Automated PR review
Automated PR review on every commit.
A GitHub App that scans every pull request with 144 AST rules, then optionally escalates to an LLM review. Only new findings are posted — no noise from pre-existing issues.
How it works
Every plan includes the static pass. LLM review is opt-in — metered on Hosted, or unmetered with your own API key on BYOK.
144 AST rules run on every push. Security, concepts, framework pitfalls, floating promises. Delta-only — if a finding already existed on the base branch, KERN-guard stays quiet.
Runs in seconds on typical diffs. No LLM. No API key. Included on Free, Pro Hosted, and Pro BYOK.
Structured review by your choice of LLM. Reasons about intent, flags architectural issues, suggests fixes. Runs after the static pass, on the same delta.
Hosted: we pay the provider — 100 reviews/mo, $0.20 per extra. BYOK: you supply an Anthropic or OpenAI key, unlimited reviews using your API key.
Two passes, one delta
// src/api/orders.ts
+ export async function getOrders(userId) {
+ const q = `SELECT * FROM orders
+ WHERE user_id = '${userId}'`
+ return db.query(q)
+ }KERN-guard · 2 new findings
! sql-injection [0.95]
Template literal in SQL query
with user input 'userId'
src/api/orders.ts:3
~ unguarded-effect [0.92]
db.query() without try/catch
or auth guard
src/api/orders.ts:5
pre-existing findings skipped
(delta-only)Bring any model
Pick per repo. Switch any time. No provider lock-in.
Pricing
Unlimited public repos on Free. Pro plans unlock unlimited private repos plus the LLM pass.
Questions
You provide your own Anthropic or OpenAI API key. Reviews run on your account — no per-review markup from us. Ideal for teams with existing AI budget or high review volume.
KERN-guard only posts findings that are new to the pull request. Pre-existing issues on the base branch stay quiet — you opt into reviewing legacy code, you don't drown in it.
No. The static pass runs 127 AST rules on our workers. No LLM, no provider key, no per-review cost. It is free on every plan.
Hosted at admin-guard.kernlang.dev. GitHub App install takes under a minute. Self-hosted is on the roadmap, not v1.
Install the GitHub App, pick which repos to watch. Your next PR gets reviewed.