Qodo

IDE plugin for VS Code, JetBrains, Visual Studio reviews uncommitted and committed changes

Context Engine MCP plus agent skills qodo-get-rules and qodo-pr-resolver let coding agents check code against rules.

Pre-PR review of uncommitted changes runs in the IDE plugin; no standalone CLI documented

Automatic review on PR opened/reopened/ready, or on every push; inline findings plus summary

Compliance labels such as 'Failed compliance check' must be wired into CI actions to block merges

Context Engine indexes whole codebase and cross-repo relationships; findings surfaced are PR-scoped

Rule Miner re-runs every two weeks and PR history is re-analyzed; no scheduled code rescan

Not offered in vendor documentation reviewed as of 2026-09-05.

Compliance checks flag SQL injection, XSS, CSRF and insecure data handling in PR diffs.

Not a finding category; docs site search for 'taint'/'dataflow' returns zero results

Security compliance check flags exposure of API keys, passwords, secrets in PR changes

Bug and anti-pattern findings, Rules Agent for org standards, Duplicated Logic Agent

Findings categorized by quality dimension (10 types); no complexity/cyclomatic metric among them

Duplicated Logic Agent plus RAG duplication compliance against the existing codebase

Not among the 10 documented finding categories or core-capabilities descriptions

Findings page tracks bugs/rules/gaps by category; no coverage ingestion or reporting documented

No coverage metric of any kind documented on findings or governance pages

Cross-repo dependency impact tracing and architecture diagrams in walkthrough; no dependency-rule enforcement

No time/cost remediation quantification; findings are tracked by count and severity only

30-day findings and rule analytics plus suggestion-impact ROI dashboard; no team or delivery metrics

Critical Issue Agent detects bugs, logic errors and edge-case failures

AI PR summary plus walkthrough with description, architecture diagram, high-level assessment

Natural-language Review Standards, best_practices.md, pr_compliance_checklist.yaml, REVIEW.md

Committable suggestions when inline, single file and five lines or fewer

Remediation Agent fixes findings above a severity threshold and opens a separate fix PR

Finding Recommendation Agent scores finding relevance from PR history; in beta on paid plans.

Path-pattern rule scopes, folder-level rule scoping, folder allow-listing in ignore rules

Multi-agent LLM review engine is the core product; agents per quality dimension

On-prem installs connect to customer OpenAI, Anthropic, Vertex AI or AWS Bedrock endpoints

Context Engine MCP exposes deep_research, context_ask, get_context; local and remote MCPs in IDE

No AI-generated-code inventory; Agentic Tools Allow List restricts which agent tooling developers may use.

Mention @qodo in PR, review or inline comments to explain, dismiss or discuss findings

Rule Miner mines accepted review comments; Auto best practices learns from accepted suggestions

Context Engine MCP: no training on customer code, session-only retrieval, per-tenant isolation

'Previous review results' keeps per-commit review history; no admin or access audit log documented

SSO via WorkOS with SAML and OIDC providers including Okta, Entra ID, PingFederate, Keycloak

Organization admin and Team owner roles plus admin-versus-member rule approval; no granular RBAC model

Rule and skill analytics exportable as CSV; compliance tool results per PR only