Sourcery

Sourcery is AI code review software for GitHub and GitLab teams that comments on every pull request, adds security checks and is sold per developer.

Sourcery reads each pull request within minutes of it opening and flags logic errors, missed edge cases and security issues before a person reviews the change. Each comment explains the problem and how to fix it. Sourcery.AI Limited, an independent company based in the United Kingdom, builds and runs it. Its summaries serve changes written by teammates and by coding agents alike. Every review opens with a summary written into the pull request description, covering the change's purpose and risk. A reviewer's guide comment follows, mapping the change file by file and explaining how to verify it. Inline comments land on the lines in question, and a suggested fix can be committed with GitHub's Commit suggestion button. Review rules steer what it checks, scoped by path patterns and adjustable per repository. Security Scanning covers static analysis, secrets, infrastructure as code, dependencies and licenses, while Team analytics show cycle time by stage on a PR Lifecycle view. Sourcery suits engineering teams whose code lives on GitHub, GitLab, GitHub Enterprise Server or a self-hosted GitLab instance. Maintainers of public open source repositories are a core audience. Companies with strict security rules can keep every part of it inside their own infrastructure under an Enterprise agreement, with SSO and their own LLM keys. Teams buy it per developer seat. Most teams run it as the first reviewer on every change, so a human starts from a summary and a short list of flagged lines. Review rules turn a team's conventions into checks that apply to each pull request. Low-risk changes with no blocking findings are approved automatically and can merge as soon as CI passes. On GitHub, a blocking security comment fails the Sourcery review status check, which branch protection can require before merge. GitLab merge requests get the same summary, guide and inline comments without that check. Developers who want feedback in the editor can also run reviews inside VS Code or JetBrains IDEs.