#3 in Code ReviewUpdated 2026-08

HackerOne Code

by PullRequest · AI-filtered, human-validated security review in your pull requests

45.9 — BenchRank score out of 100

Homepage
Pricing page

Visit website See full Code Review ranking

Overview

HackerOne Code, formerly PullRequest, reviews code changes for security problems inside the source control tools a team already uses. Its AI, Hai, flags high-risk changes and filters out low-risk ones, and contracted expert engineers manually validate each finding before it is surfaced to developers. It integrates with GitHub, GitLab, Bitbucket and Azure DevOps.

Best for: Development teams wanting expert human security review of pull requests inside their existing SCM.
Pricing: One published plan, TEAM at $129 per developer per month billed annually with a two-week trial; Enterprise is custom priced through sales.
Runs on: WebSelf-hosted

Strengths and trade-offs

Strengths

Findings validated by human reviewers before developers see them
Integrates with GitHub, GitLab, Bitbucket and Azure DevOps
All major languages and frameworks supported out of the box
Enterprise option to keep code on your own network

Trade-offs

Smart Review Selection covers only ~30-40% of pull requests
Reviews run in US business hours; turnaround varies by size
No free tier or self-serve sign-up; both plans go via sales
SSO, API access and on-premise require the Enterprise plan

Pricing

Published plans from HackerOne Code’s own pricing page, in USD. Usage charges and add-ons may apply on top.

HackerOne Code pricing tiers, monthly and annual rates in USD
Plan	Monthly	Annual (per month)	Includes
TEAM	—per developer	$129	Smart Review Selection targets your most important code AI identifies security hotspots, checked by reviewers 90 minute turnaround for median review; two week trial Code quality and review metrics; GitHub, GitLab, Azure DevOps, Bitbucket cloud
ENTERPRISE	Contact sales	—	On-premise installation for GitHub, GitLab and Azure DevOps SAML single sign-on and API access for custom integrations Faster service level agreements and custom POCs available Premium Customer Success team with Slack support

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

MCP support: 0 out of 100
Documentation: 60 out of 100
Agent friendliness: 85 out of 100
Pricing transparency: 80 out of 100
Changelog: 0 out of 100
Marketing site structure: 70 out of 100
Operational trust: 35 out of 100

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

Openness: 85 out of 100
Maintenance: 85 out of 100

This doesn’t look right — report a problem with HackerOne Code’s score

Alternatives in Code Review

Ranked 1
55 — BenchRank score out of 100
Gogs
Gogs · Self-hosted Git service that runs from a single Go binary
Best for: Small teams or individuals self-hosting Git on modest hardware, including ARM boxes
Ranked 2
48.6 — BenchRank score out of 100
Gitea
Gitea · Self-hosted Git, CI/CD and package hosting under the MIT licence
Best for: Teams that want to self-host Git, CI/CD and package registries on their own infrastructure.
Ranked 4
22.1 — BenchRank score out of 100
Opengrep
Opengrep · Open-source static analysis engine forked from Semgrep CE
Best for: Security teams wanting an open-source SAST engine with no features locked behind a licence.