What does Codity review on each pull request?

Codity posts a plain-language summary of what changed, checks implementation against linked requirements, ranks findings by severity, and scores merge readiness across review, security and code quality.

Does Codity replace human review?

No, it accelerates human review. Codity catches issues early and surfaces context so reviewers spend time on judgment calls, not hunting for regressions.

Can Codity navigate and explain my codebase?

Yes. Ask questions about architecture, trace dependencies across services, and find where functionality lives. Useful for onboarding and large monorepos.

Can Codity fix what it finds?

Yes. Reply @codity fix on the pull request and Codity commits fixes for the open findings to the branch, or opens them as a separate pull request with @codity fix stacked pr. Single suggestions can also be applied from the comment.

Do you support self-managed GitLab?

Yes. Connect a GitLab CE or EE instance with OAuth or an access token, with custom CA certificates supported. The instance needs to be reachable from the internet.

Your code is never used to train models. Codity runs with least-privilege access, encrypts data in transit and at rest, and offers on-prem deployment for strict environments.

What security scans are included?

Every pull request is scanned for leaked secrets and code-level risks such as injection (SAST), vulnerable dependencies across 12 package ecosystems, and license issues. Salesforce projects also get Apex and metadata checks, and an organization-wide SBOM tracks every dependency across your repositories.

Do you support compliance frameworks?

Codity aligns with common enterprise controls including SOC 2 Type II, VAPT, HIPAA and GDPR practices. See our Security page for the latest attestations.

Is there a Codity CLI?

Yes. Use the CLI to run reviews, security scans, and codebase questions from your terminal with the same repository context as the PR bot.

Can I use Codity in CI?

Codity integrates with your existing Git and CI workflows so quality and security gates can run on every pull request without leaving your pipeline.

Does Codity offer a free plan?

No free tier. Codity has two self-serve plans, Basic and Premium, billed per seat each year, and Codity One for teams that want the Codity One app and its connectors set up with them. Book a demo to see which fits your team.

What is the difference between Basic and Premium?

Basic covers pull request review, security, dependency, license and code quality scans, the CLI, the Claude Code and Cursor plugins, and the public API. Premium adds requirement context from Jira, Linear, Confluence and other trackers, policy checks and merge gates, autofix, the Slack app, an organization-wide SBOM, full analytics and higher pooled limits. See the Pricing page for the full breakdown.

How does pricing work?

Basic is $40 and Premium $60 per seat per month, billed yearly. Each seat adds to shared monthly pools of review and scan jobs, chat messages and automation actions, and usage past a pool is billed per unit. Codity One is priced on team size and connectors. Visit /pricing or email contact@codity.ai.

Already using Codity?Log in

Radically different codebase intelligence

Where AI-generated code meets production-grade quality to review, secure, monitor or metricise every pull request.

Book a demo

Code + Quality = Codity

What happens between opening a pull request and merging it.

0:000:00

See it run on your codebase

With AI, code quality has been a headache. With Codity, it’s a head-start.

Every pull request is reviewed using complete codebase context, not just the files that changed. Codity understands your repositories, linked tickets, and service dependencies to catch functional issues, prioritize findings, and provide actionable feedback directly on the pull request.
Catch security issues before they reach production. Scan every pull request for leaked secrets, vulnerable dependencies, injection risks, and insecure patterns, with findings surfaced directly where developers work.
Understand any codebase in seconds. Search across repositories, trace dependencies, follow execution flows, and instantly discover how services, APIs, and components connect.
Measure engineering performance with meaningful insights. Track review efficiency, merge velocity, deployment trends, DORA metrics, and identify bottlenecks across your engineering organization.
Stay ahead of production issues with continuous repository intelligence. Detect unusual code changes, quality regressions, and engineering trends before they become incidents.

langchain/langchain⌘K

langchain/schema.py

Comment on lines +225 to +226

225+class ValidationError(BaseModel):

226+ error_message: str

codity.aiBot10 hours ago

Functional

ValidationError is defined with field error_message, but every construction site in this PR passes text=..., so any parse failure crashes before fix() can run.

Suggested fix

Prompt for AI assistance

LikeDislikeCreate Issue

No more compromising on speed for quality

A unified platform that keeps quality ahead of every commit.

CLI

Run Codity from your terminal. Review pull requests, scan for security issues, search your codebase, and integrate seamlessly into local workflows or CI/CD pipelines.

Memory

Remembers your team's decisions. Tell Codity a finding is intentional, a false positive or an accepted risk, and it remembers that for future reviews in the repository, so the same comment doesn't come back on every pull request.

Custom Rules & Policies

Automate your engineering standards. Define repository or folder-specific rules, enforce coding policies, require tests, validate architectural decisions, and apply custom review workflows across every pull request.

Integrations

Connect with your existing developer stack. Connect GitHub, GitLab (cloud or self-managed), Azure DevOps and Bitbucket, pull requirements from Jira, Linear, ClickUp, Notion and Confluence, and work with Codity from Slack, Claude Code and Cursor.

Security Notifications

Know when a risk appears. Get alerts for leaked secrets, vulnerable dependencies and critical findings in Slack or Discord from scheduled scans of the branches you monitor, alongside the findings on each pull request.

Production Incident Response

Resolve incidents faster with AI-powered root cause analysis. Correlate code changes, deployments, logs, metrics, and traces to identify the root cause, generate detailed RCA reports, recommend fixes, and automatically create remediation pull requests when it's safe.

Security first design built for enterprise

SOC 2 Type II
VAPT
HIPAA
GDPR

From teams using Codity

Engineering teams, on camera and in their own words.

0:000:00

Customer film

Rohit Sharma

Engineering Manager, Amagi

0:000:00

Customer film

Vijay Venkatesh

VP, Myridius

Frequently asked questions

Codity connects to your Git provider, indexes your repositories with full context, and reviews every pull request automatically, summarizing changes, ranking findings by severity, and posting feedback inline as soon as a PR opens.

Codity supports all major languages and frameworks out of the box. The supported-language list lives in our documentation; we do not dump every language on the marketing site.

Linters check syntax rules in isolation. Codity reads your whole repository (architecture, conventions and history), so its findings reflect how your codebase actually works, not just generic rules.

Engineering teams of any size: startups shipping fast, platform teams guarding quality gates, and enterprises that need security scanning and org-wide visibility.

Radically different codebase intelligenceRadicallyDifferentCodebaseIntelligence

Code + Quality = Codity

With AI, code quality has been a headache. With Codity, it’s a head-start.With AIAI, code quality has been a headacheache.

Reviews

Security Scans

Code Navigation

Developer Analytics

Monitoring & Insights

No more compromising on speed for quality

CLI

Memory

Custom Rules & Policies

Integrations

Security Notifications

Production Incident Response

Security first design built for enterprise

Frequently asked questions

How does Codity work?

What programming languages do you support?

Why context-aware vs. a regular linter?

Who is Codity for?

Get In Touch

Radically different codebase intelligence

With AI, code quality has been a headache. With Codity, it’s a head-start.