How DevReview Works

From git push to inline PR comments in under 60 seconds. Here's the full pipeline — no marketing fluff.

The 60-second pipeline

🔀
PR opened
📡
Webhook
📥
Fetch diff
🧠
Claude review
💬
Inline comments
✅
You merge
⏱ Typical wall-clock time: 35-55 seconds end-to-end
1

Install the GitHub App

~30 seconds

Click 'Install on GitHub' from your dashboard and select which repositories DevReview should review. Permission scope is read-only on code, with comment-write access on PRs.

  • ▸GitHub App (not OAuth) — installed at the org or repo level
  • ▸Choose specific repos or grant access to all
  • ▸No manual webhook config — we register everything for you
  • ▸Uninstall anytime from GitHub's settings — full data deletion follows
2

Open a Pull Request

instant

When you push a branch and open a PR (or push new commits to an existing one), GitHub fires a webhook to DevReview. We immediately queue the review.

  • ▸Triggers: PR opened, PR reopened, new commits pushed
  • ▸Skipped automatically: draft PRs, bot PRs (Dependabot, Renovate)
  • ▸Webhook signed with HMAC-SHA256 — we verify every request
  • ▸Free plan limits to 5 reviews/month; Pro is unlimited
3

Fetch the Diff

~2-5 seconds

DevReview pulls the PR's file changes via GitHub's API using the installation's scoped credentials. We never clone the whole repo — only the changed files.

  • ▸Up to 20 files per PR (the most-changed ones first)
  • ▸Up to 12,000 characters per file (truncated with marker if larger)
  • ▸Generated files filtered out: lock files, minified bundles, build artifacts, images
  • ▸Binary files skipped automatically
4

AI Review with Claude Sonnet 4.5

~30-50 seconds

We send the diff to Anthropic's Claude Sonnet 4.5 with a carefully tuned prompt. The model identifies bugs, security issues, and suggestions — and importantly, knows when to stay quiet.

  • ▸Severity ranking: BUG (real defects) > WARN (security/perf) > NIT (style) > PRAISE
  • ▸Language-aware checks — Python mutable defaults, Go goroutine leaks, Rust unwrap misuse, etc.
  • ▸Framework-aware — React hooks rules, Next.js boundaries, Django ORM patterns
  • ▸Hard cap: 8 comments max per PR — we cut nits before bugs
  • ▸Code is processed only for the review and is not retained by Anthropic for training
5

Post Inline Comments

~2-5 seconds

DevReview converts Claude's findings into a single PR review with inline comments on the exact lines that need attention. If a line can't be matched, we fall back to a top-level PR comment so you never lose feedback.

  • ▸Comments are posted as a single review (one notification, not eight)
  • ▸Each comment includes severity, the issue, and a concrete suggested fix
  • ▸Bot author label: 'devreview[bot]' so you can filter or rule-block easily
  • ▸If you push new commits, a new review runs — old comments stay as audit trail
6

Iterate or Merge

your call

Read the comments, fix what matters, ignore what doesn't. DevReview is a first-pass reviewer — your judgment is the final word. Merge when you're ready.

  • ▸No 'block merge' enforcement — DevReview never blocks your CI
  • ▸You can dismiss the review or mark comments as resolved like any human review
  • ▸Subsequent pushes re-review automatically — no manual re-trigger
  • ▸Total wall-clock time from PR open to comments: typically under 60 seconds

Under the hood

For the curious, here's the actual stack — no proprietary black boxes:

Infrastructure

  • ▸ Hosting: Vercel (Next.js 14 App Router)
  • ▸ Database: PostgreSQL via Drizzle ORM
  • ▸ Auth: NextAuth + GitHub OAuth
  • ▸ Payments: Stripe Checkout + Customer Portal

AI & integrations

  • ▸ AI model: Claude Sonnet 4.5 (Anthropic)
  • ▸ GitHub: GitHub App (not OAuth) for repo scoping
  • ▸ Octokit: Official GitHub SDK for diff fetch & comments
  • ▸ Webhooks: HMAC-SHA256 signature verification

What we do (and don't) with your code

✓ What we do

  • • Read PR diffs to generate the review
  • • Send diffs to Anthropic's Claude API for analysis
  • • Store review metadata (which repo, when, summary) for your dashboard
  • • Post inline comments back to the PR

✗ What we don't do

  • • Store your raw source code after a review completes
  • • Use your code to train AI models (Anthropic's enterprise terms apply)
  • • Read repos you didn't authorize the GitHub App on
  • • Share data with third parties beyond Stripe (billing) and Anthropic (review)

Full details in our Privacy Policy.

Ready to try it?

Install the GitHub App, open a PR, get a review. No credit card needed for the trial.

Start Free Trial

14 days free · 5 reviews/month free forever after that · Cancel anytime