Sourcery.AI

Sourcery develops an AI-based automated code reviewer that inspects pull requests and merge requests and posts a change summary, inline review comments and suggested fixes. The system is designed to catch logic errors, missed edge cases and security issues in changed code, explain each finding and offer a committable suggested change; low-risk pull requests with no blocking findings can be auto-approved so they merge once CI passes. Alongside per-PR review, Sourcery runs scheduled security scans over whole repositories covering exposed secrets, static application security testing, infrastructure-as-code misconfiguration, dependencies with known CVEs and licenses, with findings surfaced in dashboards by severity and available through an API for use in other tools and pipelines.

The product runs on GitHub, GitLab.com, self-managed GitLab and GitHub Enterprise Server, and also operates inside editors: Sourcery offers IDE integrations for VS Code, Cursor, Windsurf and JetBrains products, with earlier documented plugins for PyCharm, Sublime, Vim and Emacs plus a CLI tool. In its IDE form, Sourcery has been positioned as an automated pair programmer that helps explain existing code, add unit tests and docstrings, and refactor code for readability or performance. The company states it reviews every programming language GitHub recognizes, including Python, TypeScript, Java, Go and Rust.

Technically, Sourcery combines third-party large language models from OpenAI and Anthropic, which receive sections of code (typically the PR diff) for contextual tasks such as summaries and high-level feedback, with a rules-based static analysis engine for identifying specific code quality issues and vulnerabilities. On data handling, the company states it uses customer code only for the review, retains no copy afterwards, does not use customer code to train AI models, and is SOC 2 Type II compliant; an earlier GitHub README described a 30-day maximum retention by the company or third parties.

Founding story

Founded in 2018 by Brendan Maginnis, Nick (Nicholas) Thapen and Tim (Timothy) Gilboy, with the stated aim of reducing the time developers lose to poor quality code by automatically reviewing and refactoring code in real time.

Business model

Sourcery is sold as a per-seat SaaS subscription with a free tier for open source and public repositories. Paid plans are Pro at $12 per seat per month and Team at $24 per seat per month when billed annually, each starting with a 14-day organization-wide free trial that requires no card up front. An Enterprise plan adds self-hosting inside the customer's own infrastructure, SSO, customer-supplied LLM keys, a dedicated customer success manager, invoice billing and GitHub Enterprise Server support.

Recurring per-seat subscription revenue across Pro ($12/seat/month) and Team ($24/seat/month) annual plans, plus an Enterprise tier with invoice billing; open source and public repository use is free.

Traction

At the time of its 2022 seed announcement, Sourcery said its tools improved code for more than 7,000 developers per month and were used by teams at companies including Sky, Microsoft, Amazon and LinkedIn. Its public GitHub repository has about 1.9k stars and 100 forks, and the company's site lists the U.S. Department of Justice as a user and shows fixes merged into large open-source projects.

Latest developments

The current product covers pull request review with summaries, inline comments and suggested fixes, auto-approval of low-risk PRs, and scheduled repository-wide security scanning for secrets, SAST, infrastructure-as-code, dependency CVEs and licenses. Platform support spans GitHub, GitLab.com, self-managed GitLab and GitHub Enterprise Server, with IDE support for VS Code, Cursor, Windsurf and JetBrains, a security findings API, Jira integration, and SOC 2 Type II compliance.