Qodo
Agentic code integrity platform (formerly Codium AI) with 15+ review, test and documentation workflows across IDE, CLI and Git.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-18
Qodo (formerly Codium AI) is a commercial code integrity platform from a venture-backed startup. The company has raised funding and maintains an active product across multiple IDEs and Git platforms, suggesting reasonable organisational stability. However, the absence of a public repository severely limits transparency and independent security review. As an autonomous agent with broad code access, it requires filesystem read/write, network outbound for AI processing, and likely shell execution for testing workflows. The closed-source nature means supply chain verification relies entirely on vendor distribution channels. The rebrand from Codium AI to Qodo occurred in 2024. Freemium model with paid tiers suggests ongoing commercial support, but lack of open code review and unclear data handling for AI processing present notable trust barriers for security-conscious teams.
Green flags
- Venture-backed company with apparent ongoing development
- Multi-platform support suggests sustained engineering effort
- Freemium model indicates commercial viability
- Established presence in IDE marketplaces (VSCode, JetBrains)
Red flags
- No public repository limits independent security review
- Closed-source autonomous agent with broad code access
- Unclear where code is sent for AI processing (external LLM likely)
- Rebrand from Codium AI may indicate corporate instability
- No visible changelog or public issue tracker
Permissions requested
Pricing
Platforms
Review
Worth paying for if you review a lot of pull requests or maintain legacy code that lacks tests. Skip it if you're already happy with Cursor's inline suggestions and don't need the CI integration. The free tier is enough to decide.
Good at
- Test generation that actually compiles and matches project conventions
- PR review catches real issues without false positive spam
- CLI integration works well in CI pipelines
- Indexes your codebase for context-aware suggestions
- Generous free tier with no credit card required
Watch out
- IDE plugins feel redundant if you already use Cursor or Copilot
- Documentation output can be unnecessarily verbose
- Occasionally hallucinates test assertions on ambiguous logic
- Paid plans required for team features and higher rate limits
- Less ambitious than agents like Sweep for autonomous bug fixes
Use cases
- PR review
- unit test generation
- code quality