Features
Everything that runs on your diff
Fifteen capabilities across five layers. Every one of them is either free forever or included in the $19/repo plan — no add-on modules, no per-feature upsell.
Free — included on every planPro — $19 / repoTeam — 5+ repos
AI analysis
Context beyond the diff — the class of finding no pattern can reach.
AI bug detection
ProFull-file and cross-file context catches logic errors, off-by-ones, null risks and race conditions that static rules structurally cannot see.
PR walkthrough
ProA plain-English summary of what changed, why it matters and what to watch during review — posted as the first comment on the PR.
Auto-fix suggestions
ProConcrete replacements delivered as native GitHub suggestions. Commit the fix in one click instead of translating advice into code.
Security & secrets
The findings that cost the most when they reach main.
Secret detection
Free13 patterns covering AWS, Stripe, GitHub tokens, private keys and generic credentials — across every file type, regardless of language.
SAST scanning
FreeOWASP Top 10: SQL injection, XSS, path traversal, command injection, weak crypto and insecure deserialization.
Dismiss with memory
FreeDisagree with a finding? Comment /microreview ignore and it stays dismissed on future reviews of that repo — you never re-litigate the same line twice.
Static analysis
Deterministic, fast, and configurable down to the rule.
30+ static rules
FreeNaming, error handling, request validation, Spring Boot patterns and the anti-patterns that reliably become incidents.
Custom config
FreeOne .microreview.yml per repo: severities, thresholds, file patterns, rule toggles — plus your own regex rules.
Multi-language
FreeDeep rule packs for Java, TypeScript and Python. AI analysis and secret scanning work on anything you commit.
Risk & CI/CD
Where a review stops being advice and becomes a decision.
Risk score 0–100
FreeA composite of finding count and severity, with a hard floor for anything critical. Auto-approve below 30, block above 70 by default.
Merge blocking
FreeA required status check via the GitHub Checks API. Above threshold, the merge button is unavailable — not merely discouraged.
Incremental reviews
FreeNew commits re-review only what moved. Force-pushes don't resurrect comments you already resolved.
Developer experience
Findings where you already are, and nowhere else.
30-second setup
FreeInstall the App, pick repos, done. No YAML required, no server to run, no onboarding call to schedule.
Inline annotations
FreeComments land on the exact lines that need attention, in the diff view — not buried in an external dashboard.
Analytics dashboard
TeamReview trends, most-triggered rules, risk over time, and which repos are accumulating debt fastest.
Not shipped yet
Things people ask for that we don’t have today. Listed so you find out here rather than in week one.
Dependency alerts
Known-vulnerable packages flagged as they enter a manifest.
Self-hosting
For teams that legally cannot send diffs to a managed service.
SSO / SAML
Org-level sign-in for larger teams.
SOC 2
Formal certification; the underlying controls are described on the security page.