Code Review by Holycode
Code Review by Holycode is a web and self-hosted platform that analyzes codebases for performance, security, and other software health issues.
What Code Review by Holycode is
Code Review by Holycode is a web and self-hosted platform that analyzes codebases for performance, security, and other software health issues. Nine AI agents trace execution paths from API entry points through dependencies to examine code logic. Reports organize results into scored categories, severity-ranked findings, and file-level references, with Markdown and PDF downloads. Security analysis covers OWASP Top 10 issues, injection vectors, and authentication flaws, and includes remediation steps. Users can connect GitHub or GitLab, including self-hosted instances, or upload a ZIP archive. The service can review every new pull request before merge and schedule weekly, bi-weekly, or monthly analyses. Selected findings can be verified and fixed on a separate branch before an AI-generated pull request. The plans page says most mainstream technology stacks are covered. Code is stored in Germany, portions go to third-party AI providers, and code is deleted after 30 days.
Good
- Free plan includes one full repository analysis
- Reports provide severity and file-level references
- Reviews pull requests before merge
- Supports GitHub, GitLab, and ZIP uploads
- Automated fixes use a separate branch
Watch out
- Automated reports may miss or misidentify defects
- Customer code portions go to third-party AI providers
- Code is retained for 30 days
Who it suits
It suits development teams wanting automated code and security reviews across common technology stacks. It also fits teams using GitHub, GitLab, self-hosted repositories, or ZIP uploads.
Verdict
Code Review by Holycode combines recurring analysis, pull-request review, and security findings in one service. Its free plan allows an initial analysis, while paid tiers add recurring credits and reviews.
Plans and prices
From Code Review by Holycode's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | 10 credits · one full analysis on one repository · no credit card needed |
| Starter | $80 a month | 16 credits per month · 1 analysis + 3 PR reviews · $80/mo |
| Growth | $230 a month | 70 credits per month · 7 analyses or 35 PR reviews · $230/mo |
| Scale | $565 a month | 200 credits per month · 20 analyses or 100 PR reviews · $565/mo |
| Enterprise | Priced on request | Negotiated volume · unlimited repos · self-hosted GitLab · SSO · custom SLA · Holycode engineers for remediation · Custom |
The facts
Each one read from Code Review by Holycode's own pages, with the date it was checked.
What it does
- Analysis
- Nine AI agents trace execution paths from API entry points through dependencies to examine code logic.checked 11 Oct 2026
- Automated fixes
- Users can select findings for an AI agent to verify and fix on a separate branch before it opens a pull request.checked 11 Oct 2026
- Continuous review
- The service can automatically review every new pull request before merge.checked 11 Oct 2026
- Data location
- The terms state that customer code is stored in Germany and portions are sent to third-party AI providers for report generation.checked 11 Oct 2026
- Integrations and input
- Users can link GitHub, GitLab, and their self-hosted instances, or upload a ZIP archive.checked 11 Oct 2026
- Limits
- The terms describe reports as advisory and say automated analysis may miss defects or report issues that are not real.checked 11 Oct 2026
- Purpose
- The platform analyzes codebases for performance, security, and other software health issues and produces findings with proposed fixes.checked 11 Oct 2026
- Reports
- Reports include scored categories, severity-ranked findings, and file-level references, and can be downloaded as Markdown or PDF.checked 11 Oct 2026
- Retention and training
- The terms say customer code is retained for 30 days after analysis, then deleted, and is not used to train AI models.checked 11 Oct 2026
- Scheduled reviews
- Recurring analyses can be scheduled weekly, bi-weekly, or monthly.checked 11 Oct 2026
- Security coverage
- The product surfaces OWASP Top 10 issues, injection vectors, and authentication flaws with remediation steps.checked 11 Oct 2026
- Stack coverage
- The plans page says the service covers most mainstream technology stacks.checked 11 Oct 2026
- Support
- The maker lists [email protected] and a phone number for contact.checked 11 Oct 2026
The company
- Company location
- Holycode AG is registered in Switzerland at Im Gerstenacker 8, 4102 Binningen.checked 11 Oct 2026
- Headquarters
- Binningen, Switzerlandchecked 28 Sep 2026
Alternatives to Code Review by Holycode
- 1
RhodeCode Enterprise
Free planOpen sourceWebAPILinuxSelf-hosted8.3From $75 a year - 2
Cubic
Free planWebAPILinuxmacOS7.9From $30 a month - 3
Sourcery
Free planWebAPIExtensionLinux7.9From $12 a month - 4
Ellipsis
Free planWebAPILinuxmacOS7.8Free plan - 5
Gerrit Code Review
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 6
Greptile
Free planWebAPIExtensionLinux7.7From $30 a month