Best Code Review Tools in New Zealand

Next-gen code review with AI fixes. Check code quality and resolve vulnerabilities early. Autofix them in your IDE or via PR. From vulnerability management to penetration testing, secure everything you build, host, and run with Aikido. Your software security HQ. Built for teams of any size, Aikido helps organizations ship secure software –trusted by Revolut, Deel, The Premier League, Tines, n8n, SoundCloud, and 50k more organizations. Aikido gets developers back to building.

Visual Expert is a static code analyzer for Oracle PL/SQL, SQL Server T-SQL, and PowerBuilder. Identify code dependencies to modify your code without breaking your application. Scan your code to improve the security, performance, and quality. Perform Impact analysis to Identify breaking changes. Automatically scan your code to detect and fix security vulnerabilities, bugs and maintenance Issues. Implement continuous code inspection Understand the inner workings of your code with call graphs, code diagrams, CRUD Matrix and Object Dependency Matrix (ODM). Automatically generate an HTML Source Code documentation. Explore your code exploration with hyperlinks Compare applications, databases or pieces of code. Improve maintainability. Clean up code. Comply with dev standards. Analyze and Improve DB code performance: Find slow objects and SQL queries, Optimize a slow object, a Chain of calls a slow SQL, Get a query Execution Plan. And much more.

SonarQube Server is a self-managed solution for continuous code quality inspection that helps development teams identify and fix bugs, vulnerabilities, and code smells in real-time. It provides automated static code analysis for a variety of programming languages, ensuring the highest quality and security standards are maintained throughout the development lifecycle. SonarQube Server integrates seamlessly with existing CI/CD pipelines, offering flexibility for on-premise or cloud-based deployment. With advanced reporting features, it helps teams manage technical debt, track improvements, and enforce coding standards. SonarQube Server is ideal for organizations seeking full control over their code quality and security without compromising on performance.

Ship high quality code. Review code, discuss changes, share knowledge, and identify defects across SVN, Git, Mercurial, CVS, and Perforce. Create formal, workflow-based, or quick code reviews and assign reviewers from across your team. Turn any code review into a threaded discussion and comment on specific source lines, files, or an entire changeset. Take action on what's important with unified views into your code activity for commits, reviews, and comments. Improve code quality with data on which parts of your codebase have not been sufficiently reviewed. Get a quick view of review status and who might be holding up reviews. Access a complete audit trail with all code review details, down to the history of a specific review. Customize your Jira Software workflow to stop if there are any open reviews. Upgrade your workflow with Jira Software, Bitbucket Server, Bamboo and hundreds of other developer tools.

CodeScene is a code analysis, visualization, and reporting tool. Cross reference contextual factors such as code quality, team dynamics, and delivery output to get actionable insights to effectively reduce technical debt and deliver better code quality. We enable software development teams to make confident, data-driven decisions that fuel performance and developer productivity. Supporting 28+ programming languages, CodeScene also offers an automated integration with GitHub, BitBucket, Azure DevOps or GitLab pull requests to incorporate the analysis results into existing delivery workflows. Automate your code reviews, get early warnings and recommendations about complex code before merging it to the main branch and set quality gates to trigger in case your code health declines.

Codacy is a comprehensive platform for code quality and security that helps development teams build secure, maintainable, and compliant software. It integrates across the entire development lifecycle, from IDE to production, providing real-time feedback and automated checks. Codacy analyzes code repositories, enforces quality standards, and detects vulnerabilities before deployment. With AI Guardrails, it also protects against risks introduced by AI-generated code. The platform centralizes rules and policies, ensuring consistency across teams and projects. Developers benefit from automated pull request checks, test coverage tracking, and actionable insights. Overall, Codacy enables faster development without compromising security or code quality.

DeepSource is an AI-powered code review platform designed to help development teams maintain high-quality, secure, and reliable code. The platform automates code reviews using a hybrid approach that combines static analysis with advanced AI agents. It integrates directly with development workflows through platforms like GitHub, GitLab, Bitbucket, and Azure DevOps. DeepSource analyzes pull requests in real time, identifying bugs, security vulnerabilities, code complexity issues, and maintainability risks before code reaches production. The system provides structured feedback and inline comments to help developers quickly understand and resolve issues. Additional features such as secrets detection, dependency vulnerability scanning, and infrastructure-as-code review strengthen application security. By automating repetitive review tasks and providing intelligent insights, DeepSource enables teams to ship software faster while maintaining strong code quality standards.

Align your team's code reviews with automatic style feedback, for all the languages you use, all in one place. Connecting your repository is a couple of clicks away and our reviews finish in record time. Use the default style guides or customize each tool to fit your team's tastes. Use auto fixing to correct your team's style errors so you can focus on feedback. Stickler CI only keeps your code on our servers for the duration of a review. After the comments for a review are posted your code is removed from our servers. Incrementally improve and standardize the quality of your code in each pull request. Ensure your coding standards are applied consistently as code changes without having to disrupt your team. Make sure your code quality and style are standardized by automatically applying style and quality checking tools. Either use the defaults or customize linters to fit your existing coding standards.

Get away from essay writing, Squire writes pull request descriptions for you. Keep your team in sync with a clear description and changelog. With an agentic workflow, Squire has a team reviewing your PR with the full context of your codebase. Able to catch many issues like systemic breaking changes, security concerns, and even small spelling mistakes. We improve code quality and get your PR into production. Squire is a context-aware agent who works with you to write pull request descriptions, review PRs, and learn how you like your code reviewed. Squire learns how your team reviews code and fits your style with explicit configuration and learning from your team's interactions. Map and synchronize ownership and responsibility across your entire engineering stack. Maintain compliance by applying and maintaining rules on your engineering components.

Get on-demand code reviews from vetted, expert engineers enhanced by AI. Add senior engineers to your team every time you open a pull request. Ship better, more secure code faster with AI-assisted code reviews. Whether you're a development team of 5 or 5,000, PullRequest will supercharge your existing code review process and adapt to your needs. Our reviewers will help your team catch security vulnerabilities, find hidden bugs, and fix performance issues before they reach production. All of this is done within your existing tools. Expert human reviewers enhanced by an AI analysis to pinpoint high-risk security hotspots. Intelligent static analysis combining open source tools and proprietary AI shown to reviewers for deeper insights. Save your senior staff some time. Make meaningful progress resolving issues and improving code while other members of your team are busy building.

Astronuts is an AI-powered code review platform designed to streamline the development process by automating code reviews and bug fixes. Developers can initiate code analysis with a simple command, receiving line-by-line smart comments and auto-fix suggestions. The platform offers features such as pull request summaries, code quality metrics, and change logs, all accessible through a user-friendly interface. Astronuts integrates seamlessly with GitHub, allowing teams to monitor pull request batch sizes and code health metrics, thereby reducing code review time and minimizing bugs. The platform also provides real-time chat for code-related queries, configurable behavior settings, and gateway rules to enforce code quality standards. With support for multiple programming languages and build systems, Astronuts caters to diverse development environments. The platform offers a free trial with $5 in credits, enabling teams to experience its benefits without initial costs.

Entelligence AI is an AI-powered engineering intelligence platform designed to streamline development workflows, enhance collaboration, and boost productivity across the software development lifecycle. It automates code reviews and pull request (PR) analysis with intelligent agents, cutting review time, surfacing bugs early, and boosting engineering productivity. Entelligence's Deep Review feature detects complex issues across files with deep context analysis of the entire codebase, providing PR summaries, smart comments, and quick fixes. Entelligence AI also offers performance insights, tracking team performance, sprint progress, and code quality, monitoring output per engineer, review depth, and sprint assessments in real-time. Its self-updating documentation feature turns code into clear docs and refreshes them on every commit.

Sourcery is an AI-powered automated code review and coding assistant designed to help developers and engineering teams improve code quality, catch bugs and security issues early, and maintain consistent standards across projects. It integrates directly into popular development workflows, including GitHub, GitLab, and IDEs like VS Code and JetBrains, providing instant, actionable feedback on pull requests and in-editor code changes rather than relying solely on traditional peer reviews. Sourcery analyzes diffs with a combination of large language model insights and static analysis to deliver clear summaries, line-by-line suggestions, high-level feedback, and visual diagrams that explain proposed changes, with the goal of offering review quality similar to what a colleague would provide. In the IDE, it functions as a real-time pair programmer that underlines potential improvements, enables one-click application of suggested fixes, and offers an AI chat.

Maximize your throughput and only release clean code SonarQube Cloud (formerly SonarCloud) automatically analyzes branches and decorates pull requests. Catch tricky bugs to prevent undefined behavior from impacting end-users. Fix vulnerabilities that compromise your app, and learn AppSec along the way with Security Hotspots. With just a few clicks you're up and running right where your code lives. Immediate access to the latest features and enhancements. Project dashboards keep teams and stakeholders informed on code quality and releasability. Display project badges and show your communities you're all about awesome. Code Quality and Code Security is a concern for your entire stack, from front-end to back-end. That’s why we cover 24 languages including Python, Java, C++, and many others. Transparency makes sense and that's why the trend is growing. Come join the fun, it's entirely free for open-source projects!

Get a glance at code quality for the whole project, recent commits, and the most problematic files. CodeFactor will track new and fixed issues for every commit and pull request. CodeFactor will try to show the most critical issues first based on issue code size, file change frequency, and file size so you can start fixing only what's important. Create and track issues or comments directly from code files or project issues pages. CodeFactor will update the status for GitHub or Bitbucket pull requests as well. CodeFactor allows you to toggle inspection for any repository branch on the fly. CodeFactor integrates with Slack to send code quality notifications for every commit in a branch or pull request. To install, go to the repository settings page. Straightforward pricing based on private repository number. Plain and simple with no hidden fees. Seamless integration into your workflow.

Customize the code review rule sets to align with the standards you want to follow. Automatically avoid bugs that are not important to you so that you can concentrate on what matters. Perform code reviews without worrying about the security of your code. Codegrip does not store any of your code while performing automated code reviews. Always stay updated about the progress of your project. Get code quality reports and pull request notifications automatically in a Slack channel of your choice. Manage multiple projects with a dashboard view that provides all information in one place. Track the improvement in code quality over time with the help of easy-to-understand parameters and graphs. OWASP represents a broad consensus about the most critical security risks to web and mobile applications. It also guides developers and security professionals on the most critical vulnerabilities that are commonly found in web applications, which are also easy to exploit.

Panto is an AI-powered code review agent designed to enhance code quality and security by integrating seamlessly with development workflows. Its proprietary AI operating system aligns code with business context from tools like Jira and Confluence, enabling efficient and context-aware code reviews. It supports over 30 programming languages and conducts more than 30,000 security checks, ensuring comprehensive analysis of codebases. Panto AI's "Wall of Defense" operates continuously to expose vulnerabilities and suggest fixes, preventing flawed code from reaching production. With features like zero code retention, CERT-IN compliance certification, and on-premise compatibility, it prioritizes data security and compliance. Developers benefit from high signal-to-noise ratio reviews, reducing cognitive overload and allowing focus on critical logic and design issues.

We build machine learning models that find bugs in code. We can be used proactively as part of the development process by both humans and AI agents to eliminate problematic code before it's submitted for review. We can also do checks at time of code review through our GitHub agent that adds comments to PRs (Pull Requests - essentially just submissions of code), to ensure nothing slips through. We allow developers to enforce their own taste on the code that either the AI or their teams contribute to the codebase by providing Recurse Rules. These are written in markdown and are descriptions of bad patterns that you don't want present in your codebase (e.g. the concept of DRY - do not repeat yourself).

Propel is an AI-powered code review platform that acts as your team's AI Tech Lead — giving instant PR feedback, turning comments into suggested fixes, and helping you merge faster with higher quality. Propel learns from your team on every review to improve team velocity, code quality, and developer experience over time. Additionally, Propel has Security Scanning functionality that identifies security vulnerabilities and compliance issues before they reach production. Within Propel, teams are also able to build and maintain a living knowledge base of your team's coding patterns and best practices. Furthermore, Propel provides automated weekly summaries of all GitHub activity sent directly to Slack. Perfect for exec updates, team accountability, and keeping everyone informed.

CodeComply is an AI-powered plan review and compliance platform built to automate, streamline, and improve the accuracy of building plan reviews and code compliance checks for the architecture, engineering, construction, and facility management industries. It lets users upload building plans in minutes and receive instant AI-driven compliance analysis that flags issues before submission, reducing costly errors and rework, and helping projects advance faster toward approval. It includes features like automated code compliance checks against IBC, NFPA, ADA, FHA, and local amendments, Readiness reports to catch missing elements, VersionVue automated version comparison, smart issue tracking and commenting, real-time collaboration tools, and structured compliance reports with visual insights for easy interpretation and sharing.

gitStream lets you configure rules that decide how each pull request is treated based on the content of the code. These rules automatically find the right reviewer, check for deprecation, add context tags, and much more. The practice of improving merge efficiency by classifying pull requests based on change size and complexity. Automating the merge path based on the unique merge conditions allows work to flow more efficiently. gitStream adds context to your PRs with labels and comments. This added context empowers your developers to make the best decisions about how and when to work. Speed up time to merge by applying an auto-approve check on pull requests with simple changes like minor version updates of internal libraries. Automate change requests based on org. level coding practices like moving away from deprecated services.