What is Autofix via Agentic PRs?

This goes a step beyond inline suggestions: the tool branches, edits, sometimes runs your tests, and raises a pull request for review. It suits work that spans multiple files or arrives on a schedule, like dependency upgrades.

The operational question is volume. An agent that opens a pull request per finding will bury your review queue, so batching, scheduling and scoping controls matter more than the fix quality itself.

Top 16 Autofix via Agentic PRs tools

Every tool in the directory documented as supporting Autofix via Agentic PRs, 15 fully, 1 partially, with what its own documentation says.

Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.

1. 1
   AikidoCode Security PlatformPro

   AutoFix opens pull requests with proposed fixes; never auto-merged

2. 2
   ChatGPT / CodexAgent Coding ToolPlus

   Codex can push a fix to the PR branch with permission; a PR can be opened from a finding page.

3. 3
   Checkmarx OneCode Security Platform

   SCA Auto Pull Request opens a manifest version-bump PR (default Off); transitive remediation is beta, npm only.

4. 4
   Claude CodeAgent Coding Tool

   Opens fix PRs on request; the GitHub Action can commit fixes automatically.

5. 5
   CodeRabbitPR Reviewadd-on

   Fix with AI opens fix PRs for security findings (add-on); IDE routes complex fixes to external agents

6. 6
   CodeSceneQuality Platform

   PR Refactoring Agent runs in CI and commits Code Health fixes back to GitHub and GitLab PRs

7. 7
   CorgeaCode Security Platform

   Automatically opens a PR with issue and fix context on GitHub/Azure DevOps/Harness

8. 8
   Cursor (Bugbot)PR ReviewPro

   Autofix spawns a Cloud Agent pushing to a new or existing branch; needs on-demand usage billing.

9. 9
   DeepSourceQuality Platform

   Autofix opens a PR or commits onto an existing PR branch; vulnerability autofix opens PRs with a breakage score.

10. 10
    GitHub Advanced SecurityCode Security PlatformFree (Dependabot); add-on: Copilot licence + AI Credits for the agent

    Dependabot security-update PRs; Copilot cloud agent pushes validated fixes (Copilot licence and AI Credits)

11. 11
    QodoPR Review

    Remediation Agent fixes findings above a severity threshold and opens a separate fix PR

12. 12
    SemgrepCode Security PlatformTeam

    Autofix opens a draft PR/MR with AI description; requires Multimodal, AI credits and SCM write access.

13. 13
    SnykCode Security Platform

    Automatic Fix, backlog, dependency upgrade and Dockerfile base-image PRs; base-image PRs default-on for free accounts.

14. 14
    SonarQubeQuality Platformadd-on

    Remediation Agent fixes backlog issues on GitHub and Azure DevOps; requires Sonar Agent Essentials.

15. 15
    VeracodeCode Security Platformadd-on

    Fix GitHub Action creates branch and PR; SCA auto-opens dependency-upgrade PRs on GitHub/GitLab

16. 16
    CodacyQuality PlatformPartial

    MCP lets AI assistants auto-remediate flagged code; no autofix pull-request creation described.

What to look for

• Batching and scheduling controls to limit pull request volume
• Whether the agent runs your test suite before opening the PR
• Scoping, meaning which repositories and issue classes it is allowed to touch
• How its pull requests are attributed and reviewed

Related terms

FAQ