>AI Review>Security>Collaboration>FAQ
Sign inGet started

CodeGuard AI connects your GitHub repositories to Gemini-powered code review, real vulnerability scanning, and role-based team collaboration — all in one workspace.

Get started freeSee how it works

No credit card required — free while CodeGuard AI is in early access.

app.codeguard.ai/repositories/acme-corp/api-gateway/board
Navigation
Dashboard
My Tasks
Calendar
Repositories
Merge Requests
Security Workspace
Open3
CG-51
Add dark mode toggle
UI
CG-52
Rate limiter middleware
Backend
In Progress3
CG-42
Fix login validation
Bug
CG-45
Board drag & drop
Feature
Review2
CG-38
AI review integration
Feature
CG-40
Commit tracking API
Backend
Done5
CG-31
SSO provider setup
Auth
0
Built-in security scanners
0
Granular repository roles
0%
GitHub-native workflow
Gemini
Powers every AI review
AI Code Review

Every pull request, reviewed by Gemini before your team even opens it.

Open any commit or PR, trigger an analysis, and get a risk score plus categorized findings across security, performance, and code quality — grounded in the actual diff, not a generic linter.

  • Line-level findings tied to the exact diff hunk
  • Risk score per commit, tracked over time
  • Runs on Google Gemini — configurable per deployment
Gemini review · CG-42 · auth.ts Complete
18 async function handleLogin(req, res) {
19− const token = jwt.sign({ password: req.body.password }, SECRET)
+ const hashed = await bcrypt.hash(req.body.password, 12)
+ const token = jwt.sign({ hash: hashed }, SECRET, { expiresIn: '1h' })
20 return res.json({ token })
21 }
Risk score74
Security
Plaintext password stored in JWT payload
Performance
Synchronous bcrypt blocks event loop
Suggestion
Extract auth logic to AuthService class
Security Workspace

Real vulnerability scanning, not a checkbox.

Every repository gets scanned by gitleaks, Semgrep, OSV-Scanner, and Trivy — then Gemini turns the raw output into a prioritized remediation summary you can act on, exportable as a PDF audit report.

  • Secret, dependency, and misconfiguration scanning out of the box
  • AI-written remediation guidance, not just raw scanner output
  • One-click PDF export for audits and compliance reviews
Security scan · api-gatewayCompleted 4m ago
GI
gitleaks
Secret & credential scanning
0 leaks
SE
semgrep
Static analysis for code patterns
3 findings
OS
osv-scanner
Open-source dependency vulnerabilities
2 advisories
TR
trivy-fs
Filesystem & config misconfiguration
0 issues
AI remediation: Upgrade lodash to patch 2 advisories; review 3 Semgrep findings in auth.ts before merge.
Export PDF
gitleakssemgreposv-scannertrivy-fsGeminiGitHub OAuthKeycloak
GitHub Integration

Connect a repository in seconds — GitHub stays the source of truth.

Authenticate with GitHub OAuth and CodeGuard AI syncs your repositories, contributors, and languages automatically. Every repo gets its own Kanban board, task list, and review pipeline without any manual setup.

  • GitHub OAuth for private repository access
  • Automatic contributor and language sync
  • Every commit linked to a task key, automatically
Connected repositories4 synced
acme-corp/platformCore product platform monorepo
TypeScript24 tasks
acme-corp/auth-serviceOAuth2 & SSO authentication layer
Java11 tasks
acme-corp/design-systemShared component & token library
TypeScript6 tasks
acme-corp/api-gatewayGraphQL & REST proxy service
Go14 tasks
Team Collaboration

Ten roles. One permission model. Zero spreadsheets.

Invite teammates by email and assign a role — owner, product owner, developer, tester, designer, DevOps, security analyst, and more — each with server-enforced permissions over tasks, comments, and board state.

  • Email invitations with role assignment built in
  • Server-enforced permissions, not just UI hints
  • Every commit shows up in a shared team activity feed
Team members · api-gateway5 of 10 roles shown
AY
Ayşe Yıldız
Owner
MT
Marco Tandy
Product Owner
SR
Sam Reyes
Developer
PN
Priya Nair
Security Analyst
DC
Devon Cole
Viewer
Invite by email…Send invite
Team activity
AJ
CG-42fix: sanitize inputs before JWT signing in auth flow
a3f9c12fix/cg-42-auth
2h ago
SR
CG-38feat: stream Gemini AI response to review panel
d7e2b45feat/cg-38-ai
5h ago
MT
CG-45ui: fix column reorder regression in drag & drop board
f1a8e03fix/cg-45-dnd
1d ago
AJ
CG-35feat: repo deletion with confirm dialog and cascade
b9c4d71feat/cg-35-delete
2d ago
Task Management

A workflow built for every stage.

Seven columns, one board per repository. Tasks move from Open to Closed as your team ships — with every commit and AI review attached along the way.

Open4
PRJ-61
Dark mode support
UI
PRJ-62
Rate limiter middleware
Backend
Todo3
PRJ-57
Auth unit test coverage
Testing
In Progress3
PRJ-52
Fix token expiry edge case
Bug
PRJ-54
Sortable task columns
Feature
Review2
PRJ-48
AI findings pagination
Feature
QA Testing1
PRJ-44
Repository delete flow
Feature
Done6
PRJ-39
SSO provider integration
Auth
Closed14
PRJ-28
Kanban board setup
Feature
Add column
How It Works

From first commit to shipped feature.

No infrastructure to stand up — connect a repository and CodeGuard AI does the rest.

1

Connect your repository

Authenticate with GitHub OAuth. Repositories, contributors, and languages sync automatically.

2

Invite your team

Add teammates by email and assign one of ten roles — permissions are enforced server-side.

3

Ship with confidence

Every commit triggers a Gemini review and a security scan across your repository.

4

Track it on the board

Tasks, findings, and activity all land on one Kanban board per repository.

FAQ

Questions, answered honestly.

Code review and security remediation summaries are generated by Google Gemini. The AI provider is configurable per deployment, with Gemini as the default and currently the only supported provider.

Yes. There's no billing system yet, so every feature — AI review, security scanning, unlimited repositories and teammates — is free while CodeGuard AI is in early access.

No. Connect a repository through GitHub OAuth and CodeGuard AI reads it via the GitHub API — there's no agent, webhook relay, or CLI to self-host.

gitleaks for secret detection, Semgrep for static analysis, OSV-Scanner for dependency vulnerabilities, and Trivy for filesystem and config issues — all run automatically per repository, with an AI-written remediation summary on top.

Each repository has its own member list with one of ten roles — owner, project manager, product owner, developer, tester, designer, DevOps, security analyst, intern, or viewer — and permissions are enforced on the server, not just hidden in the UI.

Start reviewing smarter
with CodeGuard AI.

Connect your repositories, invite your team, and let AI surface the risks before they reach production.

Get started free