A product by WeFrameTech

Every pull request,
reviewed before it ships.

Gitvora is AI code governance inside GitHub — automatic reviews, security scans, risk scores, and bot commands via @gitvora-bot. Run on Ollama locally, OpenRouter in the cloud, or hybrid.

Install on GitHubMeet Gitvora →
6
review types
3
inference modes
<90s
typical PR
checkout.js — Gitvora review
41function total(items) {
42-return items.reduce(sum);
42+return items.reduce(sum, 0);
Gitvora · critical — reduce() missing initial value on empty cart. Risk 6.8 → 2.1 after fix.
Gitvora

brand

Three heads. One merge gate.

Gitvora is built for teams that treat code review as infrastructure — not an afterthought. The hydra symbolizes layered scrutiny: fast routine checks, deep security analysis, and governance you operate from a single dashboard.

Vigilance

Every PR gets a consistent review pass before merge — no silent gaps in your pipeline.

Governance

Policy, access control, audit logs, and model routing you configure — not a black box.

Control

Run fully on Ollama locally, burst to cloud when the diff demands it, or stay hybrid.

review-types

Six review capabilities, one GitHub bot.

Each type has its own prompt, model routing, and output. Trigger from PR events or comment @gitvora-bot on any pull request.

01

Standard review

Runs on PR open. Bugs, performance, and style — scoped to the diff, not the whole repo.

automatic
02

Security scan

Injection, auth gaps, secrets, SSRF, XSS — checklist-driven with cloud routing by default.

@gitvora-bot review security
03

Deep review

Architecture, cross-file impact, and maintainability for high-risk or large changes.

@gitvora-bot review deep
04

Explain

Plain-English summary of what changed and why it matters for reviewers and PMs.

@gitvora-bot explain
05

Risk score

Weighted 0–10 score from diff size, sensitivity, findings, and complexity.

@gitvora-bot risk
06

Test suggestions

Missing unit and integration tests plus edge cases introduced by the change.

@gitvora-bot test

inference-mode

Local Ollama, cloud API, or both.

Pick where inference runs. Local uses Ollama on your hardware. Cloud uses Groq or OpenRouter with smart model routing. Hybrid escalates only when the diff earns it.

Ollama on your hardware

Local

All reviews on local models. Zero per-review API cost. CPU, GPU, or mixed compute from the dashboard.

Ollamaofflineprivate

Groq or OpenRouter

Cloud

Groq free tier for volume; OpenRouter for frontier models. Primary and fast model routing by PR size.

GroqOpenRoutersmart models
recommended

Recommended

Hybrid

Routine PRs on Ollama; security, large diffs, and sensitive paths escalate to cloud automatically.

smart routingcost-aware

router.decide()

Cloud spend only when the diff earns it.

Access control, per-repo rules, per-action models, and hybrid escalation — all configurable from the dashboard.

1
WebhookPR opened · comment · push
2
PolicyInstall approved · repo enabled · action on
3
RouteLocal Ollama or cloud (Groq/OpenRouter)
4
DeliverPR comment · check run · finding tracking
Pull requestsAccess controlInfrastructureObservabilityAudit log

dashboard

Operate it like infrastructure.

Model dropdowns, inference mode, prompts, webhooks, team roles, and trigger reviews from the UI — not only from GitHub comments.

gitvora.ai/dashboard
24
PRs this week
3.1
avg risk
12
findings caught

trigger review

standardsecuritydeepexplainrisktest

get-started

Install on GitHub in under a minute.

Select repositories, enable review per repo, and your first PR gets a Gitvora pass automatically.

github.com/apps/gitvora

Install Gitvora on GitHub

Choose your personal account or an organization, select repositories, and confirm. Repos appear here after install — enable review per repo when ready.

  1. Click install — GitHub opens (use the account that owns the repos)
  2. Pick org or personal account → select repos → Install
  3. Return here and refresh — toggle review on each repo
Install on GitHubGo to repositories →

Bot commands use @gitvora-bot — your GitHub App bot login.