✨ AI-powered · Free forever · No credit card

AI code review on
every GitHub PR

4 specialized AI agents review every pull request for security vulnerabilities, performance issues, missing tests, and style problems — before they hit production.

🚀 Get started free ⭐ Star on GitHub
4
AI Agents
<10s
Review time
$0
Monthly cost
Reviews / day
github.com/your-org/your-repo/pull/42
🚫
BLOCKED
Blocked by 2 critical issue(s) — must fix before merging.
🚫 2 blocker(s) ⚠️ 3 warning(s) ⚡ 7,642ms
🔒 Security Hardcoded credentials and SQL injection detected
BLOCK Hardcoded API secret in source code
A live API key is hardcoded on line 7. This will be exposed in version control and any build artifacts.
💡 Move to environment variables and access via os.environ["API_KEY"]
BLOCK SQL injection vulnerability
User input is directly concatenated into a SQL query without sanitization.
💡 Use parameterized queries: cursor.execute("SELECT * FROM users WHERE id=?", (user_id,))
Performance N+1 query pattern detected in process_users()
Style No issues found.

Agents

4 expert AI agents, running in parallel

Each agent is a specialist. They all run simultaneously so you get a full review in under 10 seconds.

🔒
Security
Scans for vulnerabilities that could expose your users or infrastructure.
Hardcoded secrets & API keys
SQL / command injection
Missing auth checks
Insecure cryptography
Path traversal & SSRF
Performance
Finds bottlenecks before they become production incidents.
N+1 database query patterns
Unbounded queries (no LIMIT)
Memory leaks & unclosed connections
Inefficient algorithms O(n²)
Missing caching opportunities
🧪
Test Coverage
Ensures new code ships with the tests it needs.
New functions without tests
Uncovered edge cases
New API endpoints with no tests
Deleted tests without replacements
Weak assertions
🎨
Style
Keeps your codebase clean and maintainable over time.
Inconsistent naming conventions
Functions that do too much
Magic numbers & dead code
Overly complex expressions
Misleading variable names

How it works

Two ways to use DiffWise

Use the Chrome extension for on-demand reviews, or set up a webhook for automatic reviews on every PR.

1
Open any GitHub PR
Navigate to any pull request on GitHub. The DiffWise button appears automatically in the PR header.
2
Click DiffWise
Hit the 🔍 DiffWise button. All 4 agents run in parallel against the PR diff. Results appear in under 10 seconds.
3
Read the findings
A slide-in panel shows every finding with severity, file location, and a concrete suggestion for how to fix it.
Webhook: fully automatic
Set up a GitHub webhook and DiffWise posts a review comment automatically on every PR open, push, or reopen — no button click needed.

Get started

Up and running in 5 minutes

Choose how you want to use DiffWise. Both options are completely free.

🧩 Chrome Extension
⚡ GitHub Webhook
1
Install the Chrome extension
Download the extension ZIP, unzip it, then go to chrome://extensions → Enable Developer Mode → Load Unpacked → select the extension/ folder.
2
No server setup needed
The extension connects to DiffWise's servers automatically — just install and go. Nothing to configure.
3
Open any GitHub PR and click DiffWise
Navigate to any pull request. Click the 🔍 DiffWise button in the PR header. Results appear in the slide-in panel.
1
Go to your GitHub repo settings
Navigate to your repository → Settings → Webhooks → Add webhook
2
Configure the webhook
Set the Payload URL to your DiffWise server + /webhook, content type to application/json, and select Pull requests as the only event.
3
Open a PR — DiffWise posts automatically
Every time a PR is opened, pushed to, or reopened, DiffWise runs all 4 agents and posts a detailed review comment with findings and suggestions.
100% free, forever
DiffWise is completely free to use. No credit card, no usage limits that matter, no hidden costs.
✓ Groq free tier ✓ Open source ✓ Self-hostable ✓ No data retention