- SI Score
- 80/100
- Pricing
- Not confirmed
- Free plan
- Not confirmed
- Sign-up required
- Not confirmed
Ask SI about Sourcery
Answers use saved listing facts and recorded sources.Homepage screenshot
What it does
Sourcery reviews pull requests on GitHub and GitLab. It posts a summary, review comments and suggested fixes, and flags logic errors, missed edge cases and security issues. It also scans repositories for exposed secrets, vulnerable code, misconfigured infrastructure and dependencies with known CVEs. Suggested fixes can be committed in one click, and low-risk pull requests can be auto-approved. It runs on GitHub, GitLab, GitHub Enterprise Server and self-hosted GitLab, and is available as an IDE extension for VS Code, Cursor, Windsurf and JetBrains.
Sourcery keeps no copy of code after a review and does not train AI on it. It is SOC 2 Type II compliant. Paid plans start with a 14-day free trial, and open source is free. An API is available for pulling security findings into other tools and pipelines. Enterprise can run Sourcery inside your own infrastructure with SSO and your own LLM keys.