Gemini Code Assist
Google Cloud's AI coding assistant for IDEs and Google Cloud, with a GitHub app posting PR summaries and severity-tagged reviews.
Deployment
Cloud
Languages
44+
Pricing model
Per developer seat, Usage-based credits, Quote-based
Free plan
Partial
Partial means the documentation covers only part of a capability, a related capability, or a beta. The description next to it says what is covered.
Workflow coverage
Where in the development lifecycle Gemini Code Assist operates.
1 yes 3 partial 4 no
| Feature | Availability | Description |
|---|---|---|
| Real-Time IDE Feedback | Partial | Real-time inline completions, chat and refactoring across IDEs; no real-time issue detection documented. |
| AI Agent Guardrails | No | No MCP-based guardrail hook for third-party AI agents; Code Assist is an MCP client, not a guardrail server. |
| Local Analysis (Pre-Commit) | Partial | Gemini CLI runs agentic tasks in the terminal; no pre-commit hook or local review command documented. |
| Inline PR Comments | Yes | gemini-code-assist bot auto-added as reviewer; comments on modified code with committable inline suggestions. |
| Quality Gates (Merge Blocking) | No | No status check or required check blocking merges documented; PR review only posts comments. |
| Full Repo Scan | No | PR review analyzes diffs only; Code Customization indexes repos for completion context, not scanning. |
| Scheduled Rescans | Partial | run-gemini-cli GitHub Action workflows support cron schedules; no native scheduled security/code rescan. |
| Runtime Monitoring | No | No DAST, WAF, or live/production monitoring documented anywhere in the product's feature table. |
Security scanning
3 yes 10 no
| Feature | Availability | Description |
|---|---|---|
| SAST | Yes | PR review flags injection, CSRF, IDOR, input-validation and insecure-storage issues in changed code. |
| Taint Analysis (Data-Flow) | No | Security extension covers injection categories via diff-scoped LLM analysis; no cross-file dataflow engine described. |
| Secrets Detection | Yes | First-party Gemini CLI Security extension flags hardcoded credentials and keys in diffs. |
| Secrets Validation | No | Extension detects hardcoded secrets by pattern; no live validation of whether a secret still works. |
| SCA | Yes | Optional extension's /security:scan-deps runs OSV-Scanner against declared deps for known CVEs. |
| Reachability Analysis | No | OSV-Scanner reports known CVEs in declared deps only; no call-path/reachability analysis documented. |
| Malicious Package Detection | No | Dependency scan covers known CVEs only; no typosquat or malicious-package detection documented. |
| License Compliance | No | Dependency-scan section covers only known vulnerabilities; no license identification or policy documented. |
| SBOM Generation | No | No CycloneDX/SPDX export documented in the Security extension or Code Assist docs. |
| IaC Scanning | No | Documented vulnerability categories omit Terraform/CloudFormation/K8s/Dockerfile misconfiguration. |
| Container Scanning | No | No container image or base-image CVE scanning documented anywhere in the product. |
| CSPM | No | No live cloud config/posture scanning documented; Cloud Assist covers ops, not CSPM. |
| DAST | No | Security extension analyzes static code changes only; no running-app or API exercising documented. |
Code quality
1 yes 8 no
| Feature | Availability | Description |
|---|---|---|
| Code Smell Detection | Yes | Maintainability review category covers readability, modularity, naming, documentation, magic numbers, inconsistent formatting. |
| Complexity Metrics | No | "Complex code" is named as a maintainability review target; no cyclomatic or tracked metric documented. |
| Duplication Detection | No | Code duplication named as a maintainability review concern; no duplication metric or detector documented. |
| Dead Code Detection | No | Maintainability targets (naming, comments, duplication, magic numbers) never mention dead/unreachable code. |
| Test Coverage Tracking | No | "Testing" is a listed Miscellaneous review topic; no coverage ingestion, report, or percentage documented. |
| Diff Coverage (New Code) | No | No new-code or changed-lines coverage gate documented anywhere in Gemini Code Assist docs. |
| Architecture Governance | No | "Modularity and reusability" is qualitative commentary; no module-boundary enforcement documented. |
| Technical Debt Quantification | No | Findings are severity-tagged PR comments; no time/cost remediation quantification documented. |
| Behavioral Code Analysis | No | No git-history hotspot, change-coupling, or bus-factor analytics documented. |
AI review & fixes
3 yes 1 partial 1 no
| Feature | Availability | Description |
|---|---|---|
| AI Logic Bug Detection | Yes | Correctness review category covers logic errors, edge cases, race conditions and incorrect API usage. |
| PR Summaries & Walkthroughs | Yes | Auto-generated natural-language PR summary on open, plus on-demand '/gemini summary'. |
| Autofix Suggestions | Yes | Inline code suggestions in PR reviews that can be committed directly from GitHub. |
| Autofix Pull Requests | No | Not offered in vendor documentation reviewed as of 2026-09-05. |
| AI Triage (False-Positive Filtering) | Partial | Severity threshold, max-comment cap and ignore_patterns tune noise; no false-positive triage documented. |
Rules & repo support
1 yes 1 partial
| Feature | Availability | Description |
|---|---|---|
| Custom Rule Authoring | Yes | Natural-language styleguide.md in .gemini/, per repository or managed across repos from Cloud console. |
| Monorepo Support | Partial | Multiple separate repositories can be selected as chat context; scanning or configuring multiple packages within a single repository is not documented. |
AI capabilities
4 yes 2 partial 1 no
| Feature | Availability | Description |
|---|---|---|
| AI Code Review | Yes | PR reviews, chat and completions all run on Gemini foundation models with automatic model selection. |
| Bring Your Own Model | Yes | Buyer can supply their own Gemini API key for the CLI; Gemini models only. |
| MCP Server | Partial | Agent Mode and Gemini CLI consume local and remote MCP servers; no MCP server exposing review findings. |
| AI Code Governance | No | No AI-generated-code governance; built-in telemetry tracks adoption and usage events instead. |
| Conversational Review | Yes | Ask clarifying follow-up questions on Gemini's review in PR comments; /gemini slash commands. |
| Learning From Feedback | Partial | memory_config enables persistent per-repository memory; feedback forms collected, no documented review-tuning loop. |
| Code Excluded From Training | Yes | Google does not use customer data to train models without permission; service stateless, no prompt storage by default. |
Models used
Gemini 3.1 Pro (public preview)Gemini 3.5 Flash (generally available)
Compliance & governance
2 yes 1 partial 1 no
| Feature | Availability | Description |
|---|---|---|
| Audit Logs | Partial | Optional Cloud Logging bucket can store inputs and responses; no dedicated admin audit log documented. |
| SSO (SAML) | Yes | Cloud Identity or Google Workspace accounts with support for externally federated identity providers and 2-step verification. |
| Role-Based Access Control | Yes | IAM-based access control built on least privilege; roles recommended at developer-group level. |
| Compliance Reporting & Exports | No | Not offered in vendor documentation reviewed as of 2026-09-05. |
Certifications
ISO 27001ISO 27017ISO 27018ISO 27701SOC 1SOC 2SOC 3
Standards mapping
SLSA
Integrations
3 yes 6 partial 1 no
| Git provider | Availability |
|---|---|
| GitHub | Yes |
| GitHub Enterprise Server | Yes |
| GitLab | Partial |
| GitLab Self-Managed | Partial |
| Bitbucket | Partial |
| Bitbucket Data Center | Partial |
| Azure DevOps | Partial |
| API & CLI | Availability |
|---|---|
| REST API | Partial |
| CLI | Yes |
| Webhooks | No |
IDEs
VS CodeIntelliJ IDEA (Community, Educational, Ultimate)PyCharm (Community, Professional)CLionDataGripGoLandPhpStormRiderRubyMineWebStormCloud Shell EditorCloud WorkstationsAndroid StudioColab Enterprise
Languages
Languages and frameworks named in Gemini Code Assist's documentation.
BashCC++C#DartGoGoogleSQLJavaJavaScriptKotlinLuaMATLABPHPPythonRRubyRustScalaSQLSwiftTypeScriptYAML
Pricing & plans
$19.00/user/month billed annually via 12-month commitment ($22.80/user/month if billed monthly), Standard edition
Trial: Free trial available for evaluation; length and terms are not stated in Google's documentation
Gemini Code Assist StandardCustom pricing - contact Google CloudCustomers with basic coding needs; organizations with strict data security and compliance requirements
- Code completion and generation, AI chat, simplified UI and IDE integration
- Local codebase awareness in the IDE with large context window
- Source citations and IP indemnification (Generative AI Indemnified Service)
- VPC Service Controls and Private Google Access
- Integrations: Firebase, Colab Enterprise, BigQuery data insights, Cloud Run, Database Studio
- Gemini CLI and Agent Mode with included shared quota
- No Gemini Cloud Assist, Gemini in Apigee or Gemini in Application Integration
- No Code Customization on private repositories
- Price not published
- Available across only 'some' Google Cloud services
Gemini Code Assist EnterpriseCustom pricing - contact Google CloudLarge enterprises with complex development, wanting customization on private source code and broader Google Cloud coverage
- All Standard features
- Code Customization from private GitHub, GitLab and Bitbucket repositories
- Gemini Cloud Assist in the Google Cloud console
- Gemini in Apigee (OpenAPI spec generation, policy explanation in Preview)
- Gemini in Application Integration (workflow automation generation)
- Enterprise-scale style guide and configuration management across repositories
- GitHub review quota stated by the vendor only as '100+ pull requests per day' — no firm limit published
- Price not published; custom volume pricing and annual/multi-year commitments negotiated
- Developer Connect still pinned to us-east1 with no region flexibility
Who it's for
Best for enterprises already on Google Cloud for which certifications and data handling decide the shortlist.
A good fit if
- You need a broad certification set, including ISO 27001, 27017, 27018 and 27701 and SOC 1, 2 and 3
- You want a commitment that your code isn't used for training without permission
- You need network isolation such as VPC Service Controls and Private Google Access
Consider alternatives if
- You want to sign up self-serve, since new subscriptions now go through Google Cloud sales
- You need review findings to block a merge
- You need IaC, container or test coverage capabilities
Similar tools
Other AI Coding Agent tools in the directory.
FAQ
When should you choose Gemini Code Assist?
Gemini Code Assist is best for enterprises already on Google Cloud for which certifications and data handling decide the shortlist. It's a good fit if:
- You need a broad certification set, including ISO 27001, 27017, 27018 and 27701 and SOC 1, 2 and 3
- You want a commitment that your code isn't used for training without permission
- You need network isolation such as VPC Service Controls and Private Google Access
Consider alternatives if:
- You want to sign up self-serve, since new subscriptions now go through Google Cloud sales
- You need review findings to block a merge
- You need IaC, container or test coverage capabilities
What languages does Gemini Code Assist support?
Gemini Code Assist supports 44+ languages and frameworks, including Bash, C, C++, C#, Dart, Go, GoogleSQL, Java, JavaScript, Kotlin, and 12 more.
What does Gemini Code Assist integrate with?
Gemini Code Assist integrates with:
- Source control: GitHub, GitHub Enterprise Server, GitLab (partial), GitLab Self-Managed (partial), Bitbucket (partial), Bitbucket Data Center (partial) and Azure DevOps (partial)
- IDEs: VS Code, IntelliJ IDEA, PyCharm, CLion, DataGrip and 9 more
What tools are similar to Gemini Code Assist?
Other AI coding agents tracked here:
What are Gemini Code Assist's plans and pricing?
Gemini Code Assist's paid plans start at $19.00/user/mo.
Opens codeassist.google in a new tab. Review Radar is not affiliated with Google Cloud.