What are autofix suggestions?

A finding tells you something is wrong; an autofix tells you what to write instead. For mechanical issues (formatting, simple refactors, known-safe API swaps, dependency version bumps), this collapses remediation to a click.

Quality varies sharply by issue class. Deterministic transformations are reliable; model-generated fixes for logic or security issues need review, because a fix that silences the scanner without addressing the underlying flaw is worse than the original finding.

What to look for

Which issue types have fixes, and whether they are deterministic or generated
Whether fixes apply as review suggestions you can accept inline
Bulk application across many findings at once
Whether the fix is re-scanned to confirm it resolved the issue

Best 20 code quality, security and code review tools with autofix suggestions

Every tool in the directory whose documentation covers this. Shown in a random order that changes on every visit, so no tool gets an advantage from its position.

Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.

Code Security Platform

Aikido

AutoFix suggests dependency, SAST, IaC and secret-rotation fixes; compatibility tested

AI Coding Agent

ChatGPT / Codex

Findings carry remediation guidance; '@codex fix the P1 issue' starts a cloud chat with PR context.

Code Security Platform

Checkmarx One

AI Security Champion gives confidence score, explanation, and proposed remediation; KICS and IDE auto-remediation.

AI Coding Agent

Claude Code

/code-review --fix edits the working tree; /claude-security drafts F<n>.patch files for manual git apply.

Code Quality Platform

Codacy

One-click and batch fixes for ESLint, Opengrep, markdownlint; free IDE autofix for four languages.

PR Review Tool

CodeAnt AI

Suggested fixes applied before merge, including fix-in-IDE direct application and auto-apply

PR Review Tool

CodeRabbit

One-click fixes for linter findings and committable code suggestions; autofix listed under Pro

Code Quality Platform

CodeScene

CodeScene ACE proposes AI refactorings in the IDE, validated by a secondary fact-checking AI

Code Security Platform

Corgea

AI generates and quality-checks a fix; auto-fix quota included from Free upward

PR Review Tool

Cursor (Bugbot)

Findings include fix suggestions plus Fix in Cursor, Fix in Web, or ask the in-PR agent.

Code Quality Platform

DeepSource

Autofix button generates fixes for all occurrences of an issue; metered by AI credits, usage-priced on Open Source.

AI Coding Agent

Gemini Code Assist

Inline code suggestions in PR reviews that can be committed directly from GitHub.

Code Security Platform

GitHub Advanced Security

Copilot Autofix generates code fix plus explanation for CodeQL alerts; no Copilot subscription required

PR Review Tool

Greptile

Most inline comments include an applicable code suggestion

Code Quality Platform

Qlty

Single-line Autofixes as GitHub suggestions; opt-in AI Autofixes via OpenAI, and qlty check --fix locally

PR Review Tool

Qodo

Committable suggestions when inline, single file and five lines or fewer

Code Security Platform

Semgrep

Rule-defined deterministic fixes commit from the PR; AI remediation guidance and prose fixes need credits.

Code Security Platform

Snyk

Snyk Agent Fix returns up to five AI fix suggestions via `@snyk /fix`, applied with `@snyk /apply #`.

Code Quality Platform

SonarQube

AI CodeFix proposes LLM fixes for CRITICAL, HIGH, MEDIUM issues; Cloud Team/Enterprise, Server Enterprise/Data Center.

Code Security Platform

Veracode

Veracode Fix suggests up to five RAG-matched patches per flaw in CLI and IDE; Pipeline Scan findings only

AI Logic Bug Detection PR Summaries & Walkthroughs Autofix Pull Requests AI Triage (False-Positive Filtering)

FAQ