Best Code Review Tools

Visual Expert is a static code analyzer for Oracle PL/SQL, SQL Server T-SQL, and PowerBuilder. Identify code dependencies to modify your code without breaking your application. Scan your code to improve the security, performance, and quality. Perform Impact analysis to Identify breaking changes. Automatically scan your code to detect and fix security vulnerabilities, bugs and maintenance Issues. Implement continuous code inspection Understand the inner workings of your code with call graphs, code diagrams, CRUD Matrix and Object Dependency Matrix (ODM). Automatically generate an HTML Source Code documentation. Explore your code exploration with hyperlinks Compare applications, databases or pieces of code. Improve maintainability. Clean up code. Comply with dev standards. Analyze and Improve DB code performance: Find slow objects and SQL queries, Optimize a slow object, a Chain of calls a slow SQL, Get a query Execution Plan. And much more.

With rapidly growing codebases, a proliferating number of repositories, multiple languages and file formats, and an increasing number of developer tools, Sourcegraph's Code Search enables developers to quickly explore and understand their code with precision and accuracy and automate large-scale code changes.

Software projects tend to be complex and there is the law of entropy making it more complex all the time. The developers easily get lost in the dependency network and tend to create designs that does not stand time well. Softagram provides automatically illustrations on how the dependencies are changing. Automated integration works so that pull requsts (in GitHub, Bitbucket, Azure DevOps), merge requests (in GitLab) and patch sets (in Gerrit) are decorated with a dependency analysis report that pops up as a comment in the tool you already use. The analysis also covers other aspects such as open source licenses and quality. It can be tailored for your needs. Software audits can also be efficiently performed by using Softagram analysis together with Softagram Desktop app designed for advanced software understanding and auditing usage.

CodeScene is a code analysis, visualization, and reporting tool. Cross reference contextual factors such as code quality, team dynamics, and delivery output to get actionable insights to effectively reduce technical debt and deliver better code quality. We enable software development teams to make confident, data-driven decisions that fuel performance and developer productivity. Supporting 28+ programming languages, CodeScene also offers an automated integration with GitHub, BitBucket, Azure DevOps or GitLab pull requests to incorporate the analysis results into existing delivery workflows. Automate your code reviews, get early warnings and recommendations about complex code before merging it to the main branch and set quality gates to trigger in case your code health declines.

The ultimate tool to help Node.js developers secure their custom code. Developers are 4x more likely to fix issues before code is checked in. Reshift makes shifting security left seamless with security bug detection and remediation at compile time. A security tool that works with your developers, without slowing them down. Reshift integrates with the developers’ IDE so security issues are found in real-time and fixed before the code is merged. New to security? Reshift makes it easy to build code security into your pipeline for the first time. A tool built for growing software companies looking to level up their security. Not a security expert? Reshift is made for SMB’s, making it easy to set up with no need for security expertise. Improve code security, while learning about secure code.Reshift provides rich content and best practices, so developers learn about security while writing code.

Phabricator supports post-commit auditing, either as a primary workflow or, when coupled with Herald, allows rule-based triggers to get an extra set of eyes on your code. Plan features, track bugs, and award tokens. Maniphest lets you customize input forms, use custom fields, and has a rich API. You can write things down and revert them later with Phriction, which is a documentation wiki. Use sophisticated drag and drop to make sure your project is properly micro-managed with Workboards. With Conpherence keeping up with where your team is having lunch is just a few clicks away. As your company scales, keep track of activity with Herald, which notifies you when things you care about happen (like a specific file being changed). The arcanist command line tool gives you CLI access to most of Phabricator's functionality. The Conduit API allows you to write scripts that interact with Phabricator over an HTTP JSON API.

DeepSource helps you automatically find and fix issues in your code during code reviews, such as bug risks, anti-patterns, performance issues, and security flaws. It takes less than 5 minutes to set up with your Bitbucket, GitHub, or GitLab account. It works for Python, Go, Ruby, and JavaScript. DeepSource covers all major programming languages, Infrastructure-as-Code, secrets detection, code coverage, and more. You won't need any other tool to protect your code. Start building with the most sophisticated static analysis platform for your workflow and prevent bugs before they end up in production. Largest collection of static analysis rules in the industry. Your team's central hub to track and take action on code health. Put code formatting on autopilot. Never let your CI break on style violations. Automatically generates and applies fixes for issues in a couple of clicks.

Automate your workflow, let Upsource analyze your code and track the progress, while you focus on improvements. Participate in discussions and manage your reviews without leaving the comfort of your IDE. Explore new changes in the browser with IDE-like navigation, reply by email, and never miss an important change. Discuss changes, @mention others, react to comments, and unlock achievements as you discover new features and help your teammates! Easily make Upsource part of your process, integrate it with issue trackers, CI servers, and sync with GitHub. Don’t worry about outgrowing Upsource! No matter how large your team becomes or how many projects you have, Upsource can handle it. Whether you're looking for a code review tool, insight into your projects' history, or a place to collaborate or expand your developer expertise, Upsource has got you covered!

Get on-demand code reviews from vetted, expert engineers enhanced by AI. Add senior engineers to your team every time you open a pull request. Ship better, more secure code faster with AI-assisted code reviews. Whether you're a development team of 5 or 5,000, PullRequest will supercharge your existing code review process and adapt to your needs. Our reviewers will help your team catch security vulnerabilities, find hidden bugs, and fix performance issues before they reach production. All of this is done within your existing tools. Expert human reviewers enhanced by an AI analysis to pinpoint high-risk security hotspots. Intelligent static analysis combining open source tools and proprietary AI shown to reviewers for deeper insights. Save your senior staff some time. Make meaningful progress resolving issues and improving code while other members of your team are busy building.

DeepCode AI has always been the backbone of Snyk code, which is why it's the fastest, most accurate SAST on the market. DeepCode AI, powering the Snyk platform, utilizes multiple AI models, is trained on security-specific data, and is all curated by top security researchers to give you all the power of AI without any of the drawbacks. With 11 supported languages, and multiple AI models, Snyk's DeepCode AI was designed to find and fix vulnerabilities and manage tech debt. DeepCode AI powers Snyk's one-click security fixes and comprehensive app coverage, letting developers build fast while staying secure. Our specialized DeepCode AI is built and refined by top-tier researchers that use training data from millions of open source projects, never customer data. DeepCode AI's hybrid approach uses multiple models and security-specific training sets for one purpose, to secure applications.

Codacy is an automated code review tool that helps identify issues through static code analysis, allowing engineering teams to save time in code reviews and tackle technical debt. Codacy integrates seamlessly into existing workflows on your Git provider, and also with Slack, JIRA, or using Webhooks. Users receive notifications on security issues, code coverage, code duplication, and code complexity in every commit and pull request along with advanced code metrics on the health of a project and team performance. The Codacy CLI enables running Codacy code analysis locally, so teams can see Codacy results without having to check their Git provider or the Codacy app. Codacy supports more than 30 coding languages and is available in free open-source, and enterprise versions (cloud and self-hosted). For more see https://www.codacy.com/

Customize and Scale Your Peer Review Process for Code and Documents With Collaborator. Collaborator is the premier peer code & document review tool for development teams that take software quality seriously. Comprehensive Review Capabilities – Review source code, design docs, requirements, user stories, test plans, and documentation in one tool. Proof of Review – Ensure proof with electronic signatures & detailed reports to meet regulatory compliance standards. Support for 11 SCMs, including Git, SVN, TFS, Perforce, CVS, ClearCase, RTC, & more. Integrations with GitHub, GitLab, Bitbucket, Jira, Eclipse, Visual Studio, & more. Real-Time Updates. Threaded chat shows conversations as well as highlights changes & defects for visibility during each code review. Each team and project has unique requirements. Why would the same type of review work for everything? With custom review templates and checklists in Collaborator, it is easy to build peer review frameworks.

Deliver on time; on/under budget. RhodeCode enables you to code faster, test harder, reduce bugs, and apply best practices across the firm's code base. Secure your team & assets behind-the-firewall. Share the same secure platform with our customers in defense, fin-tech, & other highly secure use cases. Leverage your team & investments better, so you can deliver on your roadmap. Unlock value from legacy apps & teams wastefully isolated from your new, agile projects. We've integrated great support for SVN. You have a no-compromise path to Git, while extracting ongoing value from your SVN apps and tools for years to come. Deliver outstanding results, faster. Develop software in a collaborative environment that fosters innovation, drives projects forward, enables you to track and allocate developer resources better. Large scale, global development teams require secure, yet highly performant, SCM solutions. RhodeCode's mission is to exceed the requirements.

Veracode offers a holistic, scalable way to manage security risk across your entire application portfolio. We are the only solution that can provide visibility into application status across all testing types, including SAST, DAST, SCA, and manual penetration testing, in one centralized view.