Start with your next pull request.
Keep the light on, from $0.25 per review.
Join the revolutionSign up with GitHub · $20 free to start, no card.
You set a monthly limit and choose which changes get reviewed. Each review is charged from your prepaid balance, only if it completes.
A lighter review at a lower price, for everyday changes. Strong finds more.
A thorough review of every commit, every finding verified.
Join the revolutionStrong with both add-ons below. Never more than $1.80 per review. Budget with both add-ons runs as Ultra, at $1.80.
A deeper security review of the whole change. Runs on a pull request’s first review; choose “every commit” for each push.
A deeper review of correctness and logic. Runs on a pull request’s first review; choose “every commit” for each push.
On by default, at every level.
About a month after a private repository’s last audit, MergeSafe audits its default branch again if it has changed. An admin can turn it off.
Every private repository’s first audit, when you install, is free too.
How audits are charged →Every pull request is checked for pinned npm and PyPI versions with a known vulnerability (CVE) or reported malware, with or without a review. Advisory by default; make it blocking or turn it off.
Dependency gate →Flags known-vulnerable (CVE) and malicious package versions on every pull request, with or without a review; lookalike and made-up packages with a review. Advisory by default; make it blocking or turn it off. Audit log you can export.
New issues checked against your code. Free up to 20 a day and 100 a month; each one after that is $0.05.
Each production error analyzed once. Repeats are free, a regression is charged again, and a failed analysis is free.
We reproduce the error and prove the fix before opening a pull request; when we can’t, the pull request says it’s unverified. Review included. Errors that look too complex, risky or uncertain aren’t tried, and you’re told why. Off by default. Declined or failed attempts are free.
Every new security advisory is matched against the packages and versions your repositories declare, free. When one hits a repository, verification checks whether it is real and whether your code uses the affected part, for $0.05 from your balance; the free $20 credit covers it. Never more than $0.50 a day or $5 a month. Optional: on by default, and an admin can turn it off. Past either cap, verifications keep running, free.
@mergesafe review large). We hold 1.5× the level’s base price, with add-ons charged as usual. When the review finishes we measure what it actually cost us, and if that was no more than a regular review, you pay the regular price and the extra 0.5× goes back to your balance. Lockfiles and generated files don’t count. Over 5,000 lines or 60 files it isn’t reviewed or charged; you get a prompt to split it.@mergesafe review (manual-only), or from your own tooling through the API.Limits for the whole organization by day, week and month ($20 a day and $300 a month to start), plus daily and monthly caps per repository and per developer. When one is reached, reviews pause and nothing is charged. Spending limits.
Tops up your balance when it runs low, never past the monthly limit you choose ($1,000 unless you change it) or an optional daily one, and never above your $1,000 balance cap. How auto-refill works.
Many AI code reviewers charge per developer, every month, before a single review runs. MergeSafe charges per review: $0.25 on Budget, $0.50 on Strong.
For a selected few open-source projects. Public repositories with 1,000+ GitHub stars (not forks or archived) can apply from app.mergesafe.ai, and we approve a limited number. Each approved project’s balance is topped back up to $500 on the 1st of every month, and every review runs at Ultra.
Keep the light on, from $0.25 per review.
Join the revolution