Security-aware AI code review

Get Senior-Level DiffNova Code Insights on Every PR, Proactively.

Inline feedback on GitHub when a PR opens. Catch security flaws before they merge, with weighted scoring by repo and contributor.

Watch demo
Monthly plans from $20. Unused credits carry over.
PULL REQUEST #418
SECURITY DASHBOARD
32const payload = JSON.parse(body);
33await handleBuyer(payload);
34if (!verify(body, sig))
35  throw new Error("bad signature");
64
/100
CRITICALVULNERABILITY DETECTED
Security Coverage 72%
Vulnerability Count 3
Codebase Quality Index 88%
AUTHENTICATION BYPASS

“handleBuyer” is executed before the signature check, allowing an unauthenticated caller to trigger buyer state changes.

SUGGESTED FIX
verify(body, sig) → await handleBuyer(payload)
Product walkthrough

See DiffNova in action.

From sign-in to a scored pull request, in under a minute.

0:53
01
Sign in with GitHub

One click with GitHub OAuth. No password, no setup form.

02
Review on every PR

Inline comments with severity, a security flag and a suggested fix.

03
Security-weighted scores

One score out of 100 per pull request, repository and contributor.

04
Credits, not seats

Prepaid credits from $20 a month. Reviews pause at $0.

About DiffNova

Review depth of a staff engineer, at the speed of CI.

DiffNova reviews your pull request, comments where the risk is, and rolls findings into a security-weighted score.

AI-Driven Insights

Every pull request is reviewed for security and quality issues, with findings ranked by severity.

Inline GitHub Feedback

Comments land on the PR as inline notes plus a summary — right where your team already reviews.

Security-Weighted Scores

Findings roll up into one score per repository and per contributor, weighted by real risk.

Solutions

Four steps from pull request to scored, safely.

01

Continue with GitHub

Sign in with GitHub OAuth. Your org is ready in one click.

02

Install the App

Connect the DiffNova GitHub App and choose which repositories to review.

03

Review on every PR

Open a pull request — DiffNova posts inline findings and a summary comment.

04

Track the score

Security-weighted scores per repo and contributor show where risk concentrates.

Technology

Security-weighted scoring, not a generic lint pass.

Findings are weighted by severity — a critical auth bypass moves the score far more than a style nit. Scores roll up per repository and per contributor.

→Inline findings with severity and a suggested fix
→Scores by repository and by git author
→Transparent credits — you see the cost of each run
→Reviews pause the moment your balance hits zero
$20
Plans start at / month
$0
Surprise invoices — reviews pause
BYOK
Bring your OpenAI or Claude key
GitHub
Native App + OAuth login
Pricing

Credits, not seats.

Prepaid LLM credits each month. Unused credits carry over. Or bring your own OpenAI / Claude key for $5/mo.

Starter
$20/mo
$20 LLM credits each month
AI PR reviews + inline GitHub comments
Repo & PR dashboards
GPT-4.1 reviews (fixed model)
Unused credits carry over
Reviews pause at $0
Growth
POPULAR
$30/mo
$30 LLM credits each month
Everything in Starter
Contributor scoreboard
Pick your review model
Larger monthly credit balance
Pro
$50/mo
$50 LLM credits each month
Everything in Growth
Manual re-review from dashboard
Highest monthly credit balance
Unused credits carry over

Start securing your code.
properly.

Activate security-weighted scoring and AI reviews with prepaid credits that stop at zero.