LaunchedEditorial Listing

LiveReview

Hexmos · LiveReview: Risk-Aware AI Code Review That Scores Every Pull Request and Auto-Approves Low-Risk Changes

Open LiveReview

LiveReview is an AI code review system from Hexmos that gives every pull request a risk score, approves the low-risk ones automatically under a policy you set, and sends the rest to human reviewers with the riskiest code ranked first. It suits engineering teams on GitHub, GitLab, Bitbucket, Gitea or Azure DevOps whose review queue has become the bottleneck as more code comes from AI assistants.

PricingFreemium
Setupeasy
Runs onWeb · Self-hosted · API
APIYes
Open sourceNo
DocsYes
CategoryCoding
Code ReviewPull Request ReviewPull RequestsRisk ScoringGitHubGitLabBitbucketAzure DevOpsGiteaCLIIDE ExtensionVS CodeClaude CodeCI/CDStatic AnalysisSelf-HostedSource-AvailableBYOKLocal ModelsMCPSlackMicrosoft TeamsAnalytics

Best for

Engineering teams with more pull requests than senior reviewers, especially teams merging a lot of AI-written code across GitHub, GitLab, Bitbucket, Gitea or Azure DevOps, who want an automated decision on which changes need a human, workload-based pricing with unlimited users, and the option to self-host

Not ideal for

Teams that need an OSI-licensed reviewer, organizations that require SOC 2 Type II from vendors, teams unwilling to let any pull request merge without a human approval, and teams that do not track incidents or reverts and so would not feed the risk model

Who it's for

Engineering managers, tech leads and platform teams responsible for review throughput and production stability, plus developers who want commit-time reviews in their terminal or editor

Capabilities

  • Risk score for every pull request that blends semantic LLM analysis, an organization-specific ML model retrained on the reverts and incidents you record, and static graph analysis of the whole codebase
  • Auto-approval of low-risk pull requests under a conservative, balanced or aggressive policy, with the decision explained on the PR, force-approve with a recorded reason, and replay of a draft policy on recent PRs before it goes live
  • Approval calibration reporting: approved versus blocked per stage, override rate, and false-approve rate (approved changes later reverted or tied to an incident)
  • Per-hunk Blast Radius and Review Priority scores that rank the whole diff by risk, so reviewers start with the riskiest code
  • Review checkpoints at commit (git-lrc hook), before push, on the MR/PR, in CI/CD via webhook, and as scheduled cron sweeps of the default branch, switched on per repository
  • git-lrc commit-time reviews of staged changes with review, vouch or skip, recorded in the Git log; claude-lrc adds /lrc:review, /lrc:vouch and /lrc:skip inside Claude Code
  • Cognitive Coverage: a 60-second slide summary deck for every review and a short quiz generated from the diff to check the author understood the change
  • Issue Navigator that filters findings by severity, category and area across a 10-category, 100+ pattern risk taxonomy, sends selected issues to Claude for fixing, and takes thumbs up/down feedback
  • Repository Rules in a .lrc/ folder (an ignore file plus Markdown rule files read on every review) and org-wide custom review prompts
  • CI/CD Gates written as jq expressions over a review's findings, previewed live against past reviews and enforced from any pipeline with one HTTP call
  • Livi, an assistant that answers questions about review data with charts on the web or in Slack, Microsoft Teams and Discord, plus a one-click Impact Report exportable as PDF or HTML
  • MCP server and REST API for triggering reviews and querying review history from AI agents, scripts and CI

Limitations

  • Source-available, not open source: the code is under a modified Sustainable Use License that bars resale, competing hosted services and bypassing license tiers, and files marked .ee require an Enterprise licence; git-lrc uses the same license
  • A self-hosted install without a purchased licence runs on the free 30K reviewed-LOC monthly allowance; unlimited LOC requires a licence obtained through Hexmos
  • The pricing page lists self-hosted deployment, SSO and directory sync, and local or self-hosted AI models as Enterprise features with sales-quoted pricing
  • The cloud Free plan is limited to 3 team members
  • The 30-50% auto-approval figure is a vendor target, and the headline outcome numbers (50x fewer incidents, 3x fewer rollbacks) are Meta's reported RADAR results rather than LiveReview measurements
  • The organization-specific risk model learns from reverts and incidents your team records, and the product pages do not say how much history it needs before its scores are reliable
  • Hexmos states LiveReview is not SOC 2 Type II certified
  • Repository Policies and running static analyzers such as Semgrep or ESLint alongside AI review are listed as coming soon
  • Self-hosting needs Linux or macOS with Docker, bash and jq; the one-command demo mode is localhost-only without webhooks, and production use needs a reverse proxy setup
  • Hexmos labels some AI backends experimental rather than fully tested

Use cases

  • Letting low-risk pull requests such as copy changes, dependency bumps or isolated UI tweaks merge without waiting for a senior reviewer
  • Ranking the hunks of a large pull request so reviewers read the shared auth or database code before the cosmetic changes
  • Running a commit-time review on every developer's machine with git-lrc, with skipped reviews visible in the Git log
  • Blocking merges in GitHub Actions, GitLab CI or Azure Pipelines with a team-specific jq rule, such as any security finding or any critical correctness bug
  • Checking that engineers understand AI-written changes through summary decks and PR quizzes
  • Answering engineering-leadership questions about review adoption, issue hotspots and review cost from Slack or Teams

Our take

LiveReview's useful idea is to treat review capacity as the scarce resource and spend it by risk: score every change, let the dull ones through, and rank what remains by how far each hunk reaches. The policy replay and false-approve reporting are the right safeguards for that approach, and they matter more than the headline percentage, because the 30-50% figure is Hexmos's target and the dramatic incident numbers belong to Meta's RADAR work. The incident-trained model is also only as good as the outcome data a team records, so expect the early weeks to rest mostly on the LLM and code-graph signals. Pricing by reviewed LOC with unlimited users is easy to budget and favors large teams with modest change volume, while teams shipping very large diffs should estimate which band they will land in. Buyers who need SOC 2 Type II or an OSI license should look elsewhere; teams that want a reviewer they can self-host and audit across five Git hosts, and that are comfortable with fair-code licensing, should put it on the shortlist.

Who should use it

Engineering teams whose senior reviewers are the bottleneck, particularly those merging a lot of AI-generated code, who are willing to let well-scored low-risk changes merge without a human, track incidents and reverts, and want predictable workload-based pricing or a self-hosted reviewer.

Who should skip it

Teams whose policy requires a human approval on every change, organizations that need SOC 2 Type II or an OSI-approved license, and teams that want a mature, long-established product rather than one that only reached general availability in November 2026.

Strengths

  • Decides which pull requests need a human at all, with a replayable policy and a false-approve rate to keep the automation honest
  • Per-hunk risk ranking points reviewers at the code with the widest reach instead of spreading attention evenly
  • Works across GitHub, GitLab, Bitbucket, Gitea and Azure DevOps, plus commit-time review in any Git repository
  • Pricing follows reviewed LOC in fixed public bands with unlimited users, rather than seats or tokens
  • Code is source-available and self-hosts with Docker, with bring-your-own-key support for Gemini, OpenAI, Anthropic, AWS Bedrock, DeepSeek and OpenRouter
  • Summary decks and PR quizzes address the problem of engineers approving AI-written code they did not read

Weaknesses

  • Not open source in the OSI sense: the Sustainable Use License restricts commercial redistribution and competing services
  • Newly generally available, and its outcome claims lean on Meta's RADAR results rather than published LiveReview data
  • The incident-trained model only helps if the team records incidents and reverts
  • SSO, local models and supported self-hosting at scale require a sales-quoted Enterprise plan, and there is no SOC 2 Type II certification
  • The Free cloud plan caps teams at 3 members

LiveReview pricing

Free

$0

Billed monthly

  • 30K reviewed LOC per month, up to 3 team members, unlimited projects
  • Risk-based auto-approve, AI discussion on PRs, engineering insights dashboard
  • LiveReview AI included or bring your own keys; one-click GitHub App, git-lrc CLI and VS Code extension

Premium

From $32/month (100K LOC) to $1,024/month (3.2M LOC)

Billed monthly

  • Fixed bands: $32 for 100K, $64 for 200K, $128 for 400K, $256 for 800K, $512 for 1.6M, $1,024 for 3.2M reviewed LOC
  • Unlimited team members and multiple organizations
  • AI review summaries, hosted cloud AI models, full API access, prioritized support

Enterprise

Contact sales

  • Self-hosted deployment and self-hosted AI models (optional)
  • SSO and directory sync (SAML/OIDC with SCIM deprovisioning), custom domain, full data control
  • Custom integrations and dedicated SLA support

Free tier limits: 30,000 reviewed lines of code per month and up to 3 team members. A self-hosted install without a licence also runs on the free 30K LOC allowance.

Note: Billing counts only lines in the reviewed diff, not repository size, and files matched by the repository's .lrc ignore file do not count. Paid bands refresh monthly; if a band is not enough you move up to the next one rather than buying seats. Self-hosted licences for unlimited LOC are sold through Hexmos.

Technical specs

API pricing

REST API and MCP server authenticated with a LiveReview API key; the pricing comparison lists full API access on every plan and no separate API price is published

Available models

LiveReview fine-tuned modelGoogle GeminiOpenAIAnthropic ClaudeAWS BedrockDeepSeekOpenRouterOllama (local)

Where LiveReview excels

Clearing a review queue swollen by AI-written pull requests

Auto-approval takes the lowest-risk changes out of the queue, and per-hunk ranking tells reviewers where to look first in the ones that remain.

Rolling out auto-approval cautiously

Replaying a conservative policy on recent pull requests, then watching the override and false-approve rates, lets a team widen automation only as the data supports it.

Different review depth per repository

A throwaway repo can run commit-only checks while payments or auth repos use commit, push, PR, CI/CD gates and scheduled sweeps together.

Self-hosted AI review for sensitive code

The Docker deployment sends code straight to the team's chosen AI provider or a local Ollama model, with no vendor cloud in between, and the source can be audited.

LiveReview vs. competitors

LiveReview vs. CodeRabbit

CodeRabbit is a closed-source review service priced per developer that focuses on line-level comments, finishing-touch fixes, pre-merge checks, PR triage and security scanning, with optional auto-approval under a risk ceiling. LiveReview puts the approval decision first, with a risk model that learns from your incidents and reverts and false-approve reporting, prices by reviewed lines of code with unlimited users, adds Gitea support, and publishes its source for self-hosting.

LiveReview vs. Open Code Review

Open Code Review is Alibaba's Apache 2.0 review CLI that you run yourself in a terminal or CI with almost any model. LiveReview is a fuller platform with PR integration across five Git hosts, risk scoring, auto-approval, dashboards and merge gates, but its code is source-available rather than open source and higher usage is paid.

LiveReview vs. GitHub Copilot

GitHub Copilot is a coding assistant and agent that can also review pull requests on GitHub. LiveReview is a dedicated review system that runs across GitHub, GitLab, Bitbucket, Gitea and Azure DevOps and decides which changes can merge without a human, so teams often pair a coding assistant with an independent reviewer.

LiveReview vs. Entire

Entire is a Git forge where review agents score every push and Gates decide when a change can merge, replacing or mirroring GitHub. LiveReview keeps you on your existing Git host and adds risk scoring, auto-approval and checks on top of your current pull requests.

Frequently asked questions

What does LiveReview do?

LiveReview is an AI code review system that scores every pull request for risk. Low-risk pull requests can be approved automatically under a policy you choose, and the rest go to human reviewers with each hunk of the diff ranked by blast radius and review priority. It also reviews code at commit time through the git-lrc hook, before push, in CI/CD and on a schedule, and adds summary decks, PR quizzes, jq-based merge gates and an analytics assistant called Livi.

How does LiveReview decide which pull requests to auto-approve?

Each pull request gets a risk score built from three signals: an LLM's semantic analysis of the change, an ML model specific to your organization that retrains on the reverts and incidents you record, and static analysis of your codebase's call graph. You choose a conservative, balanced or aggressive policy, can replay a draft policy on recent pull requests before enabling it, and can force-approve with a recorded reason. Hexmos says the lowest-risk 30-50% of pull requests typically qualify; that figure is the vendor's.

How much does LiveReview cost?

The Free plan includes 30,000 reviewed lines of code a month for up to 3 team members, with LiveReview's own AI included or your own API keys. Premium is billed by monthly reviewed LOC with unlimited users: $32 for 100K, $64 for 200K, $128 for 400K, $256 for 800K, $512 for 1.6M and $1,024 for 3.2M. Enterprise, which adds self-hosting, SSO and self-hosted AI models, is priced through sales. Only lines in the reviewed diff count, not the size of the repository.

Is LiveReview open source?

No. The full source is on GitHub, but under a modified Sustainable Use License, a fair-code license that allows self-hosting, internal business use and modification for your own use while prohibiting resale, offering it as a competing service, commercial redistribution and bypassing license tiers. Files marked .ee need an Enterprise licence. The git-lrc CLI uses the same license.

Can LiveReview be self-hosted?

Yes. It runs as Docker containers installed with one command on Linux or macOS. The quick demo mode is localhost-only without webhooks, and a production setup adds a reverse proxy. Without a licence a self-hosted install runs on the free 30K LOC monthly allowance; Hexmos sells licences for unlimited LOC, and self-hosted deployment is listed as an Enterprise feature on the pricing page. Self-hosted installs can call your chosen AI provider directly or a local Ollama model.

Which Git platforms and AI models does LiveReview support?

Pull request and merge request reviews work on GitHub, GitLab (including self-hosted), Bitbucket, Gitea and Azure DevOps, and git-lrc works with any Git host because it runs locally as a hook. LiveReview ships its own fine-tuned model, and you can bring your own key for Gemini, OpenAI, Anthropic, AWS Bedrock, DeepSeek or OpenRouter. Local Ollama models are supported too, though the pricing page lists local and self-hosted AI models under the Enterprise plan.

LiveReview vs CodeRabbit: what is the difference?

Both review pull requests across several Git platforms. CodeRabbit is a closed-source, per-developer service focused on review comments, fixes, pre-merge checks and security scanning, with optional auto-approval capped at a risk level. LiveReview centers on the approval decision itself, with a risk model that learns from your incidents and reverts and a calibration report on false approvals, prices by reviewed lines of code with unlimited users, and publishes its source for self-hosting.

Integrations & fit

GitHubGitLabBitbucketGiteaAzure DevOpsSlackMicrosoft TeamsDiscordVS CodeCursorGoogle AntigravityClaude CodeMCPGoogle GeminiOpenAIAnthropicAWS BedrockDeepSeekOpenRouterOllamaGitHub ActionsGitLab CIBitbucket PipelinesAzure Pipelines
Good fit forSolo / individual, Startup / small team, Enterprise
Pricing modelFreemium· Free tier available
See pricing on LiveReview →

Alternatives to consider

About LiveReview

Most AI reviewers add comments to every pull request and leave the merge decision to a person. LiveReview, which Hexmos announced as generally available on November 7, 2026, is built around a different question: does a human need to look at this change at all? Each pull request gets one risk score that blends three signals: an LLM's semantic read of the change, an ML model specific to your organization that retrains on the reverts and incidents you record, and a static graph of your codebase that measures how far the change reaches. Inside the diff, every hunk gets a Blast Radius score (how many places call the code, whether it writes to a database, whether callers sit in unrelated parts of the codebase) and a Review Priority score (branching complexity, loop nesting, how much it calls into, whether it has tests), so a three-line change to a shared auth check can outrank a 300-line UI tweak. On top of the score sits auto-approval: you pick a conservative, balanced or aggressive policy, can replay a draft policy against recent pull requests before turning it on, and get a calibration report of what was approved and blocked, the override rate and the false-approve rate. Hexmos says the lowest-risk 30-50% of pull requests can be approved this way; that is a vendor claim, and the 50x-fewer-incidents figures it cites come from Meta's internal RADAR system that inspired the design, not from LiveReview customers. Review can also run earlier than the pull request. git-lrc is a Git hook that reviews staged changes at commit time and records reviews, vouches and skips in the Git log, claude-lrc adds the same review inside Claude Code, and there are pre-push, CI/CD and scheduled default-branch checks, which you turn on per repository. Two features target engineers who approve code they did not really read: a 60-second summary deck for every review and a short quiz generated from the diff. Teams encode standards in a .lrc/ folder of rules in the repository, write merge gates as jq expressions over the review findings and call them from any CI pipeline, and ask an analytics assistant called Livi questions about review data on the web or in Slack, Microsoft Teams or Discord. Pricing follows reviewed lines of code rather than seats: 30,000 reviewed LOC a month free, then fixed bands from $32 for 100,000 LOC to $1,024 for 3.2 million, with unlimited users on paid plans. The code is on GitHub under a modified Sustainable Use License, which is source-available rather than open source, and it self-hosts with Docker; without a purchased licence a self-hosted install runs on the free 30K LOC allowance. The tradeoffs: the product is newly generally available, the incident-trained model only learns from outcomes your team records, SSO, local models and supported self-hosting sit on a sales-quoted Enterprise plan, and Hexmos says it is not SOC 2 Type II certified.

Updates from LiveReview

LaunchLiveReview is generally available with risk scoring and auto-approval

Hexmos announced LiveReview as generally available, positioning it as a risk-aware review system: every pull request gets a risk score from LLM analysis, an organization-specific ML model trained on incidents and reverts, and static code-graph analysis, and low-risk PRs can be approved automatically under a conservative, balanced or aggressive policy. The launch also highlighted per-hunk blast-radius scoring, summary decks and PR quizzes, jq-based CI/CD Gates and the Livi analytics assistant.

Are you the founder? Claim this listing →