Best Code Review Tools for GitHub
View:
Compare the Top Code Review Tools that integrate with GitHub as of July 2025
Sort By:
This a list of Code Review tools that integrate with GitHub. Use the filters on the left to add additional filters for products that have integrations with GitHub. View the products that work with GitHub in the table below.
What are Code Review Tools for GitHub?
Code review tools are software tools designed to examine and analyze source code for errors, bugs, and vulnerabilities. They provide developers with detailed feedback on their code, highlighting areas that need improvement or optimization. These tools use a variety of techniques such as static analysis, unit testing, and peer review to ensure the quality and functionality of the code. In addition to identifying coding issues, they also help improve code security by detecting potential vulnerabilities or weaknesses in the code. Code review tools are an essential part of the development process for any software project. Compare and read user reviews of the best Code Review tools for GitHub currently available using the table below. This list is updated regularly.
-
1
Windsurf Editor
Windsurf
The Windsurf Editor is a free AI-powered IDE and AI coding assistant that accelerates development by providing intelligent code generation and agents in over 70 programming languages and more than 40 IDEs, including VSCode, JetBrains, and Jupyter Notebooks. With Windsurf, developers can write code faster, eliminate repetitive tasks, and stay in the flow state—whether they're working with Python, JavaScript, C++, or any other language. Built on billions of lines of open-source code, Windsurf Editor understands and anticipates your coding needs, offering multiline suggestions, automated unit tests, and even natural language explanations for complex functions. It’s perfect for streamlining code writing, reducing boilerplate, and cutting down the time spent on documentation searches. Trusted by individual developers and Fortune 500 companies alike, Windsurf Editor is your go-to solution for boosting productivity and writing better code. Try Windsurf for free today!Starting Price: Free -
2
GitGuardian
GitGuardian
GitGuardian is a code security platform that provides solutions for DevOps generation. A leader in the market of secrets detection and remediation, its solutions are already used by hundreds of thousands of developers. GitGuardian helps developers, cloud operation, security, and compliance professionals secure software development and define and enforce policies consistently and globally across all systems. GitGuardian solutions monitor public and private repositories in real-time, detect secrets, sensitive files, IaC misconfigurations, and alert to allow investigation and quick remediation. Additionally, GitGuardian's Honeytoken module exposes decoy resources like AWS credentials, increasing the odds of catching intrusion in the software delivery pipeline. GitGuardian is trusted by leading companies, including 66 degrees, Snowflake, Orange, Iress, Maven Wave, DataDog, and PayFit. Used by more than 300K developers, it ranks #1 in the security category on GitHub Marketplace.Starting Price: $0 -
3
Gemini Code Assist
Google
Increase software development and delivery velocity using generative AI assistance, with enterprise security and privacy protection. Gemini Code Assist completes your code as you write, and generates whole code blocks or functions on demand. Code assistance is available in many popular IDEs, such as Visual Studio Code, JetBrains IDEs (IntelliJ, PyCharm, GoLand, WebStorm, and more), Cloud Workstations, Cloud Shell Editor, and supports 20+ programming languages, including Java, JavaScript, Python, C, C++, Go, PHP, and SQL. Through a natural language chat interface, you can quickly chat with Gemini Code Assist to get answers to your coding questions, or receive guidance on coding best practices. Chat is available in all supported IDEs. Enterprises can customize Gemini Code Assist using their organization’s private codebases and knowledge sources so that Gemini Code Assist can offer more tailored assistance. Gemini Code Assist enables large-scale changes to entire codebases.Starting Price: Free -
4
Review Board
Beanbag
Code review doesn't have to be so hard. Review Board takes the pain out of code review, saving you time, money, and sanity so you can focus on making great software. You can review just about anything. Code, documents, artwork, you name it! There's more to your project than just code. Documentation, artwork, website designs, interface mockups, release announcements, feature specifications, and the list goes on. A picture paints a thousand words, and can be key in a review. Drag-and-drop one or more images onto your review request to make them instantly reviewable. Your team will be able to click-and-drag anywhere on the image and leave a comment. When they do, you'll see their comment right along with that portion of the image. Made a tweak to the image? Just upload a new revision and view a visual diff of the changes through one of our many image diff modes. Sometimes you'll have other text content that's not part of your source tree. -
5
HOJI AI
HOJI AI
Speeding up the review process but ensuring consistent, high-quality feedback, freeing senior developers for more complex tasks. Your engineers are your most valuable (and expensive) resource. HOJI AI helps them focus on what they do best, and do it even better. We do not use, store, or train on your codebase. We only store code review snippets for your reference and quality assurance purposes. Hoji AI uses a powerful AI pipeline built on top of GPT-4 to intelligently access context in ways GPT alone cannot. -
6
Code Search
Sourcegraph
With rapidly growing codebases, a proliferating number of repositories, multiple languages and file formats, and an increasing number of developer tools, Sourcegraph's Code Search enables developers to quickly explore and understand their code with precision and accuracy and automate large-scale code changes.Starting Price: $49/user/month -
7
Softagram
Softagram
Software projects tend to be complex and there is the law of entropy making it more complex all the time. The developers easily get lost in the dependency network and tend to create designs that does not stand time well. Softagram provides automatically illustrations on how the dependencies are changing. Automated integration works so that pull requsts (in GitHub, Bitbucket, Azure DevOps), merge requests (in GitLab) and patch sets (in Gerrit) are decorated with a dependency analysis report that pops up as a comment in the tool you already use. The analysis also covers other aspects such as open source licenses and quality. It can be tailored for your needs. Software audits can also be efficiently performed by using Softagram analysis together with Softagram Desktop app designed for advanced software understanding and auditing usage.Starting Price: $25 per month per user -
8
CodeScene
CodeScene
CodeScene is a code analysis, visualization, and reporting tool. Cross reference contextual factors such as code quality, team dynamics, and delivery output to get actionable insights to effectively reduce technical debt and deliver better code quality. We enable software development teams to make confident, data-driven decisions that fuel performance and developer productivity. Supporting 28+ programming languages, CodeScene also offers an automated integration with GitHub, BitBucket, Azure DevOps or GitLab pull requests to incorporate the analysis results into existing delivery workflows. Automate your code reviews, get early warnings and recommendations about complex code before merging it to the main branch and set quality gates to trigger in case your code health declines.Starting Price: €18 per active author/month -
9
Visual Expert
Novalys
Visual Expert is a static code analyzer for Oracle PL/SQL, SQL Server T-SQL, and PowerBuilder. Identify code dependencies to modify your code without breaking your application. Scan your code to improve the security, performance, and quality. Perform Impact analysis to Identify breaking changes. Automatically scan your code to detect and fix security vulnerabilities, bugs and maintenance Issues. Implement continuous code inspection Understand the inner workings of your code with call graphs, code diagrams, CRUD Matrix and Object Dependency Matrix (ODM). Automatically generate an HTML Source Code documentation. Explore your code exploration with hyperlinks Compare applications, databases or pieces of code. Improve maintainability. Clean up code. Comply with dev standards. Analyze and Improve DB code performance: Find slow objects and SQL queries, Optimize a slow object, a Chain of calls a slow SQL, Get a query Execution Plan. And much more.Starting Price: $495 per year -
10
Reshift
Reshift Security
The ultimate tool to help Node.js developers secure their custom code. Developers are 4x more likely to fix issues before code is checked in. Reshift makes shifting security left seamless with security bug detection and remediation at compile time. A security tool that works with your developers, without slowing them down. Reshift integrates with the developers’ IDE so security issues are found in real-time and fixed before the code is merged. New to security? Reshift makes it easy to build code security into your pipeline for the first time. A tool built for growing software companies looking to level up their security. Not a security expert? Reshift is made for SMB’s, making it easy to set up with no need for security expertise. Improve code security, while learning about secure code.Reshift provides rich content and best practices, so developers learn about security while writing code.Starting Price: $99 per month -
11
SonarQube Cloud
SonarSource
Maximize your throughput and only release clean code SonarQube Cloud (formerly SonarCloud) automatically analyzes branches and decorates pull requests. Catch tricky bugs to prevent undefined behavior from impacting end-users. Fix vulnerabilities that compromise your app, and learn AppSec along the way with Security Hotspots. With just a few clicks you're up and running right where your code lives. Immediate access to the latest features and enhancements. Project dashboards keep teams and stakeholders informed on code quality and releasability. Display project badges and show your communities you're all about awesome. Code Quality and Code Security is a concern for your entire stack, from front-end to back-end. That’s why we cover 24 languages including Python, Java, C++, and many others. Transparency makes sense and that's why the trend is growing. Come join the fun, it's entirely free for open-source projects!Starting Price: €10 per month -
12
Phabricator
Phacility
Phabricator supports post-commit auditing, either as a primary workflow or, when coupled with Herald, allows rule-based triggers to get an extra set of eyes on your code. Plan features, track bugs, and award tokens. Maniphest lets you customize input forms, use custom fields, and has a rich API. You can write things down and revert them later with Phriction, which is a documentation wiki. Use sophisticated drag and drop to make sure your project is properly micro-managed with Workboards. With Conpherence keeping up with where your team is having lunch is just a few clicks away. As your company scales, keep track of activity with Herald, which notifies you when things you care about happen (like a specific file being changed). The arcanist command line tool gives you CLI access to most of Phabricator's functionality. The Conduit API allows you to write scripts that interact with Phabricator over an HTTP JSON API.Starting Price: $20 per month -
13
DeepSource
DeepSource
DeepSource helps you automatically find and fix issues in your code during code reviews, such as bug risks, anti-patterns, performance issues, and security flaws. It takes less than 5 minutes to set up with your Bitbucket, GitHub, or GitLab account. It works for Python, Go, Ruby, and JavaScript. DeepSource covers all major programming languages, Infrastructure-as-Code, secrets detection, code coverage, and more. You won't need any other tool to protect your code. Start building with the most sophisticated static analysis platform for your workflow and prevent bugs before they end up in production. Largest collection of static analysis rules in the industry. Your team's central hub to track and take action on code health. Put code formatting on autopilot. Never let your CI break on style violations. Automatically generates and applies fixes for issues in a couple of clicks.Starting Price: $12 per user per month -
14
CodeSandbox
CodeSandbox
CodeSandbox is a cloud development platform that empowers development teams to code, collaborate, and ship projects of any size from any device in record time. Run your code in powerful microVMs and build anything without limits. We configure your environment for you and keep your code always ready, behind a URL. Boxy, the CodeSandbox AI coding assistant, is also now available to all Pro subscribers.Starting Price: $12 per month -
15
Upsource
JetBrains
Automate your workflow, let Upsource analyze your code and track the progress, while you focus on improvements. Participate in discussions and manage your reviews without leaving the comfort of your IDE. Explore new changes in the browser with IDE-like navigation, reply by email, and never miss an important change. Discuss changes, @mention others, react to comments, and unlock achievements as you discover new features and help your teammates! Easily make Upsource part of your process, integrate it with issue trackers, CI servers, and sync with GitHub. Don’t worry about outgrowing Upsource! No matter how large your team becomes or how many projects you have, Upsource can handle it. Whether you're looking for a code review tool, insight into your projects' history, or a place to collaborate or expand your developer expertise, Upsource has got you covered!Starting Price: $1,300 per 25 users -
16
Stickler CI
Stickler
Align your team's code reviews with automatic style feedback, for all the languages you use, all in one place. Connecting your repository is a couple of clicks away and our reviews finish in record time. Use the default style guides or customize each tool to fit your team's tastes. Use auto fixing to correct your team's style errors so you can focus on feedback. Stickler CI only keeps your code on our servers for the duration of a review. After the comments for a review are posted your code is removed from our servers. Incrementally improve and standardize the quality of your code in each pull request. Ensure your coding standards are applied consistently as code changes without having to disrupt your team. Make sure your code quality and style are standardized by automatically applying style and quality checking tools. Either use the defaults or customize linters to fit your existing coding standards.Starting Price: $15 per month -
17
Pullflow
Pullflow
Collaborate with each other and AI in the most natural way without leaving your favorite tools - minimizing distraction and context switching. Pullflow synchronizes user identities and code-review activity across GitHub, Slack, and VS Code, enabling you to converse naturally across platforms. Take action from wherever you are, and return to your flow. Pullflow integrates with GitHub Actions, external CI/CD, GitHub apps, and more, to bring you a single view of your pull request from draft and review to test and deploy. Let Pullflow take care of quick actions for you with just a chat mention or IDE keyboard shortcut. Request review, add/remove labels, give feedback, approve, and more, without a trip to GitHub.Starting Price: $5 per user per month -
18
CodeRabbit
CodeRabbit
Privacy-focused, contextual pull request reviews with line-by-line code suggestions and interactive chat that gets smarter over time. The diff in the pull request is transformed into a clear summary, helping you understand the intent of the changes. Creates automated release notes, convenient for inclusion in the release documentation. A detailed, line-by-line analysis of the code changes provides precise and actionable suggestions ready to be committed. Ask questions to the bot within your code lines, provide more context, and have it write the code. The more you chat with the bot, the smarter it will become. Shorten cycle time with faster review feedback and high-quality code change suggestions. Your data stays confidential and solely fine-tunes your reviews. The system learns from your interactions, refining the reviews to align with your preferences.Starting Price: $12 per month -
19
StepSecurity
StepSecurity
If you are using GitHub Actions for CI/CD and are worried about the security of CI/CD pipelines, StepSecurity platform is for you. Implement network egress control and CI/CD infrastructure security for GitHub Actions runners. Discover CI/CD risks and GitHub Actions security misconfiguration. Standardize GitHub Actions CI/CD pipeline as code files by automated pull requests. Provides runtime security to help you prevent SolarWinds and Codecov CI/CD security attacks by blocking egress traffic with an allowlist. Instant contextualized insight into network and file events for all workflow runs. Control network egress traffic with granular job-level and default cluster-wide policies. Many GitHub Actions are not maintained and are risky. Enterprises fork such Actions, but ongoing maintenance is expensive. By offloading the tasks of reviewing, forking, and maintaining Actions to StepSecurity, enterprises can realize substantial risk reduction and time savings.Starting Price: $1,600 per month -
20
Squire AI
Squire AI
Get away from essay writing, Squire writes pull request descriptions for you. Keep your team in sync with a clear description and changelog. With an agentic workflow, Squire has a team reviewing your PR with the full context of your codebase. Able to catch many issues like systemic breaking changes, security concerns, and even small spelling mistakes. We improve code quality and get your PR into production. Squire is a context-aware agent who works with you to write pull request descriptions, review PRs, and learn how you like your code reviewed. Squire learns how your team reviews code and fits your style with explicit configuration and learning from your team's interactions. Map and synchronize ownership and responsibility across your entire engineering stack. Maintain compliance by applying and maintaining rules on your engineering components.Starting Price: $20 per month -
21
PullRequest
HackerOne
Get on-demand code reviews from vetted, expert engineers enhanced by AI. Add senior engineers to your team every time you open a pull request. Ship better, more secure code faster with AI-assisted code reviews. Whether you're a development team of 5 or 5,000, PullRequest will supercharge your existing code review process and adapt to your needs. Our reviewers will help your team catch security vulnerabilities, find hidden bugs, and fix performance issues before they reach production. All of this is done within your existing tools. Expert human reviewers enhanced by an AI analysis to pinpoint high-risk security hotspots. Intelligent static analysis combining open source tools and proprietary AI shown to reviewers for deeper insights. Save your senior staff some time. Make meaningful progress resolving issues and improving code while other members of your team are busy building.Starting Price: $129 per month -
22
Metabob
Metabob
Metabob detects, explains, and fixes coding problems created by humans and AI. Metabob utilizes proprietary graph neural networks to detect problems and LLMs to explain and resolve them, combining the best of both worlds. GNN detects and classifies problematic code with contextual understanding. Problematic code along with enriched context is stored in Metabob's backend. The stored information from the backend is passed to an integrated LLM. The LLM generates a context-sensitive problem explanation and resolution. Metabob's AI is trained on millions of bug fixes performed by experienced developers. The ability to understand code logic and context, enables Metabob to detect complex problems that span across codebases and automatically generate fixes for them. Metabob's AI code review detects hundreds of logical problems, varying from race conditions to unhandled edge cases. Such problems cannot be detected with traditional static analysis tools.Starting Price: $20 per month -
23
Graphite
Graphite
Streamline Git commands and seamlessly stack pull requests from your terminal. Create and edit stacked PRs visually without leaving your IDE. Stay on top of every PR and review request in one unified inbox. Get immediate, actionable feedback on every pull request with Graphite's codebase-aware AI. Eliminate merge conflicts and keep your main branch green, whether you're a team of 10 or 10,000. Accelerate your team with powerful, real-time developer metrics. A faster, more intuitive Git interface, designed to make stacking effortless. Run gt create again to stack another branch on top of your previous changes without waiting for them to merge into the main. Automatically sync your local stack with remote changes, and clean up stale branches with gt sync. Update changes across your stack with gt modify. Graphite handles all of the recursive rebasing for you. Create or update PRs for every branch in your stack with gt submit.Starting Price: $99 per month -
24
Astronuts
Astronuts
Astronuts is an AI-powered code review platform designed to streamline the development process by automating code reviews and bug fixes. Developers can initiate code analysis with a simple command, receiving line-by-line smart comments and auto-fix suggestions. The platform offers features such as pull request summaries, code quality metrics, and change logs, all accessible through a user-friendly interface. Astronuts integrates seamlessly with GitHub, allowing teams to monitor pull request batch sizes and code health metrics, thereby reducing code review time and minimizing bugs. The platform also provides real-time chat for code-related queries, configurable behavior settings, and gateway rules to enforce code quality standards. With support for multiple programming languages and build systems, Astronuts caters to diverse development environments. The platform offers a free trial with $5 in credits, enabling teams to experience its benefits without initial costs.Starting Price: $8 per month -
25
Entelligence
Entelligence
Entelligence AI is an AI-powered engineering intelligence platform designed to streamline development workflows, enhance collaboration, and boost productivity across the software development lifecycle. It automates code reviews and pull request (PR) analysis with intelligent agents, cutting review time, surfacing bugs early, and boosting engineering productivity. Entelligence's Deep Review feature detects complex issues across files with deep context analysis of the entire codebase, providing PR summaries, smart comments, and quick fixes. Entelligence AI also offers performance insights, tracking team performance, sprint progress, and code quality, monitoring output per engineer, review depth, and sprint assessments in real-time. Its self-updating documentation feature turns code into clear docs and refreshes them on every commit.Starting Price: $29 per month -
26
Codacy
Codacy
Codacy is an automated code review tool that helps identify issues through static code analysis, allowing engineering teams to save time in code reviews and tackle technical debt. Codacy integrates seamlessly into existing workflows on your Git provider, and also with Slack, JIRA, or using Webhooks. Users receive notifications on security issues, code coverage, code duplication, and code complexity in every commit and pull request along with advanced code metrics on the health of a project and team performance. The Codacy CLI enables running Codacy code analysis locally, so teams can see Codacy results without having to check their Git provider or the Codacy app. Codacy supports more than 30 coding languages and is available in free open-source, and enterprise versions (cloud and self-hosted). For more see https://www.codacy.com/Starting Price: $15.00/month/user -
27
SmartBear Collaborator
SmartBear
Customize and Scale Your Peer Review Process for Code and Documents With Collaborator. Collaborator is the premier peer code & document review tool for development teams that take software quality seriously. Comprehensive Review Capabilities – Review source code, design docs, requirements, user stories, test plans, and documentation in one tool. Proof of Review – Ensure proof with electronic signatures & detailed reports to meet regulatory compliance standards. Support for 11 SCMs, including Git, SVN, TFS, Perforce, CVS, ClearCase, RTC, & more. Integrations with GitHub, GitLab, Bitbucket, Jira, Eclipse, Visual Studio, & more. Real-Time Updates. Threaded chat shows conversations as well as highlights changes & defects for visibility during each code review. Each team and project has unique requirements. Why would the same type of review work for everything? With custom review templates and checklists in Collaborator, it is easy to build peer review frameworks. -
28
CodeFactor
CodeFactor
Get a glance at code quality for the whole project, recent commits, and the most problematic files. CodeFactor will track new and fixed issues for every commit and pull request. CodeFactor will try to show the most critical issues first based on issue code size, file change frequency, and file size so you can start fixing only what's important. Create and track issues or comments directly from code files or project issues pages. CodeFactor will update the status for GitHub or Bitbucket pull requests as well. CodeFactor allows you to toggle inspection for any repository branch on the fly. CodeFactor integrates with Slack to send code quality notifications for every commit in a branch or pull request. To install, go to the repository settings page. Straightforward pricing based on private repository number. Plain and simple with no hidden fees. Seamless integration into your workflow.Starting Price: $19 per month -
29
Ellipsis
Ellipsis
Ellipsis is capable of reviewing, writing, and answering questions about your source code. Ellipsis uses LLM's to leave thoughtful code reviews, summaries, and easy-to-accept suggestions. We'll even consider your style guide when reviewing. Automate bug fixes and simple changes by opening an issue and assigning it to Ellipsis. Ship faster by having Ellipsis address comments left on pull requests. We'll interpret the comments and write tested, working code. Ellipsis doesn't store or train on your source code. It will never commit to your default branch, and will only add new commits or open new pull requests when you explicitly request it. Create multi-file code changes from natural language requirements, such as bug reports or feature requests. Answer questions about a codebase during onboarding, development, and bug triaging. -
30
Codeball AI
Codeball AI
Codeball is a code review AI that scores pull requests on a grade from 0 (needs careful review) to 1. Use Codeball to add labels to help you focus, auto-approve PRs, and more. The Codeball action is easy to use (sane defaults) and is highly customizable to fit your workflow when needed. Label PRs when you should review them with caution. Stay sharp, don't let the bugs pass through. Identifies and approves or labels safe PRs. Save time by fast-tracking PRs that are easy to review. Fully customizable and programmable with GitHub Actions. Codeball Actions are built on multiple smaller building blocks, that are heavily configurable through GitHub Actions. Codeball uses a deep learning model that has been trained on over 1 million Pull Requests. For each contribution, it considers hundreds of inputs. Codeball is optimized for precision, which means it only approves contributions that it's really confident in.Starting Price: Free