Code review agents
agentic code and PR review
The-PR-Agent/pr-agent The-PR-Agent/pr-agent is the clear leader by adoption: a community-maintained, self‑hostable, and highly configurable general-purpose PR reviewer with broad model support. If you need one tool to start with for most code-review use cases, start there; pick other projects only when you need specialized security scanning, interactive annotation, strict local-only hosting, or evidence-first triage.
Which one matches your setup?
Answer any of the questions — the shortlist updates as you go. Recommendations come from the capability passports below, nothing else.
Comparison matrix
Axes are extracted from each project's docs by our review pipeline; the maturity score is computed from stars, growth and commit activity — not an opinion. Click a column to sort.
| Runs in | Models | Context | Cost to run | |||||
|---|---|---|---|---|---|---|---|---|
⭐ 13.5k +95/7d | GitHub ActionCLIWeb appPR bot | BYOKOpenAIAnthropicFixed provider | PR + related files | Configurable prompts | ●●●●● | Self-hostable | ●●●●● | Uses your API key (OpenAI/other providers) |
⭐ 9.5k +144/7d | CLIIDECoding-agent pluginWeb app | OpenAIAnthropicGeminiFixed provider | Diff-focused | No noise controls | ●●●●● | Self-hostable | ●●●●● | Free, self-hosted; external agent API keys or accounts may be required |
⭐ 2.5k +55/7d | CLICoding-agent pluginCIPR bot | BYOKGemini | Whole-repo analysis | Dedupe & filters | ●●●●● | Self-hostable | ●●●●● | Your API key; model/compute costs apply. |
⭐ 2.1k +199/7d | PR botGitHub ActionCICLICoding-agent pluginWeb app | BYOKOpenAIGemini | Diff + related files | Configurable filters | ●●●●● | Cloud API key | ●●●●● | Free for open source; otherwise your API key |
⭐ 8.2k +78/7d | CLICIPR bot | BYOKOpenAIAnthropic | Whole-repo analysis | Revalidate + matchers | ●●●●● | Cloud APIs with key | ●●●●● | Uses your model API keys; full-repo scans can be costly for large repos |
⭐ 2.3k +36/7d | CLIWeb app | BYOKOpenAIAnthropic | Whole-repo analysis | Deduplication & ranking | ●●●●● | Self-hosted (cloud models) | ●●●●● | Requires model API key (your provider's billing applies). |
⭐ 2.5k +3/7d | PR botGitHub ActionCICLIWeb app | BYOKOpenAIAnthropicFixed provider | Repo exploration | Configurable filters | ●●●●● | API-key cloud | ●●●●● | Your API key, per-PR |
⭐ 1.5k +30/7d | PR botGitHub ActionCICLIWeb appCoding-agent plugin | BYOKOpenAIAnthropicGeminiOllama / local | Repo + related files | Severity & tracking | ●●●●● | Fully local | ●●●●● | You pay your model provider (BYOK); Kodus Cloud has paid plans / self-hosting option |
⭐ 774 +138/7d | PR botGitHub ActionCICLIIDECoding-agent plugin | AnthropicFixed provider | Diff + related files | Severity gating & filters | ●●●●● | Self-hostable | ●●●●● | Uses your Claude/Codex login; GitHub Action needs an Anthropic API key. |
⭐ 4.5k +2/7d | PR botGitHub ActionCLICI | BYOK | Diff/patch only | Basic filters/config | ●●●●● | Self-hostable | ●●●●● | Your API key, per-PR |
⭐ 1.3k +10/7d | CLICoding-agent plugin | BYOK | Diff only | Rule-based gates | ●●●●● | Cloud API (BYOK) | ●●●●● | Your model API key / agent usage fees |
⭐ 449 +3/7d | PR botGitHub ActionCICLI | BYOKOpenAIAnthropicGeminiOllama / local | Diff + related files | Severity & filters | ●●●●● | Can run fully local | ●●●●● | Uses your LLM API key (your provider's billing applies) |
Capability profiles
Six axes, 0–5 each. The shape tells you the strategy: a wide hexagon is a generalist, a spike is a specialist. Showing the 8 most established — the rest are in the full catalog.
An open-source, community-maintained, self‑hostable PR reviewer that compresses and adapts PR context and exposes JSON-configurable prompts for team customization.
A local, browser-based review surface that plugs directly into many agent hooks so you can annotate plans, diffs, and HTML and send structured feedback back to the agent.
A modular, stack-agnostic suite of security review skills that lets coding agents find, reproduce, dedupe, and patch vulnerabilities with sandboxed execution and a sequential pipeline.
Generates animated architecture and data-flow diagrams that visualize a PR’s blast radius and step-by-step walkthroughs directly inside the pull request.
Agent-powered whole-repo vulnerability scanner that scales across workers, resumes interrupted runs, and lets you grow project-specific matchers.
Orchestrates focused AI agent workflows in disposable job containers to find, validate and de-duplicate real vulnerabilities with PoC generation and ranking.
Provides an extendable agent loop built on flue/pi with Model Context Protocol (MCP) support to explore the repo using real developer tools and integrate external tools.
Model-agnostic, BYOK AI code review with plain-language Kody Rules and self-hosting to avoid LLM cost markups and maintain full control over data.
All repositories (20)
🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
Annotate and review coding agent plans and code diffs visually, share with your team, send feedback to agents…
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilit…
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security…
Review code 100X faster. Lens draws every PR as animated architecture and data-flow walkthroughs, inside the p…
Open source, self-hosted AI code review. Bring your own LLM.
Guard skills for coding agents, quality gates that catch AI-generated failure modes in code, tests, and docs
AI Code Reviewer: Enhance your GitHub workflow with AI-powered code review! Get intelligent feedback and sugge…
Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer,…
An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as sec…
codexqa: 11 local-first Agent Skills for Cursor, Claude Code, Codex & OpenClaw — change impact analysis, AI co…
Context-aware AI reviewer for Pull Requests. Instant summary, line-by-line comments, title generation and more
Review behavior, not just diffs. Jev prioritizes human attention; OpenAI explains the changes. Local CLI + age…
Security testing that runs inside the coding agent you already use. Source-available, not open source.
AI Coding Agent Orchestrator 2026: Pro-Level Strategy & Review Framework
Vetix — Automated scanning, identification, and assessment of SKILL security risks, based on Golang.
AI code review with DeepSeek: headless PR review automation that verifies PR descriptions claim-by-claim again…
Hosted alternatives
If running your own reviewer is more ops than you want, these managed services cover the same job.
Managed PR review bot from the team behind the once-popular open-source ai-pr-reviewer, which was retired in its favor.
Try CodeRabbit →Hosted continuation of the pr-agent lineage with org-wide config, SSO and support.
Try Qodo Merge →Review with full-codebase context as the headline feature; strongest when your bugs are cross-file.
Try Greptile →