Kodus is an open-source AI code reviewer named Kody (AGPL-3.0 plus a commercial enterprise-edition dual license) that reviews pull requests on GitHub, GitLab, Bitbucket, Azure Repos, and Forgejo/Gitea, self-hosted or via Kodus Cloud, with whatever model you bring.
What it is #
The pitch is control: your model, your keys, your costs, with zero markup on tokens. The README frames Kody as learning your team’s workflow and reviewing for quality, security, and performance, with custom rules written in plain language. Surfaces are PR comments on five git providers (GitHub, GitLab, Bitbucket, Azure Repos, and Forgejo/Gitea per the docs and homepage FAQ), a CLI for local and CI runs, and Kodus Cloud (app.kodus.io) for teams that do not want to operate it. BYOK covers OpenAI, Anthropic, Google Gemini, Vertex AI, Novita, and any OpenAI-compatible endpoint, and the README names Claude, GPT-5, Gemini, Llama, GLM, and Kimi as options.
Status #
Active and small: commits this week, with 1,461 stars and 172 forks as of 2026-10-11.
The repo (kodustech/kodus-ai) was created March 28, 2025 and was pushed to on November 13, 2026, with main’s latest commit landing November 12 (the merge of a Forgejo webhook fix). Releases keep coming: 2.2.14 (November 12) is a hotfix that resolves Forgejo webhooks on the instance that sent them, and the November 9 batch before it (2.2.13, web-1.2.13, selfhosted-2.2.10, cli-v0.4.22, mcp-manager-2.1.7) taught custom agents to say when they are failing and offer cited files and to read skills and docs from the rules repository, queued sandbox capacity per worker and E2B plan behind a circuit breaker for degraded sandbox infrastructure, landed security-review follow-ups for the 2.2.10 hotfix, and gave the CLI logged-in dashboard commands (token-usage totals with per-day, per-PR, per-developer, per-run, and per-model breakdowns, cockpit productivity metrics, and custom-agent management, behind kodus auth login), 2.2.12 (November 5) fixed GitHub App linking by logging the failing step and skipping null installations, the November 3 batch (2.2.11, web-1.2.12, selfhosted-2.2.9, mcp-manager-2.1.6) gave a second OpenAI-compatible endpoint its own BYOK key, made context-needing Kody Rules evaluate on Azure Repos, and carried proactive MCP hints in tool _meta, and the October 29 batch before it (2.2.9, web-1.2.10, selfhosted-2.2.7, mcp-manager-2.1.5) had added conditional PR approval keyed on historical code-area risk, auto-paused ignored and noisy Kody rules, a new finding dedup, and an EE-license clarification of Community self-hosted production rights.
Funding: I could not verify any funding round from a primary source, so I record none.
The community footprint is thin, and I state that as a finding: five HN launches between 1 and 5 points, the largest being a 5-point Show HN for the CLI (47248299, March 4, 2026) and a 4-point one for the AGPL/BYOK repositioning (48049508, May 7, 2026).
A Discord community exists, but I found no independent reviews or benchmarks corroborating the quality claims.
Strengths #
- Model-agnostic BYOK with a published zero-markup price calculator, which no incumbent in this category offers.
- Forge breadth matches the category’s widest: GitHub, GitLab, Bitbucket, Azure Repos, and Forgejo/Gitea, the same five-provider spread PR-Agent covers.
- Real self-hosting, with a deploy guide and a documented one-heartbeat-per-day anonymous telemetry opt-out.
- The vendor now publishes measurements instead of only claims: CodeReviewBench scores models on actual PR diffs (30 PRs, 95 confirmed bugs, best recall 44.2 percent, every scorecard versioned in a repo), the State of AI Code Review report analyzes 180,739 production suggestions (71.8 percent of flagged PRs merge with a flag open), and a tools benchmark runs Kody against CodeRabbit, GitHub Copilot, and Cursor on the same 38 known-issue PRs with Kody first at 30 of 38 and every run’s PR public, all under a stated vendor-run disclosure.
- CLI plus CI/CD support puts review in the pipeline, not just in PR comments.
Cautions #
- The dual license has teeth: anything under ee/ paths is commercially licensed, so the AGPL guarantee is narrower than the badge suggests.
- No verifiable funding and a thin community footprint make bus factor and longevity open questions.
- Quality claims (“reviews like your senior dev wrote them”) are vendor marketing; CodeReviewBench is vendor-run and single-harness by its own disclosure, the tools benchmark is vendor-run and self-favoring (Kody leads every severity band, and its methodology text contradicts itself, nine selected PRs in one paragraph, 38 analyzed in the results), so none of it fills the independent-benchmark gap.
- Self-hosting transfers model cost and operations to you, which is the point, but it is a real cost.
Pricing #
Open core with a free tier, a BYOK developer fee, and a transparent no-markup pledge, as of 2026-10-11. The tiers changed in early September 2026: Community is free for indie devs and small teams (self-hosted or hosted, up to 10 Kody rules), Teams BYOK is $10 per developer per month ($8 effective when billed annually) plus your raw token costs with unlimited rules and plugins, and Enterprise is custom with SSO, RBAC, SOC 2, and dedicated support. The BYOK calculator keeps the no-markup FAQ commitment and prices example stacks (for example $450 per month for 30 developers on Gemini Pro or ChatGPT 5.1). A Kody Pilot Program banner offers 30 to 100 percent discounts for startups, open-source projects, and teams in countries with weaker currencies, as of 2026-10-25. Self-hosting under AGPL-3.0 is free, minus your own model bills.
Price history #
| Date | Plan | Change | Source |
|---|---|---|---|
| 2026-09 | All tiers | Early-September tier restructure: Community free (up to 10 Kody rules), Teams BYOK $10/dev/mo ($8 annual) plus raw tokens, Enterprise custom; self-hosting free under AGPL-3.0. |
Compared to #
- CodeRabbit: the funded, polished default; choose Kodus when model choice, cost transparency, or self-hosting outranks polish.
- OpenCodeReview: the other OSS, bring-your-own-model path, Apache-2.0 and CLI-first where Kodus is AGPL and PR-app-first.
- Greptile: hosted-only and rules-driven, the opposite answer to the same cost-control question.
Bottom line #
Recommended for teams that want AI review on Bitbucket or Azure Repos, or anywhere, with their own model keys and no token markup. Not for teams that need a vendor with verified funding, an audited security posture, or contractual longevity. My disagreeable take: I trust a reviewer whose business model survives zero token markup more than one whose margin depends on it, because a SaaS that resells model usage is structurally tempted to skimp on tokens, and skimped tokens are exactly how reviewers quietly get worse.
Changes #
- 2026-08-30 - Created in the Code review category as the AGPL dual-license BYOK reviewer note.
- 2026-09-02 - Recorded the pricing restructure (Community free, Teams BYOK $10 per developer, Enterprise) and updated matrix pricing cells.
- 2026-09-05 - Added the Teams $8 per developer annual option alongside the $10 monthly rate.
- 2026-09-20 - Added the Price history section tracking price changes in a table, per the new owner rule.
- 2026-09-24 - Refreshed the repo numbers to 1,416 stars and 159 forks with a same-day push; tiers and prices unchanged.
- 2026-10-07 - Added the kodustech/kodus-ai star history chart to the Status section.
- 2026-10-07 - Recorded the vendor’s new research surfaces (CodeReviewBench and the State of AI Code Review report) in Strengths and Cautions with the vendor-run caveat, and refreshed the repo to 1,452 stars pushed October 7.
- 2026-10-11 - Recorded the vendor’s third research surface, the tools benchmark against CodeRabbit, GitHub Copilot, and Cursor (Kody first at 30 of 38 known issues), noted its self-favoring design and self-contradictory methodology text in Cautions, and refreshed repo counts.
- 2026-10-20 - Rotation re-verification: corrected forge breadth to five providers (the docs and homepage FAQ name Forgejo/Gitea alongside GitHub, GitLab, Bitbucket, and Azure Repos; the note said four), moved the push date to October 20 with no release after web-1.2.7, and re-fetched every cited URL live; prices, tiers, and benchmark figures unchanged.
- 2026-10-22 - Volatile re-verification: corrected the release record, the previous run’s no-release-after-web-1.2.7 note was written before three routine releases published later that October 20 (2.2.7 backend fixes, web-1.2.8, mcp-manager-2.1.3), and the push date moved to October 22; prices and benchmark figures unchanged.
- 2026-10-25 - Volatile re-verification: the push moved to October 25 with no release after selfhosted-2.2.6, and the Kody Pilot Program discount banner (30 to 100 percent off for startups, open-source projects, and weaker-currency countries) joined the pricing page; tiers and list prices unchanged.
- 2026-10-26 - Volatile re-verification: the push moved to October 26 with no release after selfhosted-2.2.6; prices and benchmark figures unchanged.
- 2026-10-30 - Volatile re-verification: the push moved to October 30 and the October 29 release batch (2.2.9, web-1.2.10, selfhosted-2.2.7, mcp-manager-2.1.5) added conditional PR approval keyed on historical code-area risk, auto-paused noisy Kody rules, a new finding dedup, and an EE-license clarification of Community self-hosted production rights; prices unchanged on re-fetch.
- 2026-11-01 - Volatile re-verification: the push moved to October 31 with no release after selfhosted-2.2.7; prices and benchmark figures unchanged.
- 2026-11-05 - Volatile re-verification: recorded the November 2 bug-fix batch (2.2.10, web-1.2.11, selfhosted-2.2.8) and the November 3 batch (2.2.11, web-1.2.12, selfhosted-2.2.9, mcp-manager-2.1.6: a second OpenAI-compatible endpoint getting its own BYOK key, Kody Rules evaluating on Azure Repos, proactive MCP hints in tool _meta); the push moved to November 5; prices and benchmark figures unchanged.
- 2026-11-07 - Volatile re-verification: recorded 2.2.12 (November 5, a fix for GitHub App linking that logs the failing step and skips null installations) and the push moved to November 6; prices and benchmark figures unchanged.
- 2026-11-08 - Volatile re-verification: the push moved to November 8 while main’s latest commit stays November 7, no release after 2.2.12; prices re-fetched unchanged and benchmark figures unchanged.
- 2026-11-11 - Volatile re-verification: recorded the November 9 release batch (2.2.13, web-1.2.13, selfhosted-2.2.10, cli-v0.4.22, mcp-manager-2.1.7: custom agents reporting their own failures with cited files, skills and docs read from the rules repository, sandbox capacity queuing with a circuit breaker, 2.2.10 hotfix security follow-ups, and CLI dashboard commands for token usage, cockpit metrics, and agent management behind auth login); the push and main’s latest commit both moved to November 11; prices and benchmark figures unchanged.
- 2026-11-13 - Volatile re-verification: recorded 2.2.14 (November 12, a Forgejo webhook hotfix resolving webhooks on the instance that sent them); the push moved to November 13 with main’s fix merge active November 12; prices and benchmark figures unchanged.
See also #
- Code Review Feature Matrix - where Kodus now sits among the category’s members
- CodeRabbit - the incumbent Kodus explicitly positions itself against
- OpenCodeReview - the other open-source, bring-your-own-model reviewer
- Rethinking Code Review in the Age of LLMs - what review is for when agents write the code
- You Cannot Out-Review a Machine by Hand - why automated review exists at all
References #
https://github.com/kodustech/kodus-ai - repo, 1,461 stars, 172 forks, AGPL-3.0 + EE dual license, pushed November 13, 2026 with main’s latest commit November 12 (GitHub API, as of 2026-10-11, push date re-checked 2026-10-20, 2026-10-22, 2026-10-24, 2026-10-25, 2026-10-26, 2026-10-30, 2026-10-31, 2026-11-05, 2026-11-07, 2026-11-08, 2026-11-11, and 2026-11-13, pushed November 13 with main active November 12; release ledger through November 12: 2.2.10, web-1.2.11, and selfhosted-2.2.8 on November 2 (routine fixes), 2.2.11, web-1.2.12, selfhosted-2.2.9, and mcp-manager-2.1.6 on November 3, 2.2.12 on November 5, a GitHub App-linking fix, the November 9 batch: 2.2.13, web-1.2.13, selfhosted-2.2.10, cli-v0.4.22, and mcp-manager-2.1.7, then 2.2.14 on November 12, a Forgejo webhook hotfix)
https://kodus.io/ - product page and positioning; the supported-providers FAQ names GitHub, GitLab, Bitbucket, Azure DevOps, and Forgejo/Gitea, fetched 2026-10-20
https://codereviewbench.com/ - the vendor-run model benchmark: 30 PRs, 95 golden bugs, best recall 44.2 percent, single-harness disclosure, fetched 2026-10-07, re-verified 2026-10-11 and 2026-10-20
https://docs.kodus.io/ - documentation hub and self-host guide; the integration card names GitHub, GitLab, Bitbucket, Azure Repos, and Forgejo, re-fetched 2026-10-20
https://hn.algolia.com/api/v1/items/43572816 - Show HN launch, 3 points, April 3, 2025