changed and why in plain language, helping reviewers understand PRs faster. Integrates with GitHub and supports automated refactoring suggestions through a /wtd command. Useful for teams wanting to improve PR review speed and maintain changelog quality.
Context-aware AI review with business logic validation
Umaku is a context-aware AI code review agent that understands full codebase and business logic context, detecting inconsistencies and assessing quality and risk beyond syntax-level analysis. It auto-generates and validates QA test cases from reviewed code, making it particularly effective for reviewing AI-generated code where product-intent validation matters more than style checking.
Pull Requests as a Service with AI + developers
GitStart is a YC-backed platform that delivers merge-ready pull requests by combining AI coding agents with human developer oversight. Teams assign sprint-sized tickets and the AI Ticket Studio converts vague requirements into well-scoped specs, then hybrid agents generate production-ready code through a five-stage quality process with a 98% merge rate reported across customer teams.
Code health analysis and technical debt quality gates
CodeScene analyzes code health, technical debt, and delivery risks by examining code patterns and change frequency, then integrates as CI/CD quality gates on pull requests. It scales AI-assisted development safely by measuring whether generated code maintains architectural integrity, with on-premises deployment options and pricing that starts free for open-source projects.
AWS managed AI code review for Java and Python
Amazon CodeGuru Reviewer is an AWS managed service that provides automated code analysis and recommendations on pull requests for Java and Python codebases. It integrates with GitHub, Bitbucket, and AWS CodeCommit, using machine learning trained on Amazon's internal code review practices to identify bugs, security vulnerabilities, and performance issues with IAM-based access control for enterprise governance.
AI reviewer that catches hallucinations in generated code
Codoki is a specialized AI code reviewer focused on catching hallucinations in code generated by autonomous agents like Devin and Claude Code. It validates that AI-proposed code actually functions according to provided requirements, serving as a critical safety layer for teams where AI agents generate a significant portion of the codebase and human review capacity cannot keep pace with generation speed.
Automated PR workflow with AI review and labeling
ReviewPad automates the pull request workflow by applying team-defined rules for labeling, assigning reviewers, and providing AI-powered feedback on code changes. Its open-source GitHub repository supports custom automation scripts that standardize the review cycle, making it essential for mid-to-large teams enforcing governance without sacrificing development velocity across multiple repositories.
AI code review that groups and orders PR changes
Cubic is an AI-powered code review platform used by teams at cal.com and n8n that organizes complex PRs by grouping files logically (Backend → API → UI) and provides an AI walkthrough of changes. At $30/developer/month for unlimited reviews, it solves the jumpiness problem in large pull requests where reviewers lose context hopping between unrelated files, offering one-click fixes and custom rule enforcement.
AI coding agent for code review and bug fixing
Ellipsis is a Y Combinator W24-backed AI coding agent that automatically reviews code, fixes bugs on pull requests, creates release notes, and resolves build issues autonomously. It goes beyond passive review by directly contributing code to fix the issues it identifies, integrating with GitHub to provide context-aware feedback while emphasizing security through a strict no-code-retention policy.
Open-source AI-powered PR review with slash commands
PR-Agent by Qodo is the most widely adopted open-source AI code review tool with 10,700+ GitHub stars and 207 contributors. It provides automated PR description generation, intelligent line-by-line code review, and actionable improvement suggestions through intuitive slash commands like /describe, /review, and /improve, integrating natively with GitHub Actions, GitLab CI, Bitbucket, and Azure DevOps.
Open-source AI code review with hybrid AST-LLM
Kodus is an open-source AI code review platform that combines Abstract Syntax Tree analysis with LLM reasoning in a hybrid architecture, dramatically reducing noise and hallucinations compared to pure LLM approaches. Its Kody agent learns team-specific coding standards over time, supports full model choice including OpenAI, Anthropic, Gemini, and local models via Ollama, and offers self-hosted deployment for enterprise security requirements.
AI-powered safe PR auto-approval
Codeball uses AI to identify low-risk pull requests that can be automatically approved and merged, analyzing historical PR patterns and code change characteristics to predict risk levels. The open-source core integrates as a GitHub Action, helping teams significantly increase delivery velocity by automating triage of routine code changes while flagging high-risk PRs for thorough human review.
All-in-one AI code review, security, and quality
CodeAnt AI is a Y Combinator-backed platform that bundles AI-powered pull request reviews, SAST security scanning, secret detection, IaC scanning, and DORA developer metrics into a single tool. Supporting 30+ programming languages and all major Git platforms including GitHub, GitLab, Bitbucket, and Azure DevOps, it has scanned over 50 million lines of code and auto-fixed 500,000+ issues across engineering teams worldwide.
AI-native security for coding agents
Corridor is an AI-native security platform that intercepts vulnerabilities at the code generation layer, providing real-time guardrails and automated PR security reviews for teams using AI coding agents like Cursor, Claude Code, and GitHub Copilot. Founded by former CISA Secure by Design lead Jack Cable and backed by $25M Series A from Felicis at a $200M valuation, Corridor embeds proactive security context into developer workflows via MCP server integration.
AI code review by Cursor with multi-pass parallel analysis
BugBot is Cursor's AI code review tool that automatically reviews GitHub pull requests by running eight parallel review passes with randomized diff order to catch bugs that single-pass reviewers miss. Processing over two million PRs monthly, it offers a Fix in Cursor button that jumps developers from review comments to the editor with pre-loaded fixes. Tightly integrated with the Cursor IDE, it requires a Cursor subscription and is currently GitHub-only.
Unified AI code review and application security platform
Panto AI is a unified AI-driven code review and application security platform that combines static analysis, secrets detection, dependency scanning, and infrastructure-as-code security into a single PR workflow. It contextualizes issues based on repository structure and code history to deliver actionable insights directly within pull requests on GitHub, GitLab, and Bitbucket with zero-configuration onboarding and compliance-ready reporting for SOC 2, ISO, and PCI-DSS.
Automated code quality platform with AI autofix
DeepSource is a code quality and security platform that scans repositories for bugs, anti-patterns, vulnerabilities, and performance issues with AI-powered autofix. Supports 15+ languages including Python, JavaScript, Go, Ruby, and Java. Analyzes every commit and PR with inline annotations. Features code coverage tracking, dependency scanning, custom analyzer rules, and quality gates. Free for open-source and individual developers with unlimited repositories.
Cloud-based code quality and security analysis
SonarCloud is the cloud version of SonarQube providing continuous code quality and security analysis as a service. Automatically scans every pull request for bugs, vulnerabilities, code smells, and security hotspots across 30+ languages. Features quality gates that block merging of substandard code, technical debt tracking, and duplicated code detection. Free for open-source projects. Integrates with GitHub, GitLab, Bitbucket, and Azure DevOps with zero infrastructure management.
Code quality and security analysis platform
SonarQube is an open-source code quality and security platform with 9K+ GitHub stars that continuously inspects code for bugs, vulnerabilities, code smells, and security hotspots across 30+ programming languages. Enforces quality gates in CI/CD pipelines to prevent bad code from merging. Features include SAST scanning, duplicated code detection, technical debt tracking, and quality profiles. The industry standard for code quality management, used by 400K+ organizations worldwide.
Fast open-source SAST with custom rules
Semgrep is an open-source static analysis tool with 11K+ GitHub stars that scans code for bugs, vulnerabilities, and anti-patterns using lightweight, customizable rules written in YAML. Runs 10-20x faster than traditional SAST tools with support for 30+ languages. The AppSec platform adds SCA for dependency scanning, secrets detection, and AI-powered triage. Features a community-driven rule registry with 3,000+ rules. Integrates with GitHub, GitLab, CI/CD, and IDE extensions.
