#6 of 11
Category rank
AI code review tools tracked by Devtune
Report
Should I Use DeepSource?
Your team is writing more code with AI. DeepSource automates code reviews so you ship to production faster.
Depends
DependsBuy if you're a GitHub-based team shipping lots of AI-written code and want SAST, SCA, and AI review in one tool.
Solid all-in-one code quality & security for GitHub teams; committer billing and two vendor incidents say pilot first.
Confidence: Medium
$12/mo
Starting price
Other reports cite ~$30/user/mo; committer-based billing
Yes
Free tier
Free + Starter plans on GitHub Marketplace
$7.8M
Total raised
Per LeadIQ; YC W20 alum
Value for money
3
Undercuts Code Climate; committer billing can inflate totals
Ease of use
4
G2 reviewers consistently praise ease of use
Feature depth
4
SAST, SCA, IaC review, AI review, CVE monitoring
Security posture
2
Two incidents: phishing theft, GitHub app compromise
Pros
Cons
Gotchas
- mediumCommitter-based billing counts everyone who commits — cost scales with whole team, not seats.⁸
- mediumThird-party pricing reports conflict ($12/mo vs $30/user/mo) — get a written quote first.
- mediumReported phishing incident forced full credential resets; ask about current controls.⁵
- lowGuess: deep GitHub integration creates lock-in if you switch VCS or leave.⁹
Best for
- Teams shipping AI-generated code
- GitHub-based startups wanting SAST+SCA+review in one
- Python-heavy codebases
- Teams replacing 3+ point tools
Not for
- Solo devs — free analyzers and GitHub checks already cover you
- Teams already standardized on SonarQube or Semgrep
- Buyers requiring a vendor with zero incident history
- Non-GitHub-heavy orgs — integration story centers on GitHub
Companies that use it
- NASA10
- Ancestry
- Omnigo
- Grid AI
- DVC
Pricing
Free
$0
- Free plan listed on GitHub Marketplace
- Entry point for small repos
Starter
from ~$12/mo
- Entry paid tier per SpotSaaS
- Confirm current price with vendor
Per-user (reported)
~$30/user/mo
- Committer-based billing
- Cited in Code Climate comparison
Security
No vulnerabilities in the product found; vendor itself had two reported incidents: phishing credential theft and a GitHub app compromise.
What users say
Users consistently praise ease of use, while some Reddit threads recommend incumbents like SonarQube instead.
“Users consistently praise the ease of…”
“Suggest with the team to start using Sonarqube or…”
Alternatives
Compare DeepSource with each alternative.
SonarQube
Battle-tested static analysis; Redditors frequently recommend it instead.
Semgrep
Open-source, customizable SAST; the benchmark alternative in this category.
DeepSource vs SemgrepCode Climate
Similar quality platform; DeepSource reportedly undercuts its pricing.
CodeAnt AI
Direct competitor positioning AI review with built-in security.
DeepSource vs CodeAnt AIFull analysis
Based on ~30 public sources; several review snippets were truncated and third-party pricing reports conflict, so verify quotes directly with the vendor.
Sources
- G2 — DeepSource Reviewsg2.comreview
review
- Devtune — DeepSource category visibilitydevtune.aireview
- Hacker News — DeepSource launch (YC W20)news.ycombinator.comnews
- BleepingComputer — Phishing incidentbleepingcomputer.comsecurity
- SecurityWeek — GitHub app compromisesecurityweek.comsecurity
- DeepSource — CVE Benchmarksdeepsource.comofficial
- DeepSource — Billing docsdocs.deepsource.comofficial
- GitHub Marketplace — DeepSourcegithub.comofficial
- DeepSource — NASA case studydeepsource.comofficial
Rate this review
Anonymous. You can change your vote.
Loading votes…
Ask a follow-up
Ask if a use case fits. Answers stay inside this report and its sources.
Comments
One queue. No replies. Give a display name first. Limit: 7 comments per day.
No comments yet.