[AI code review]

Greptile and Aevral, at a glance

Greptile indexes the codebase as a graph and reviews pull requests with agents, learning team standards from review comments, per Greptile's site.

Greptile builds a graph of the repo and reviews each pull request with a swarm of agents, with security among its published scope; its Security Check page names an authorization-bypass example, and its TREX agent, a beta offering, writes and runs tests per pull request, per Greptile's site. Aevral is built for a reading of its own: does this diff widen who has access to what. Both read pull requests: Greptile for the review and security scope it states, and Aevral's PR review, live and opt-in, for the access questions.

Greptile focuses on

  • Reviewing pull requests with a graph index of the codebase, with security among the published scope.
  • Learning team standards from review comments and custom rules.
  • Offering TREX, a beta agent that writes and runs tests for pull requests, per Greptile's site.

Aevral adds alongside

  • The access reading of the pull request: dropped ownership checks, caller-controlled object references, gates that went from a role to a login.
  • With the opt-in add-on: up to two findings per review, grounded on the added lines, posted as a Check plus inline comments. It never blocks a merge.
  • A finding as a lead with evidence: the author decides with full information.

Run them together

Let Greptile review pull requests with codebase context and its TREX test agent; let Aevral add the authorization and business-logic reading of the same pull requests, with the opt-in add-on.

Greptile and Aevral, in depth; Aevral PR security review.

Also alongside


Scan your whole repo for access bugs.

One GitHub App. A report with evidence. A prompt for the agent you already use.