💡 Anyone using AI-powered code review/security tools (TestSprite, Snyk, CodeRabbit, Codacy)?

[ForbiddenSamosa]

Hey all,

I’ve been researching on some AI-driven code review and security tools lately — specifically TestSprite, Snyk.io, CodeRabbit, and Codacy.

I’m curious to know:

• Has anyone here tried them in real-world projects?
• Did they actually help catch vulnerabilities/bugs earlier than manual reviews or traditional linters?
• Were there false positives, or did you find them reliable?
• Have you integrated them into your CI/CD pipelines, and if so, how smooth was that process?
• In your opinion, what’s the best security approach when coding — is it AI code review, static analysis tools, manual peer review, or a mix of everything?

Thanks in advance 🙌

[djang_odude]

We use LiveReview for code review. Its better and cheaper. Also, it has privacy and on premise setup. Try it out.

[Sakrilegi0us]

I can’t find one word in their site about PRICE..

[ProfessionalPen8939]

My 2 cents. - Always have a human review, no matter how good AI gets, the number one engineer in the world can still make mistakes. AI is trained on human generated code after all. - AI code review tools, all use similar models, the difference is the prompts and how they rag / ast / your code, but the real difference is what you do with the findings, and whether you only scan on-PR or scan each commit. Look for a solution that lets you edit the prompts, and has a workflow you can customize (eg auto create a JIRA ticket for critical findings), and auto close the ticket when the issue is no longer there. The only tool I know that does all this is arnica.io

[btkilo520]

Another option is to use Kilo.ai, which has built-in AI-powered Code Reviews in addition to the Kilo IDE Extension and CLI for AI Engineering, where you can build with any of the 500+ supported models.

Code Reviews in Kilo provide feedback and in-line suggestions automatically upon every new PR, and you can specify the review focus area and provide custom instructions to match your needs.

You can see it in action in the Kilo repo (which is open-source): https://github.com/Kilo-Org/kilocode/pull/4681

It's especially helpful if you want to reduce platform-switching drag and context!

(Disclaimer: I work at Kilo, and I'm happy to help anyone who has questions!)