Sweep
GitHub-native agent that turns issues into PRs. You write the issue, Sweep opens the pull request and answers review comments.
Delv Safety Grade: B
Score 72/100 · assessed 2026-04-18
Sweep is a venture-backed startup (YC W23) offering an autonomous coding agent that operates directly in GitHub repositories. The maintainer legitimacy sits in the mid-range: professional organisation with active development but not a major vendor. The permissions profile is concerning—Sweep requires full repository write access, can execute code in your CI environment, and reads your entire codebase to generate PRs. This is inherent to its function but represents significant trust surface. The open-source repository shows good transparency with active issues and documentation. Supply chain is reasonable via standard GitHub App installation, though the backend processing happens on Sweep's infrastructure. No known security incidents, but the freemium model means your code passes through their servers. Appropriate for non-sensitive codebases where you accept the trade-off between convenience and repository access scope.
Green flags
- Open source client code with active GitHub repository
- YC-backed with professional team and ongoing development
- Standard GitHub App installation model with OAuth scoping
- Active issue tracker and responsive maintainers
- Clear documentation of capabilities and limitations
Red flags
- Requires full repo write access to create PRs and push commits
- Reads entire codebase and sends to external Sweep infrastructure
- Executes in CI context with access to secrets and environment
- Freemium model means code processing on vendor servers
- Smaller vendor with concentrated bus factor risk
Permissions requested
Pricing
Platforms
Review
Pay for Sweep if you manage repos with clear issue hygiene and a backlog of small, well-defined tasks. Skip it if your work is exploratory, your issues are vague, or you prefer local agents that integrate with your editor.
Good at
- Lives in GitHub—no local setup, no context-switching
- Handles multi-file changes and responds to review comments autonomously
- Freemium tier lets you test it on real work before committing
- Predictable on well-scoped tasks with clear acceptance criteria
- Good for clearing maintenance debt and 'good first issue' backlogs
Watch out
- Fails on ambiguous requirements or tasks requiring implicit context
- Can confidently produce plausible but broken code if specs are vague
- Less useful for exploratory or greenfield work
- Freemium limits mean you'll hit the paywall quickly on active repos
- Requires disciplined issue-writing to get useful results
Use cases
- Quietly knocking out bug-fix issues
- Triage of "good first issue" backlog
- Automated PR responses
- Long-tail maintenance work