# CodeReviewer

> CodeReviewer reviews every pull request against your whole codebase, fixes what it safely can, writes and replays your tests on the web and on real Android phones, scans for security and performance problems, and tracks delivery against your spec. Made by Techware Lab (Dubai and Kochi).

Key facts:
- Connects to GitHub. Reviews post on the pull request.
- Test suites are written by AI once, then replayed without AI, on demand or on a schedule. Replays are unlimited.
- Active security scans only run against domains you have verified.
- Pricing: Pro at $15 per developer per month (launch price, normally $25), 15-day free trial with no card. Enterprise on request.
- Site copy is drafted with AI assistance and reviewed by people: https://codereviewer.cloud/ai-disclosure

## Product
- [Platform overview](https://codereviewer.cloud/product)
- [AI code review](https://codereviewer.cloud/product/ai-code-review): CodeReviewer checks every pull request against your whole codebase, not only the diff. Each finding comes with proof, a severity and a fix.
- [Autofix](https://codereviewer.cloud/product/autofix): Turn review findings into committed fixes with one click. CodeReviewer writes the change, checks it compiles, and escalates instead of looping.
- [Auto-merge](https://codereviewer.cloud/product/auto-merge): Let clean pull requests approve and merge themselves. CodeReviewer only merges when the review, the tests and the spec agree. It sorts out conflicts along the way.
- [Spec tracking](https://codereviewer.cloud/product/spec-tracking): Upload a Markdown spec and CodeReviewer tracks every requirement against your pull requests. You see what shipped, what's half-done and what got forgotten.
- [Issues & features](https://codereviewer.cloud/product/issues-and-features): Report a bug and CodeReviewer confirms it against the code, finds the line, and opens a fix. Request a feature and get a plan you can lock and ship.
- [Test automation](https://codereviewer.cloud/product/test-automation): CodeReviewer reads your code, clicks through your signed-in app and records real tests. Replays are unlimited and free, and broken tests repair themselves.
- [Mobile testing](https://codereviewer.cloud/product/mobile-testing): Upload your Android app and CodeReviewer authors tests on real phones, then replays them free. Pair your own devices with a QR code. No root, no laptop.
- [Bug Explorer](https://codereviewer.cloud/product/bug-explorer): Bug Explorer maps where bugs are likely to hide, explores your web or Android app on its own and files issues you can reproduce. Run it on demand or on a schedule.
- [Security testing](https://codereviewer.cloud/product/security-testing): Passive security grades, active OWASP ZAP scans on verified domains, and an AI threat model mapped to STRIDE and MITRE ATT&CK. All in one report.
- [Performance](https://codereviewer.cloud/product/performance): Measure LCP, CLS and INP on your real signed-in pages, set per-page budgets, track trends and get alerted the moment a change regresses them.
- [Team & governance](https://codereviewer.cloud/product/team-and-governance): Projects, admin and member roles, granular permissions for merges, fixes and AI runs, domain verification and in-app notifications. Control that doesn't get in the way.
- [Integrations](https://codereviewer.cloud/product/integrations): CodeReviewer connects to GitHub in a few clicks, reads your PostgreSQL, Supabase or SQL Server data, and pairs real Android phones for mobile testing.

## Solutions
- [Engineering teams](https://codereviewer.cloud/solutions/engineering-teams): Give every pull request a whole-codebase review within minutes, fix the safe findings automatically and merge clean changes on your own rules.
- [QA teams](https://codereviewer.cloud/solutions/qa-teams): AI-authored test suites that replay free forever, self-healing tests, autonomous bug hunting, p0 to p3 triage and a test-case catalog you can export to Excel.
- [Agencies & delivery](https://codereviewer.cloud/solutions/agencies): Track every pull request against the client's spec, keep each client in its own project, and hand over tested, reviewed work with the evidence to back it up.
- [Mobile teams](https://codereviewer.cloud/solutions/mobile-teams): AI-authored tests for your Android app, replayed on real phones rather than emulators, plus autonomous bug hunting and whole-codebase code review.
- [Startups](https://codereviewer.cloud/solutions/startups): Small teams get whole-codebase code review, verified fixes, AI-written tests and security scans from the first commit. One price per developer.
- [Enterprise](https://codereviewer.cloud/solutions/enterprise): Custom limits and seats, dedicated capacity, granular permissions, verified-domain security testing and support with a response-time promise. Talk to us.

## Customer stories
- [One reviewer across web, backend and mobile for an analytics team](https://codereviewer.cloud/customers/analytics-platform): A product team with a web dashboard, backend services and an Android app runs every pull request through the same whole-codebase review.
- [How a delivery agency proves the spec shipped, for every client](https://codereviewer.cloud/customers/delivery-agency): A multi-client agency uses spec tracking, per-project access and checked autofix to show each client exactly what's been delivered.
- [How a QA consultancy moved mobile regression onto real phones](https://codereviewer.cloud/customers/qa-consultancy): A testing consultancy swapped manual mobile regression passes for AI-authored suites that replay on its own Android phones.

## Whitepapers
- [Author Once, Replay Forever: The Economics of AI-Built Test Suites](https://codereviewer.cloud/resources/whitepapers/author-once-replay-forever): A practical look at the lifetime cost of end-to-end test suites, with an illustrative twelve-month model comparing hand-scripted tests to AI-authored suites that replay for free.
- [The Hidden Cost of Code Review Latency](https://codereviewer.cloud/resources/whitepapers/code-review-latency): Review effort is small; review waiting is expensive. A practical model, metrics and playbook for cutting code review latency.
- [Continuous Security Testing for Small Teams](https://codereviewer.cloud/resources/whitepapers/continuous-security-testing): A practical guide for small product teams on passive checks, safe active scanning, lightweight threat modelling and a 30-day rollout plan.
- [From Spec to Shipped: Measuring Delivery Against Requirements](https://codereviewer.cloud/resources/whitepapers/spec-to-shipped): Why "done" is a claim, not a measurement. Plus a lightweight way to track delivery requirement by requirement, with evidence from the code.

## Guides
- [Connect GitHub and start reviewing pull requests](https://codereviewer.cloud/resources/guides/connect-github): Install the CodeReviewer GitHub App on your account or organization, choose repositories, and get your first review in a few minutes.
- [Pair an Android phone for real-device testing](https://codereviewer.cloud/resources/guides/pair-an-android-phone): Turn any Android phone into a CodeReviewer test device in about five minutes. No root, no laptop and no app store required.
- [Teach CodeReviewer your conventions](https://codereviewer.cloud/resources/guides/teach-codereviewer-your-conventions): Add a .reviewrc.md file to your repository to tell the reviewer your house rules, which paths to skip, how to prepare and build the project, and how to test it.
- [Verify your domain for active security scans](https://codereviewer.cloud/resources/guides/verify-your-domain): Active security scanning sends attack-style traffic, so CodeReviewer only runs it on domains you've proven you own. Here's how to verify one with a DNS record or a file.

## Blog
- [Security grades, explained: what an A to F grade checks (and what it doesn't)](https://codereviewer.cloud/blog/security-grades-explained): CodeReviewer gives your app a security grade from A to F. Here's exactly what goes into it, why it's passive by default, and when to reach for active scanning and threat modeling.
- [Did we ship the spec? Spec tracking for agencies and delivery teams](https://codereviewer.cloud/blog/did-we-ship-the-spec): The most expensive surprise in client work is the missing feature found at the demo. Here's how tracking every pull request against the agreed spec turns “are we done?” into a scorecard.
- [Real phones, not emulators: why we test Android apps on physical devices](https://codereviewer.cloud/blog/real-phones-not-emulators): Emulators are convenient, but your users don't carry one. Here's why CodeReviewer runs Android suites on real phones, and how we made pairing one take a QR code and no root.
- [Author once, replay forever: the economics of AI-built test suites](https://codereviewer.cloud/blog/author-once-replay-forever): AI can write end-to-end tests, but running AI on every test run is slow, costly and unpredictable. We separate authoring from replay, and it changes the numbers completely.
- [Why diff-only code review misses the bugs that hurt](https://codereviewer.cloud/blog/why-diff-only-review-misses-bugs): The dangerous part of a change is rarely the lines that changed. It's the code that depends on them. Here's why reviewing the diff alone falls short, and what whole-codebase review does differently.
- [Introducing CodeReviewer](https://codereviewer.cloud/blog/introducing-codereviewer): An AI reviewer that reads your whole codebase before it says a word, then fixes what it can, writes the tests and tells you whether the plan actually shipped.

## Company
- [About](https://codereviewer.cloud/about)
- [Trust & security](https://codereviewer.cloud/security)
- [Contact sales](https://codereviewer.cloud/contact)
- [Pricing](https://codereviewer.cloud/pricing)
- [Changelog](https://codereviewer.cloud/changelog)
- [Glossary](https://codereviewer.cloud/glossary)

## Optional
- [Terms](https://codereviewer.cloud/legal/terms)
- [Privacy](https://codereviewer.cloud/legal/privacy)
- [DPA](https://codereviewer.cloud/legal/dpa)
- [Acceptable use](https://codereviewer.cloud/legal/acceptable-use)
- [Cookies](https://codereviewer.cloud/legal/cookies)
- [Full text version](https://codereviewer.cloud/llms-full.txt): product facts and FAQs in one file