shouldiuse.io

Categories

VERDICT

DeepSource Review

Depends

Should I use DeepSource?

AI code review platform that catches security issues and improves code quality; 14-day free trial. - deepsource.io

· 1 month ago

Buy if you're a growing engineering team on GitHub that wants code review, quality checks, and security scanning in one tool. Skip if you're a solo dev or small team — free linters, GitHub Actions, or SonarQube already cover it.

Confidence

Medium. Based on ~25 public sources: G2/Gartner/Capterra reviews, official docs and pricing pages, 2020 breach reporting, and Reddit/HN threads.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support evidence found
  • Security posture

Pricing

Free

Open Source

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
TeamFree base; ~$30/user/mo cited
EnterpriseContact sales

Best for

  • Growing teams shipping AI-written code
  • GitHub-based teams consolidating quality tools
  • Open-source maintainers (free)

Not for

  • Solo devs — free linters and GitHub Actions suffice
  • Teams already standardized on SonarQube or Semgrep
  • Buyers who need vendor support evidence before committing
  • Orgs wary of per-committer costs as headcount grows

Gotchas - check before you buy

medium

Committer-based billing: cost tracks active committers, so growing teams pay more

medium

Acquired by Harness — expect roadmap, packaging, and pricing changes

low

Free private-repo plan exists; verify limits before relying on it

low

Enterprise tier is contact-sales only; pricing opaque

Pros and cons

Pros

  • Automates code review, catching security and quality issues
  • Users consistently praise ease of use
  • Claims 82% accuracy on real-world CVEs
  • Replaces 3-5 separate quality tools for most teams
  • Free for open-source repositories

Cons

  • Committer-based billing grows with headcount
  • Cited at $30/user/month in comparisons
  • 2020 phishing incident compromised employee credentials
  • Some developers still recommend SonarQube instead
  • Skeptics say the AI code review category is overhyped

Sources & method

- 15 sources - One incident: 2020 Sawfish phishing compromised employee credentials and a GitHub token; logins were reset. No newer incidents in reviewed sources.

official x4review x5security x3news x3
  • 2020 phishing / Sawfish credential compromise, An employee fell for Sawfish phishing; employee credentials and GitHub access were compromised. DeepSource reset user logins and said no customer code was affected.

Key stats

  • Value for money: 4/5

    Rating

  • Free

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money: 4/5. Cheaper than Code Climate; scales with committers
  • Ease of use: 4/5. G2 users consistently praise ease of use
  • Feature depth: 4/5. Bundles static analysis, SCA, AI review
  • Support quality. No support evidence found
  • Security posture: 3/5. 2020 phishing breach disclosed; 82% CVE accuracy claimed
  • From ~$12/mo Starting price ~$30/user/mo cited elsewhere
  • Yes Free tier Open source + free private-repo plan
  • $7.8M Funding Total raised (LeadiQ)
  • 2020 Founded YC W20 batch

Pricing

Open Source

Free

  • Public repos
  • Free to use

Team

Free base; ~$30/user/mo cited

  • Free for private repos
  • AI review, static analysis, SCA

Enterprise

Not disclosed

  • Enterprise Server (self-hosted)
  • Custom terms

Security

One incident: 2020 Sawfish phishing compromised employee credentials and a GitHub token; logins were reset.

  • 2020 phishing / Sawfish credential compromiseAn employee fell for Sawfish phishing; employee credentials and GitHub access were compromised. DeepSource reset user logins and said no customer code was affected.12

No newer incidents in reviewed sources.

What users say

G2, Capterra, and Gartner reviewers are broadly positive with ease of use standing out, while some Reddit threads still steer teams toward SonarQube.

“Overall this is good”
Gartner Peer Insights
“Overall, DeepSource is a great solution for teams look”
Capterra review
“Suggest with the team to start using Sonarqube or”
Reddit, r/dotnet

Alternatives

Compare DeepSource with each alternative.

  • SonarQube

    Long-standing static analysis default; often self-hosted and cheaper.

  • Code Climate

    Similar quality platform, priced higher than DeepSource.

  • Codacy

    Comparable automated code review with simpler tiers.

    DeepSource vs Codacy

Companies that use it

  • NASA15
  • Ancestry
  • Omnigo
  • Grid AI
  • DVC
Full analysis

Based on ~25 public sources: G2/Gartner/Capterra reviews, official docs and pricing pages, 2020 breach reporting, and Reddit/HN threads.

Solid AI code review for growing GitHub teams; solo devs and SonarQube shops can skip it.

Methodology

Based on ~25 public sources: G2/Gartner/Capterra reviews, official docs and pricing pages, 2020 breach reporting, and Reddit/HN threads.

Read how a report is made.

Sources

  1. DeepSource official sitedeepsource.com
    official
  2. DeepSource Pricingdeepsource.com
    official
  3. DeepSource Billing docs (committer-based)docs.deepsource.com
    official
  4. DeepSource G2 reviewsg2.com
    review
  5. DeepSource Gartner Peer Insightsgartner.com
    review
  6. DeepSource Capterra reviewscapterra.com.sg
    review
  7. DeepSource vs Code Climate pricing comparisondev.to
    review
  8. Reddit r/dotnet thread recommending SonarQubereddit.com
    review
  9. HN: There is an AI code review bubblenews.ycombinator.com
    news
  10. HN Launch: DeepSource (YC W20)news.ycombinator.com
    news
  11. BleepingComputer: DeepSource resets logins after Sawfish phishingbleepingcomputer.com
    security
  12. SecurityWeek: Hackers compromised DeepSource GitHub tokensecurityweek.com
    security
  13. DeepSource product security pagedeepsource.io
    security
  14. DeepSource joins Harnessdeepsource.com
    news
  15. NASA customer case studydeepsource.com
    official

Add this review to your site

This check for DeepSource says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends DeepSource Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.