Features
Risk, findings, and a suggested fix on GitHub and GitLab - plus the same review in VS Code while you write. Security rides along. No extra dashboard.
No credit card · 100 reviews/mo during your 14-day Pro trial
Findings land on GitHub and GitLab - the thread your team already uses. No extra dashboard to check.
Vulnerable packages, secrets, and container issues show up in the same review as the rest of the diff.
Reply @mergeguards fix to apply a suggested patch. Re-run or deep-scan without leaving the PR.
VS Code, Cursor, or Windsurf - same login, same monthly quota.
On the pull request
The review, the score, and the fix all land on the diff you already read.
We read the diff the way a careful reviewer would - bugs, smells, and notes on the lines that changed.
A 0–100 merge-risk score with High / Medium / Low - so the team knows what to fix first.
Apply a patch from the same conversation. No copy-paste into another tool.
Catch issues on the file you're editing, or your local git diff, before the pull request. Install MergeGuardAgent from the VS Code Marketplace and sign in.
export class UserService {
async updateUser(…) {
// finding: SQL injection risk
}
}
MergeGuard reads the diff and runs scanners in the same review. Known CVEs, leaked secrets, and container issues show up next to the rest of the comment.
Understand the codebase
Code Explorer works in the dashboard, in your editor, and on the PR — not only when a review is open.
Ask how a flow works, what you can safely delete, and what a change will hit - in the dashboard, editor, or PR.
For teams
On Team and above, MergeGuard spots files that changed without tests and can commit specs from the same thread.
See where reviews stall and who is overloaded - without another analytics product.
The same review across a monorepo - not a new tool per language.
SSO, audit logs, and policy when the org needs them - without changing how developers review.
AI coding tools + MergeGuard
Generate code with AI.
Validate it with MergeGuard.
Copilot, Cursor, and Claude Code help you write faster. MergeGuard is the extra set of eyes before that code hits production.
Cursor
Visual Studio Code
GitHub Copilot
Claude Code
Step 1
AI generates code
Step 2
MergeGuard reviews it
Cursor, VS Code, Copilot, and Claude Code are trademarks of their respective owners. MergeGuard is an independent review tool that works alongside them.
Risk, the issue, and a suggested fix - on GitHub and GitLab, where reviewers already work.
GitHub demoGitLab demoMergeGuardAgent demoDashboard demoInstall MergeGuardAgent
Yes. Sign in with GitLab, pick a project from the dashboard, and reviews land on your merge requests — comments on the diff, a suggested fix, same idea as GitHub.
Yes. Big diffs are where people skip lines. MergeGuard still reads them and flags the risky files so you know where to start. On paid plans you can ask for a deeper pass.
Yes. Install it on the repo (GitHub App or a connected GitLab project). Each PR or merge request is reviewed from its own diff. TypeScript, Python, Go, Java, Ruby, Rust, and more can live in the same repo.
Both review GitHub pull requests. MergeGuard is built around a risk score, security in the same comment, and a one-reply fix. CodeRabbit is stronger if you want a chatty PR walkthrough. For a side-by-side, see MergeGuard vs CodeRabbit.
On Team and above, if a file changed without a matching test, the review mentions it. Tick “use the agent to generate tests” or reply @mergeguards generate-tests and the specs land on your branch. Free and Pro don’t include that.
No. It catches the foot-guns so your team can talk about the change itself. You still own the merge button.
Where you already review: Conversation and Files changed on GitHub, Overview and Changes on GitLab. No extra dashboard to check first.
Copilot helps you write. MergeGuard comments on the pull request after you open it — a score, what’s wrong, and a fix you can apply from the thread. Most teams use both.
Sign up free — 100 reviews for two weeks. No credit card.
