Pull Request Review

Pull Request Review (PR Review) is AISafe's automated security review for pull requests. When enabled on a Project, each PR against the project's repository gets a focused security audit of the changed paths. The agent posts inline comments with severity ratings and fix suggestions directly on the PR, so developers get security feedback inside their existing code review workflow.

What it does

• Monitors pull requests on the connected repositories of a project.
• Fetches the PR diff and analyzes the changed files using the project's living knowledge base for context.
• Posts a review on the PR with inline comments on specific lines, severity ratings, and suggested fixes.

What it is not

PR Review is not a full assessment. It reviews only the changed paths of a pull request, not the whole codebase. For a complete audit of your code, use Source Code Audit. To understand the difference, see Code audit.

Chapters

• How it works — the review flow from PR to inline comments.
• Set up PR review — enable PR review on a project.
• How to respond — reading and fixing the inline comments.
• FAQ — common questions.

Next steps

• Guide: Set up PR review — step-by-step setup walkthrough.
• Concepts: Project — the continuous security entity that owns PR review.