- Home
- Static Analysis Tools
- DeepSource
DeepSource
What it is
DeepSource is an AI code review platform that checks pull requests for bugs, anti-patterns, and security vulnerabilities using static analysis alongside an AI review agent. The product page says reviews draw on more than 5,000 deterministic rules, and Autofix can supply verified, pre-generated patches for many findings. Additional checks cover exposed secrets, open-source dependency vulnerabilities, and Terraform and CloudFormation infrastructure code. Teams can track code coverage and set thresholds for tested code. DeepSource supports GitHub, GitLab, Bitbucket, and Azure DevOps, with other listed integrations including Jira, Okta, OneLogin, Slack, and Vanta. It is available through web, API, Linux, macOS, Windows, and self-hosted deployment. The free Open Source tier includes unlimited public repositories and team members, plus monthly allowances for reviews and formatting runs. Team costs $24/user/mo billed yearly; a 14-day trial is listed. Enterprise uses custom pricing and offers cloud or self-hosted deployment, among other capabilities.
For and against
For
- Reviews pull requests with over 5,000 deterministic rules
- Autofix offers verified, pre-generated patches
- Scans secrets and dependency vulnerabilities
- Free tier includes unlimited public repositories
Against
- Team plan is $24/user/mo billed yearly
- GraphQL API limit is 5,000 requests per hour per user
The verdict
DeepSource combines pull-request review with code, dependency, and infrastructure security checks. Its free tier has monthly usage allowances, while paid Team pricing is billed annually and Enterprise pricing is custom.
Who it suits
It suits software teams looking to automate pull-request review and scan code or infrastructure for security issues. The free tier may suit open-source teams, while Enterprise offers self-hosted deployment options.
Plans and prices
Individual
public and private repositories · unlimited static-analysis and formatter runs · AI features metered
Read 14 Oct 2026 · docs.deepsource.com
Open Source
public repositories only · 1,000 static-analysis runs/month · 1,000 formatter runs/month · AI features metered
Read 14 Oct 2026 · docs.deepsource.com
SCA add-on
Team and Enterprise only · three targets included in those plans
Read 14 Oct 2026 · docs.deepsource.com
AI Review Standard
default AI Review tier
Read 14 Oct 2026 · deepsource.com
AI Review Advanced
multi-pass analysis and extended reasoning; listed as coming soon
Read 14 Oct 2026 · deepsource.com
Team
public and private repositories · unlimited analysis and formatter runs · $10 monthly or $100 annual AI credits per contributor · three SCA targets included
Read 14 Oct 2026 · docs.deepsource.com
Enterprise
Team features · BYOK AI · SSO/SCIM · self-hosted deployment
Read 14 Oct 2026 · docs.deepsource.com
On the record
- API
- DeepSource provides a GraphQL API with a documented limit of 5,000 requests per hour per user.docs.deepsource.com · read 8 Oct 2026
- Autofix
- AI-powered Autofix supplies automated remediation for many detected code issues.docs.deepsource.com · read 14 Oct 2026
- CLI
- The command-line client retrieves issues, metrics, vulnerabilities and reviews, submits coverage artifacts, and supports JSON output for automation.docs.deepsource.com · read 14 Oct 2026
- CLI availability
- DeepSource CLI binaries are documented for Linux amd64 and arm64, macOS amd64 and arm64, and Windows amd64.docs.deepsource.com · read 8 Oct 2026
- CLI license
- DeepSource's public CLI repository is licensed under the BSD 2-Clause Simplified License.github.com · read 14 Oct 2026
- Company profile
- LinkedIn lists DeepSource as a privately held software-development company headquartered in San Francisco, with 11–50 employees and a 2018 founding year.linkedin.com · read 14 Oct 2026
- Company scale
- Y Combinator's profile says DeepSource has a 12-person team and serves more than 7,000 teams.ycombinator.com · read 14 Oct 2026
- Compliance reporting
- Reporting includes OWASP Top 10, CWE/SANS Top 25 and MISRA C reports.docs.deepsource.com · read 14 Oct 2026
- Coverage
- Code Coverage tracks line, branch and composite coverage on pull requests and can enforce merge thresholds.docs.deepsource.com · read 14 Oct 2026
- Dependency security
- OSS Vulnerability Scanning performs dependency analysis with reachability information and one-click remediation.docs.deepsource.com · read 14 Oct 2026
- Deployment
- Enterprise customers can choose self-hosted deployment, and the pricing page also lists airgapped deployment as an Enterprise capability.deepsource.com · read 8 Oct 2026
- Documentation and support
- Documentation includes product guides, API reference, CLI installation and usage, self-hosting, billing and troubleshooting FAQs.docs.deepsource.com · read 14 Oct 2026
- Free tier limits
- The Open Source tier lists unlimited public repositories and members, with 1,000 pull request reviews and 1,000 automated formatting runs per month.deepsource.com · read 8 Oct 2026
- Funding
- Wellfound reports $7.7 million raised in one round, with the latest funding dated October 2021.wellfound.com · read 14 Oct 2026
- GraphQL API
- DeepSource exposes a GraphQL API at https://api.deepsource.com/graphql/ for cloud accounts and a corresponding hostname-based endpoint for on-premise deployments.docs.deepsource.com · read 14 Oct 2026
- Infrastructure-as-code review
- Infrastructure-as-Code Review checks Dockerfiles, Terraform plans and Ansible playbooks for security and best-practice problems.docs.deepsource.com · read 14 Oct 2026
- Integrations
- The directory lists integrations for Azure DevOps Services, Bitbucket, GitHub, GitLab, Jira, Okta, OneLogin, Slack, and Vanta.deepsource.com · read 8 Oct 2026
- License compliance
- License Compliance evaluates full transitive dependency trees against team policies using SPDX identifiers.docs.deepsource.com · read 14 Oct 2026
