Sourcegraph Cody
AI coding assistant that uses Sourcegraph code graph search to answer questions and edit code across large enterprise codebases.
Delv Safety Grade: A
Score 82/100 · assessed 2026-04-18
Sourcegraph Cody is maintained by Sourcegraph, a well-established code intelligence company with significant enterprise adoption and venture backing. The agent integrates deeply with IDEs to provide AI-assisted coding, requiring substantial filesystem access to read and modify code across entire repositories. It connects to Sourcegraph's backend services for code graph analysis and to external LLMs for generation. The supply chain is solid with official IDE marketplace distribution and open-source codebase. Documentation and transparency are strong with active development and clear changelogs. Primary risk stems from the breadth of permissions needed: full codebase read/write access, network connectivity to external services, and environment variable access for authentication tokens. Enterprise deployments may use self-hosted Sourcegraph instances, reducing some external data exposure. No known security incidents. The freemium model with paid tiers aligns incentives towards sustained maintenance.
Green flags
- Maintained by well-funded enterprise company (Sourcegraph) with strong reputation
- Fully open source with active development and community engagement
- Distributed via official IDE marketplaces (VS Code, JetBrains)
- Supports self-hosted deployment for enterprise data sovereignty
- Clear documentation and transparent security practices
Red flags
- Requires full filesystem read/write access across entire codebase
- Connects to external LLM services, potential data exfiltration vector
- Accesses environment variables which may contain sensitive credentials
- IDE integration grants broad execution context within development environment
Permissions requested
Pricing
Platforms
Review
Best for developers inheriting large, unfamiliar codebases where understanding matters as much as writing. If your repo fits in your head, cheaper tools suffice. Enterprise teams already on Sourcegraph should trial this immediately.
Good at
- Whole-codebase context via Sourcegraph code graph, not just open files
- Codebase Q&A genuinely useful for onboarding and archaeology
- Multi-file refactoring that actually works across related modules
- Less hallucination than raw LLMs because answers grounded in real code
- Free tier usable for small projects, enterprise tier scales properly
Watch out
- Free tier context limits hit fast on large repos
- Autocomplete unremarkable compared to Copilot
- Enterprise pricing steep if you don't already use Sourcegraph
- Still invents method names occasionally despite grounding
- Web version feels underbaked versus IDE extensions
Use cases
- code search
- refactoring
- codebase Q&A