Hexmos · LiveReview: Risk-Aware AI Code Review That Scores Every Pull Request and Auto-Approves Low-Risk Changes
LiveReview is an AI code review system from Hexmos that gives every pull request a risk score, approves the low-risk ones automatically under a policy you set, and sends the rest to human reviewers with the riskiest code ranked first. It suits engineering teams on GitHub, GitLab, Bitbucket, Gitea or Azure DevOps whose review queue has become the bottleneck as more code comes from AI assistants.
Best for
Engineering teams with more pull requests than senior reviewers, especially teams merging a lot of AI-written code across GitHub, GitLab, Bitbucket, Gitea or Azure DevOps, who want an automated decision on which changes need a human, workload-based pricing with unlimited users, and the option to self-host
Not ideal for
Teams that need an OSI-licensed reviewer, organizations that require SOC 2 Type II from vendors, teams unwilling to let any pull request merge without a human approval, and teams that do not track incidents or reverts and so would not feed the risk model
Who it's for
Engineering managers, tech leads and platform teams responsible for review throughput and production stability, plus developers who want commit-time reviews in their terminal or editor
LiveReview's useful idea is to treat review capacity as the scarce resource and spend it by risk: score every change, let the dull ones through, and rank what remains by how far each hunk reaches. The policy replay and false-approve reporting are the right safeguards for that approach, and they matter more than the headline percentage, because the 30-50% figure is Hexmos's target and the dramatic incident numbers belong to Meta's RADAR work. The incident-trained model is also only as good as the outcome data a team records, so expect the early weeks to rest mostly on the LLM and code-graph signals. Pricing by reviewed LOC with unlimited users is easy to budget and favors large teams with modest change volume, while teams shipping very large diffs should estimate which band they will land in. Buyers who need SOC 2 Type II or an OSI license should look elsewhere; teams that want a reviewer they can self-host and audit across five Git hosts, and that are comfortable with fair-code licensing, should put it on the shortlist.
Who should use it
Engineering teams whose senior reviewers are the bottleneck, particularly those merging a lot of AI-generated code, who are willing to let well-scored low-risk changes merge without a human, track incidents and reverts, and want predictable workload-based pricing or a self-hosted reviewer.
Who should skip it
Teams whose policy requires a human approval on every change, organizations that need SOC 2 Type II or an OSI-approved license, and teams that want a mature, long-established product rather than one that only reached general availability in November 2026.
Free
$0
Billed monthly
Premium
From $32/month (100K LOC) to $1,024/month (3.2M LOC)
Billed monthly
Enterprise
Contact sales
Free tier limits: 30,000 reviewed lines of code per month and up to 3 team members. A self-hosted install without a licence also runs on the free 30K LOC allowance.
Note: Billing counts only lines in the reviewed diff, not repository size, and files matched by the repository's .lrc ignore file do not count. Paid bands refresh monthly; if a band is not enough you move up to the next one rather than buying seats. Self-hosted licences for unlimited LOC are sold through Hexmos.
API pricing
REST API and MCP server authenticated with a LiveReview API key; the pricing comparison lists full API access on every plan and no separate API price is published
Available models
Clearing a review queue swollen by AI-written pull requests
Auto-approval takes the lowest-risk changes out of the queue, and per-hunk ranking tells reviewers where to look first in the ones that remain.
Rolling out auto-approval cautiously
Replaying a conservative policy on recent pull requests, then watching the override and false-approve rates, lets a team widen automation only as the data supports it.
Different review depth per repository
A throwaway repo can run commit-only checks while payments or auth repos use commit, push, PR, CI/CD gates and scheduled sweeps together.
Self-hosted AI review for sensitive code
The Docker deployment sends code straight to the team's chosen AI provider or a local Ollama model, with no vendor cloud in between, and the source can be audited.
LiveReview vs. CodeRabbit
CodeRabbit is a closed-source review service priced per developer that focuses on line-level comments, finishing-touch fixes, pre-merge checks, PR triage and security scanning, with optional auto-approval under a risk ceiling. LiveReview puts the approval decision first, with a risk model that learns from your incidents and reverts and false-approve reporting, prices by reviewed lines of code with unlimited users, adds Gitea support, and publishes its source for self-hosting.
LiveReview vs. Open Code Review
Open Code Review is Alibaba's Apache 2.0 review CLI that you run yourself in a terminal or CI with almost any model. LiveReview is a fuller platform with PR integration across five Git hosts, risk scoring, auto-approval, dashboards and merge gates, but its code is source-available rather than open source and higher usage is paid.
LiveReview vs. GitHub Copilot
GitHub Copilot is a coding assistant and agent that can also review pull requests on GitHub. LiveReview is a dedicated review system that runs across GitHub, GitLab, Bitbucket, Gitea and Azure DevOps and decides which changes can merge without a human, so teams often pair a coding assistant with an independent reviewer.
LiveReview vs. Entire
Entire is a Git forge where review agents score every push and Gates decide when a change can merge, replacing or mirroring GitHub. LiveReview keeps you on your existing Git host and adds risk scoring, auto-approval and checks on top of your current pull requests.
What does LiveReview do?
LiveReview is an AI code review system that scores every pull request for risk. Low-risk pull requests can be approved automatically under a policy you choose, and the rest go to human reviewers with each hunk of the diff ranked by blast radius and review priority. It also reviews code at commit time through the git-lrc hook, before push, in CI/CD and on a schedule, and adds summary decks, PR quizzes, jq-based merge gates and an analytics assistant called Livi.
How does LiveReview decide which pull requests to auto-approve?
Each pull request gets a risk score built from three signals: an LLM's semantic analysis of the change, an ML model specific to your organization that retrains on the reverts and incidents you record, and static analysis of your codebase's call graph. You choose a conservative, balanced or aggressive policy, can replay a draft policy on recent pull requests before enabling it, and can force-approve with a recorded reason. Hexmos says the lowest-risk 30-50% of pull requests typically qualify; that figure is the vendor's.
How much does LiveReview cost?
The Free plan includes 30,000 reviewed lines of code a month for up to 3 team members, with LiveReview's own AI included or your own API keys. Premium is billed by monthly reviewed LOC with unlimited users: $32 for 100K, $64 for 200K, $128 for 400K, $256 for 800K, $512 for 1.6M and $1,024 for 3.2M. Enterprise, which adds self-hosting, SSO and self-hosted AI models, is priced through sales. Only lines in the reviewed diff count, not the size of the repository.
Is LiveReview open source?
No. The full source is on GitHub, but under a modified Sustainable Use License, a fair-code license that allows self-hosting, internal business use and modification for your own use while prohibiting resale, offering it as a competing service, commercial redistribution and bypassing license tiers. Files marked .ee need an Enterprise licence. The git-lrc CLI uses the same license.
Can LiveReview be self-hosted?
Yes. It runs as Docker containers installed with one command on Linux or macOS. The quick demo mode is localhost-only without webhooks, and a production setup adds a reverse proxy. Without a licence a self-hosted install runs on the free 30K LOC monthly allowance; Hexmos sells licences for unlimited LOC, and self-hosted deployment is listed as an Enterprise feature on the pricing page. Self-hosted installs can call your chosen AI provider directly or a local Ollama model.
Which Git platforms and AI models does LiveReview support?
Pull request and merge request reviews work on GitHub, GitLab (including self-hosted), Bitbucket, Gitea and Azure DevOps, and git-lrc works with any Git host because it runs locally as a hook. LiveReview ships its own fine-tuned model, and you can bring your own key for Gemini, OpenAI, Anthropic, AWS Bedrock, DeepSeek or OpenRouter. Local Ollama models are supported too, though the pricing page lists local and self-hosted AI models under the Enterprise plan.
LiveReview vs CodeRabbit: what is the difference?
Both review pull requests across several Git platforms. CodeRabbit is a closed-source, per-developer service focused on review comments, fixes, pre-merge checks and security scanning, with optional auto-approval capped at a risk level. LiveReview centers on the approval decision itself, with a risk model that learns from your incidents and reverts and a calibration report on false approvals, prices by reviewed lines of code with unlimited users, and publishes its source for self-hosting.

CodeRabbit Inc.
Engineering teams on GitHub (and to a slightly lesser degree GitLab, Bitbucket or Azure DevOps) with more pull requests than reviewers, especially teams merging a lot of agent-written code, who want an automatic first review, merge gates and follow-up fixes, and optionally PR-level security review
FreemiumAlibaba Group
Engineering and platform teams that want an open-source, self-run AI reviewer with precise line-level comments, full control over which model sees their code, and ready-made CI integrations
FreeMost AI reviewers add comments to every pull request and leave the merge decision to a person. LiveReview, which Hexmos announced as generally available on November 7, 2026, is built around a different question: does a human need to look at this change at all? Each pull request gets one risk score that blends three signals: an LLM's semantic read of the change, an ML model specific to your organization that retrains on the reverts and incidents you record, and a static graph of your codebase that measures how far the change reaches. Inside the diff, every hunk gets a Blast Radius score (how many places call the code, whether it writes to a database, whether callers sit in unrelated parts of the codebase) and a Review Priority score (branching complexity, loop nesting, how much it calls into, whether it has tests), so a three-line change to a shared auth check can outrank a 300-line UI tweak. On top of the score sits auto-approval: you pick a conservative, balanced or aggressive policy, can replay a draft policy against recent pull requests before turning it on, and get a calibration report of what was approved and blocked, the override rate and the false-approve rate. Hexmos says the lowest-risk 30-50% of pull requests can be approved this way; that is a vendor claim, and the 50x-fewer-incidents figures it cites come from Meta's internal RADAR system that inspired the design, not from LiveReview customers. Review can also run earlier than the pull request. git-lrc is a Git hook that reviews staged changes at commit time and records reviews, vouches and skips in the Git log, claude-lrc adds the same review inside Claude Code, and there are pre-push, CI/CD and scheduled default-branch checks, which you turn on per repository. Two features target engineers who approve code they did not really read: a 60-second summary deck for every review and a short quiz generated from the diff. Teams encode standards in a .lrc/ folder of rules in the repository, write merge gates as jq expressions over the review findings and call them from any CI pipeline, and ask an analytics assistant called Livi questions about review data on the web or in Slack, Microsoft Teams or Discord. Pricing follows reviewed lines of code rather than seats: 30,000 reviewed LOC a month free, then fixed bands from $32 for 100,000 LOC to $1,024 for 3.2 million, with unlimited users on paid plans. The code is on GitHub under a modified Sustainable Use License, which is source-available rather than open source, and it self-hosts with Docker; without a purchased licence a self-hosted install runs on the free 30K LOC allowance. The tradeoffs: the product is newly generally available, the incident-trained model only learns from outcomes your team records, SSO, local models and supported self-hosting sit on a sales-quoted Enterprise plan, and Hexmos says it is not SOC 2 Type II certified.
Hexmos announced LiveReview as generally available, positioning it as a risk-aware review system: every pull request gets a risk score from LLM analysis, an organization-specific ML model trained on incidents and reverts, and static code-graph analysis, and low-risk PRs can be approved automatically under a conservative, balanced or aggressive policy. The launch also highlighted per-hunk blast-radius scoring, summary decks and PR quizzes, jq-based CI/CD Gates and the Livi analytics assistant.
Are you the founder? Claim this listing →