Freedom251 › Code review software
Code Review by Holycode

What Code Review by Holycode is
Code Review by Holycode is a code analysis platform for identifying performance, security, and other software health issues and proposing fixes. Nine AI agents follow execution paths from API entry points through dependencies to examine code logic. Reports group findings by scored category and severity, point to specific files, and can be downloaded as Markdown or PDF. Security analysis covers OWASP Top 10 issues, injection vectors, and authentication flaws, with remediation steps.
Teams can connect GitHub or GitLab, including self-hosted instances, or upload a ZIP archive. The service can review each new pull request before merge and run recurring analyses weekly, bi-weekly, or monthly. Users can select findings for an AI agent to verify and fix on a separate branch before it opens a pull request. The plans page says it covers most mainstream technology stacks. Customer code is stored in Germany, portions are sent to third-party AI providers for report generation, and code is deleted 30 days after analysis. Holycode says customer code is not used to train AI models. The web service offers a free plan and paid monthly plans.
Who it suits
Code Review by Holycode suits software teams that want automated code and security analysis for repositories connected through GitHub or GitLab, or supplied as ZIP files. It may fit teams that want pull request reviews, scheduled analysis, or AI-assisted fixes on a separate branch.
What it does well
- Nine AI agents trace code paths from API entry points through dependencies.
- Reports include scored categories, severity-ranked findings, and file references.
- Security checks cover OWASP Top 10, injection vectors, and authentication flaws.
- Can review new pull requests and schedule recurring analyses.
- Free plan includes one full analysis on one repository.
What to know first
- The free plan is limited to 10 credits and one repository analysis.
- Starter costs $80 a month.
- Analysis reports are advisory and may miss defects or flag false issues.
Limits
The free plan provides 10 credits for one full analysis on one repository. The Starter plan provides 16 credits per month for one analysis and three pull request reviews.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | 10 credits · one full analysis on one repository · no credit card needed | Free |
| Growth | $230/mo · 70 credits per month · 7 analyses or 35 PR reviews | $230 a month |
| Scale | $565/mo · 200 credits per month · 20 analyses or 100 PR reviews | $565 a month |
| Starter | $80/mo · 16 credits per month · 1 analysis + 3 PR reviews | $80 a month |
| Enterprise | Custom · Negotiated volume · unlimited repos · self-hosted GitLab · SSO · custom SLA · Holycode engineers for remediation | On request |
As codereview.holycode.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Code Review by Holycode website.
- Choose the free plan, which requires no credit card, or select a paid plan.
- Connect GitHub or GitLab, including a self-hosted instance, or upload a ZIP archive.
- Run an analysis, then review the scored categories, severity-ranked findings, and file references.
- Select findings for an AI agent to verify and fix on a separate branch, or enable pull request reviews and schedule recurring analyses.
Verdict
Choose Code Review by Holycode if you want repository analysis with security findings, pull request reviews, and optional AI-assisted fixes. The free plan provides one full repository analysis; teams needing more credits can consider the monthly plans. Treat its findings as advisory, since automated analysis may miss defects or report issues that are not real.
Questions
Is Code Review by Holycode free?
Yes. Its free plan costs nothing and includes 10 credits for one full analysis on one repository. No credit card is needed.
What does the Starter plan cost?
Starter costs $80 a month and includes 16 credits per month for one analysis and three pull request reviews.
Which platforms does it support?
It is available on the web and as a self-hosted service. Users can link GitHub, GitLab, and self-hosted instances, or upload a ZIP archive.
What security issues does it analyze?
Its security coverage includes OWASP Top 10 issues, injection vectors, and authentication flaws, with remediation steps.
How does it handle customer code?
Customer code is stored in Germany, with portions sent to third-party AI providers for report generation. Code is retained for 30 days after analysis, then deleted, and is not used to train AI models.
Are the findings definitive?
Reports are advisory. Automated analysis may miss defects or report issues that are not real.
Facts from Code Review by Holycode's own pages
- Analysis
- Nine AI agents trace execution paths from API entry points through dependencies to examine code logic. · codereview.holycode.com, 11 Oct 2026
- Automated fixes
- Users can select findings for an AI agent to verify and fix on a separate branch before it opens a pull request. · codereview.holycode.com, 11 Oct 2026
- Company location
- Holycode AG is registered in Switzerland at Im Gerstenacker 8, 4102 Binningen. · codereview.holycode.com, 11 Oct 2026
- Continuous review
- The service can automatically review every new pull request before merge. · codereview.holycode.com, 11 Oct 2026
- Data location
- The terms state that customer code is stored in Germany and portions are sent to third-party AI providers for report generation. · codereview.holycode.com, 11 Oct 2026
- Headquarters
- Binningen, Switzerland · codereview.holycode.com, 28 Sept 2026
- Integrations and input
- Users can link GitHub, GitLab, and their self-hosted instances, or upload a ZIP archive. · codereview.holycode.com, 11 Oct 2026
- Limits
- The terms describe reports as advisory and say automated analysis may miss defects or report issues that are not real. · codereview.holycode.com, 11 Oct 2026
- Purpose
- The platform analyzes codebases for performance, security, and other software health issues and produces findings with proposed fixes. · codereview.holycode.com, 11 Oct 2026
- Reports
- Reports include scored categories, severity-ranked findings, and file-level references, and can be downloaded as Markdown or PDF. · codereview.holycode.com, 11 Oct 2026
- Retention and training
- The terms say customer code is retained for 30 days after analysis, then deleted, and is not used to train AI models. · codereview.holycode.com, 11 Oct 2026
- Scheduled reviews
- Recurring analyses can be scheduled weekly, bi-weekly, or monthly. · codereview.holycode.com, 11 Oct 2026
- Security coverage
- The product surfaces OWASP Top 10 issues, injection vectors, and authentication flaws with remediation steps. · codereview.holycode.com, 11 Oct 2026
- Stack coverage
- The plans page says the service covers most mainstream technology stacks. · codereview.holycode.com, 11 Oct 2026
- Support
- The maker lists [email protected] and a phone number for contact. · codereview.holycode.com, 11 Oct 2026
Where Code Review by Holycode stands on Freedom251
- Code review software#10 of 50
