- Home
- Code review software
- Code Review by Holycode
Code Review by Holycode
Binningen, Switzerland
What it is
Code Review by Holycode analyzes codebases for software health issues, including performance and security, and returns findings with proposed fixes. Nine AI agents trace execution paths from API entry points through dependencies to examine code logic. Reports organize results into scored categories, rank findings by severity, and include file-level references; they can be downloaded as Markdown or PDF. Security coverage includes OWASP Top 10 issues, injection vectors, and authentication flaws, with remediation steps. Teams can connect GitHub or GitLab, including self-hosted instances, or upload a ZIP archive. The service can review new pull requests before merge and run scheduled analyses weekly, bi-weekly, or monthly. Users can ask an AI agent to verify selected findings and make fixes on a separate branch before opening a pull request. A free plan costs nothing and includes 10 credits for one full repository analysis, with no credit card needed. Paid plans start at $80 a month. Customer code is stored in Germany, portions go to third-party AI providers, and code is deleted after 30 days; it is not used to train AI models.
For and against
For
- Nine AI agents trace execution through dependencies.
- Reports include severity, scores, and file references.
- Supports GitHub, GitLab, self-hosted instances, and ZIP uploads.
- Free plan includes one full repository analysis.
Against
- Free plan is limited to 10 credits.
- Customer code is retained for 30 days.
- Code portions are sent to third-party AI providers.
- Reports are advisory and may miss or misidentify issues.
The verdict
Code Review by Holycode combines code analysis, security findings, and pull-request review in one service. Consider the free plan for a single repository analysis, while keeping its advisory limits and code-handling terms in mind.
Who it suits
It suits teams seeking scheduled or pull-request code reviews, including those using GitHub, GitLab, or self-hosted instances. Its free plan offers a starting point for one repository analysis.
Plans and prices
Free
10 credits · one full analysis on one repository · no credit card needed
Read 11 Oct 2026 · codereview.holycode.com
Starter
16 credits per month · 1 analysis + 3 PR reviews
Read 11 Oct 2026 · codereview.holycode.com
Growth
70 credits per month · 7 analyses or 35 PR reviews
Read 11 Oct 2026 · codereview.holycode.com
Scale
200 credits per month · 20 analyses or 100 PR reviews
Read 11 Oct 2026 · codereview.holycode.com
Enterprise
Negotiated volume · unlimited repos · self-hosted GitLab · SSO
Read 11 Oct 2026 · codereview.holycode.com
On the record
- Analysis
- Nine AI agents trace execution paths from API entry points through dependencies to examine code logic.codereview.holycode.com · read 11 Oct 2026
- Automated fixes
- Users can select findings for an AI agent to verify and fix on a separate branch before it opens a pull request.codereview.holycode.com · read 11 Oct 2026
- Company location
- Holycode AG is registered in Switzerland at Im Gerstenacker 8, 4102 Binningen.codereview.holycode.com · read 11 Oct 2026
- Continuous review
- The service can automatically review every new pull request before merge.codereview.holycode.com · read 11 Oct 2026
- Data location
- The terms state that customer code is stored in Germany and portions are sent to third-party AI providers for report generation.codereview.holycode.com · read 11 Oct 2026
- Integrations and input
- Users can link GitHub, GitLab, and their self-hosted instances, or upload a ZIP archive.codereview.holycode.com · read 11 Oct 2026
- Limits
- The terms describe reports as advisory and say automated analysis may miss defects or report issues that are not real.codereview.holycode.com · read 11 Oct 2026
- Purpose
- The platform analyzes codebases for performance, security, and other software health issues and produces findings with proposed fixes.codereview.holycode.com · read 11 Oct 2026
- Reports
- Reports include scored categories, severity-ranked findings, and file-level references, and can be downloaded as Markdown or PDF.codereview.holycode.com · read 11 Oct 2026
- Retention and training
- The terms say customer code is retained for 30 days after analysis, then deleted, and is not used to train AI models.codereview.holycode.com · read 11 Oct 2026
- Scheduled reviews
- Recurring analyses can be scheduled weekly, bi-weekly, or monthly.codereview.holycode.com · read 11 Oct 2026
- Security coverage
- The product surfaces OWASP Top 10 issues, injection vectors, and authentication flaws with remediation steps.codereview.holycode.com · read 11 Oct 2026
- Stack coverage
- The plans page says the service covers most mainstream technology stacks.codereview.holycode.com · read 11 Oct 2026
- Support
- The maker lists [email protected] and a phone number for contact.codereview.holycode.com · read 11 Oct 2026
