- Home
- Code Refactoring Tools
- Sourcery
Sourcery
What it is
Sourcery provides automated AI code reviews and security scanning for software teams. It reviews pull requests within minutes, posting a summary, comments, and suggested fixes that users can apply and commit to a pull request. Security checks cover committed secrets, static-analysis vulnerabilities, infrastructure-as-code misconfigurations, dependencies, and licenses. Sourcery supports GitHub, GitLab, GitHub Enterprise Server, and self-hosted GitLab, with extensions for VS Code, Cursor, Windsurf, and JetBrains editors. Open Source scans security issues on every pull request; Open Source and Pro scan twice a week, while Team includes nightly scans. The Open Source plan is free. Pro is $12 a month billed annually, or $15 per developer per month billed monthly. Team is $24 a month billed annually, or $30 per developer per month billed monthly. Installing Sourcery starts a 14-day Team-feature trial for the organization without a credit card. Sourcery says it does not retain customer code after a review or use code to train models. Team supports bringing your own LLM, and self-hosted Sourcery is available through sales.
For and against
For
- Reviews pull requests within minutes
- Suggested fixes can be committed to pull requests
- Security checks cover dependencies and licenses
- Supports GitHub and GitLab variants
- 14-day Team-feature trial
Against
- Pro costs $12 a month billed annually
- Team costs $24 a month billed annually
- Self-hosted availability is through sales
The verdict
Sourcery combines pull-request review with security scanning across supported code hosts and editors. Scan cadence and features vary by plan, while self-hosting is listed for Enterprise through sales.
Who it suits
Sourcery may suit solo developers and teams using supported Git hosts and IDEs who want pull-request reviews and security checks. Its offerings include a free option, paid plans, and self-hosted availability through sales.
Plans and prices
Open Source
Public repositories on GitHub or GitLab · AI reviews · PR summaries and diagrams · One-click fixes
Read 15 Oct 2026 · sourcery.ai
Pro
Private repositories · Higher review limits · Jira integration
Read 15 Oct 2026 · sourcery.ai
Team
Everything in Pro · Nightly scans of 50 repositories · Issues dashboard · On-demand scans
Read 15 Oct 2026 · sourcery.ai
Enterprise
Self-hosting · GitHub Enterprise Server · SSO · Bring your own LLM keys
Read 15 Oct 2026 · sourcery.ai
On the record
- API availability
- The public REST API is a Team-plan API for listing, reading, counting, and bulk-updating security findings and groups.docs.sourcery.ai · read 28 Sep 2026
- API scope
- The only public API is a Team-plan REST API for listing, reading, counting, and bulk-updating security findings; the GraphQL endpoint is internal.docs.sourcery.ai · read 15 Oct 2026
- Auto approval
- Low-risk pull requests with no blocking findings can be automatically approved.sourcery.ai · read 15 Oct 2026
- Billing model
- Paid seats are assigned to specific developers, and organizations can cancel or downgrade while retaining features through the paid period.sourcery.ai · read 15 Oct 2026
- Bring-your-own LLM
- Enterprise customers can use their own LLM keys, including controlled Anthropic or Azure OpenAI deployments.docs.sourcery.ai · read 15 Oct 2026
- Bug detection
- Its reviews look for logic errors, missed edge cases, and security problems and explain remediation.sourcery.ai · read 15 Oct 2026
- Code retention
- Sourcery says it keeps no copy of code after a review and does not use code to train models.sourcery.ai · read 15 Oct 2026
- Code review actions
- Suggested fixes can be applied as changes that users commit directly to a pull request.sourcery.ai · read 28 Sep 2026
- Company size fit
- solo, small, mid market, enterprisesourcery.ai · read 22 Sep 2026
- Compliance
- The company states that Sourcery is SOC 2 Type II compliant.sourcery.ai · read 15 Oct 2026
- Custom rules
- Users can define project-wide review rules in a .sourcery.yaml file and use public rulesets such as the Google Python Style Guide.marketplace.visualstudio.com · read 15 Oct 2026
- Data retention
- Sourcery says it does not retain customer code after a review and does not use code to train models.docs.sourcery.ai · read 28 Sep 2026
- Deployment
- cloud, self hosted, desktopsourcery.ai · read 22 Sep 2026
- Deployment choices
- Team supports bring-your-own LLM, and self-hosted Sourcery is available through sales.docs.sourcery.ai · read 28 Sep 2026
- Extension capabilities
- The VS Code extension provides AI chat, on-demand reviews, GitHub and GitLab reviews, refactoring suggestions, and continuous quality feedback.marketplace.visualstudio.com · read 15 Oct 2026
- Extension license
- The VS Code listing says the source code is MIT-licensed but packaged binaries are not covered by that license.marketplace.visualstudio.com · read 15 Oct 2026
- Extension recipes
- The extension can generate Mermaid diagrams, unit tests, docstrings, and code explanations.marketplace.visualstudio.com · read 15 Oct 2026
- Founders
- Runa Capital identifies Brendan Maginnis, Nicholas Thapen, and Timothy Gilboy as founders.runacap.com · read 15 Oct 2026
