Skip to main content
Manual code reviews create bottlenecks. Reviewers context-switch, PRs queue up, and feedback quality varies. AI-powered code review runs instantly on every PR, catching issues before a human reviewer even looks at the code.

​
How Fossa automates code review

Once connected, Fossa automatically reviews every pull request. It analyzes code for security vulnerabilities, performance issues, error handling, maintainability, and your custom rules — then posts comments directly in the PR.

​
Supported platforms

  • GitHub — via GitHub App
  • GitLab — via OAuth + webhooks
  • Bitbucket — via webhooks
  • Azure DevOps — via webhooks

​
What gets analyzed

By default, Fossa checks for:
  • Security issues (SQL injection, XSS, hardcoded secrets)
  • Performance problems (N+1 queries, missing indexes)
  • Error handling gaps
  • Potential bugs (null pointers, resource leaks)
  • Code style and maintainability
  • Your custom Fossy Rules
  • Business logic compliance (validates against linked task requirements)

​
Review cadence options

​
Getting started

  1. Create a workspace at fossa.local or self-host Fossa
  2. Connect your Git provider (GitHub, GitLab, Bitbucket, or Azure DevOps)
  3. Select which repositories to monitor
  4. Open a PR — Fossa reviews it automatically
For platform-specific setup, see: