Sourcery

Free plan APIExtensionLinuxMacSelf-hostedWeb+1

What Sourcery is

Sourcery automates AI code reviews and security checks for software teams. It reviews pull requests within minutes, posting a summary, comments, and suggested fixes; users can apply suggested changes and commit them to the pull request. Security scans cover committed secrets, static-analysis vulnerabilities, infrastructure-as-code misconfigurations, dependencies, and licenses. Open Source and Pro include security scans twice a week, while Team adds nightly scans. Sourcery works with GitHub, GitLab, GitHub Enterprise Server, and self-hosted GitLab, and its editor extension supports VS Code, Cursor, Windsurf, and JetBrains. Plans range from free Open Source to Pro at $12 a month billed annually ($15 / developer / month billed monthly) and Team at $24 a month billed annually ($30 / developer / month billed monthly). A 14-day Team-feature trial is available to the organization after installation without a credit card. Sourcery says it does not keep customer code after reviews or use it to train models. Team supports bring-your-own LLM; self-hosted Sourcery is available through sales.

Who it suits

Sourcery suits solo developers and teams using supported Git hosting or editors who want automated pull-request reviews and security checks. Team and Enterprise options include features for larger organizations, with self-hosting available through sales.

What it does well

Reviews pull requests within minutes.
Suggested fixes can be committed to pull requests.
Scans secrets, vulnerabilities, dependencies, and licenses.
Supports GitHub, GitLab, and self-hosted GitLab.
Free Open Source plan is available.

What to know first

Open Source is limited to public repositories.
Open Source and Pro scan twice a week.
Jira integration is listed for Pro.
Self-hosted Sourcery is available through sales.

Limits

The free Open Source plan is for public repositories and runs security checks on every pull request. Pro scans twice a week; its listed price is $12 a month billed annually, or $15 per developer per month billed monthly.

Plans

Plan	Billed and limits	Price
Open Source	forever · Public repositories on GitHub or GitLab · AI reviews · PR summaries and diagrams · One-click fixes · Custom review rules · Auto-approve · Security checks on every PR	Free
Pro	annually ($15 billed monthly) · Private repositories · Higher review limits · Jira integration	$12 a month
Team	annually ($30 billed monthly) · Everything in Pro · Nightly scans of 50 repositories · Issues dashboard · On-demand scans · Team analytics	$24 a month
Enterprise	annually · Self-hosting · GitHub Enterprise Server · SSO · Bring your own LLM keys · Dedicated success manager · Invoice billing	On request

As sourcery.ai lists them, read 15 Oct 2026. The maker's own page has the final word.

Getting started

Open Sourcery’s website.
Install Sourcery to start the 14-day Team-feature trial for the organization.
Connect a supported GitHub or GitLab repository.
Install the extension for VS Code, Cursor, Windsurf, or JetBrains if you want editor support.
Choose a plan that matches repository privacy and review needs.

Verdict

Sourcery combines pull-request reviews with security scanning across several code hosts and editors. The free plan is for public repositories, while private repositories and more frequent scanning require paid plans.

Questions

Is Sourcery free?

Yes. The Open Source plan is free forever and covers public repositories. It includes AI reviews, one-click fixes, custom review rules, and security checks on every pull request.

What does Sourcery cost?

Pro is $12 a month billed annually, or $15 per developer per month billed monthly. Team is $24 a month billed annually, or $30 per developer per month billed monthly.

Does Sourcery offer a trial?

Yes. Installing Sourcery gives the whole organization 14 days of Team features without requiring a credit card.

Which code hosts and editors does it support?

It supports GitHub, GitLab, GitHub Enterprise Server, and self-hosted GitLab. Its extension supports VS Code, Cursor, Windsurf, and JetBrains editors.

Can Sourcery be self-hosted?

Yes. Self-hosted Sourcery is available through sales, and Enterprise lists self-hosting. Team supports bring-your-own LLM.

Does Sourcery retain code or use it to train models?

Sourcery says it does not retain customer code after a review and does not use code to train models.

Facts from Sourcery's own pages

API availability: The public REST API is a Team-plan API for listing, reading, counting, and bulk-updating security findings and groups. · docs.sourcery.ai, 28 Sept 2026
API scope: The only public API is a Team-plan REST API for listing, reading, counting, and bulk-updating security findings; the GraphQL endpoint is internal. · docs.sourcery.ai, 15 Oct 2026
Auto approval: Low-risk pull requests with no blocking findings can be automatically approved. · sourcery.ai, 15 Oct 2026
Billing model: Paid seats are assigned to specific developers, and organizations can cancel or downgrade while retaining features through the paid period. · sourcery.ai, 15 Oct 2026
Bring-your-own LLM: Enterprise customers can use their own LLM keys, including controlled Anthropic or Azure OpenAI deployments. · docs.sourcery.ai, 15 Oct 2026
Bug detection: Its reviews look for logic errors, missed edge cases, and security problems and explain remediation. · sourcery.ai, 15 Oct 2026
Code retention: Sourcery says it keeps no copy of code after a review and does not use code to train models. · sourcery.ai, 15 Oct 2026
Code review actions: Suggested fixes can be applied as changes that users commit directly to a pull request. · sourcery.ai, 28 Sept 2026
Company size fit: solo, small, mid market, enterprise · sourcery.ai, 22 Sept 2026
Compliance: The company states that Sourcery is SOC 2 Type II compliant. · sourcery.ai, 15 Oct 2026
Custom rules: Users can define project-wide review rules in a .sourcery.yaml file and use public rulesets such as the Google Python Style Guide. · marketplace.visualstudio.com, 15 Oct 2026
Data retention: Sourcery says it does not retain customer code after a review and does not use code to train models. · docs.sourcery.ai, 28 Sept 2026
Deployment: cloud, self hosted, desktop · sourcery.ai, 22 Sept 2026
Deployment choices: Team supports bring-your-own LLM, and self-hosted Sourcery is available through sales. · docs.sourcery.ai, 28 Sept 2026
Extension capabilities: The VS Code extension provides AI chat, on-demand reviews, GitHub and GitLab reviews, refactoring suggestions, and continuous quality feedback. · marketplace.visualstudio.com, 15 Oct 2026
Extension license: The VS Code listing says the source code is MIT-licensed but packaged binaries are not covered by that license. · marketplace.visualstudio.com, 15 Oct 2026
Extension recipes: The extension can generate Mermaid diagrams, unit tests, docstrings, and code explanations. · marketplace.visualstudio.com, 15 Oct 2026
Founders: Runa Capital identifies Brendan Maginnis, Nicholas Thapen, and Timothy Gilboy as founders. · runacap.com, 15 Oct 2026
Funding: Runa Capital reports a $120,000 Techstars-led pre-seed round in 2021 and a $1.75 million Forward Partners-led seed round in 2022. · runacap.com, 15 Oct 2026
Git hosting: Sourcery runs on GitHub, GitLab, GitHub Enterprise Server, and self-hosted GitLab. · docs.sourcery.ai, 28 Sept 2026
Headquarters and size: LinkedIn lists London, England headquarters and a company size of 2–10 employees. · linkedin.com, 15 Oct 2026
IDE support: Documentation names VS Code, Cursor, Windsurf, and JetBrains IDEs for in-editor reviews and suggestions. · docs.sourcery.ai, 15 Oct 2026
Integrations: GitHub, GitLab, GitHub Enterprise Server, self-hosted GitLab, VS Code, Cursor, Windsurf, JetBrains, Jira · sourcery.ai, 22 Sept 2026
Jira integration: Jira is included as an integration in the Pro plan. · sourcery.ai, 15 Oct 2026