CodeRabbit retweeted
Replying to @coderabbitai
@coderabbitai's engineering team is shipping ~20x more software with Codex.
They've automated shipping low-risk changes and rethought where human approval is needed.
Give it a read: openai.com/index/coderabbit-…
We pledged $1M of free AI security scans and found 43K+ critical/high vulnerabilities 🤯
On Oct 23 we opened up CodeRabbit Deep Scans for free, up to $1M of AI compute. By Nov 3 the pool was gone.
• 13,049 Deep Scans across 11,277 repos and 2,700+ orgs
• 8x our normal daily scan volume; 9 in 10 orgs had never run a Deep Scan with us before
• 43,000+ critical or high vulnerabilities found, 3,000+ rated trivially exploitable
• 1 in 3 repos and 71% of orgs had at least one critical or high issue
• 56% were broken access control (auth bypass + IDOR), not injection
• 9,200+ issues already fixed, ~500 AI fix PRs merged
Try CodeRabbit Security for your repo now. For all users who havent tried it yet you get 1 free scan upto $1000
@coderabbitai
coderabbit.ai/security
CodeRabbit retweeted
We put GPT-6 Cyber inside CodeRabbit’s security scan pipeline.
22 of 33 known vulnerabilities caught vs 19 for our production ensemble, and 66% more high and medium severity findings.
Full eval below.
Introducing GPT‑6 Cyber: a major advance in security research that pairs stronger capabilities with better model alignment.
The model powered the Linux kernel research we announced yesterday, and security teams at companies like Mozilla, Palo Alto Networks, Calif, and Cisco—alongside our own at OpenAI—are already putting it to work.
GPT-6 Cyber is available to select Daybreak Red customers and we are expanding access over time.
openai.com/index/introducing…
CodeRabbit retweeted
Routine PR chores in @coderabbitai Triage can now run themselves
Rules:
+ merge low-risk changes once checks and reviews pass
+ let the Coding Agent auto-fix failing PRs
+ close stale ones after a 24h notice
+ ping reviewers in Slack
run it on your repos!
CodeRabbit retweeted
From the @coderabbitai changelog
The Deep Scan findings API is now on all plans. No Enterprise plan, Security add-on or trial
All you need is a non-agentic API key with security:read
GET /v1/security/scans/code returns findings as JSON, CSV or SARIF
CodeRabbit retweeted
What else does your PR touch?
@coderabbitai Secure Blast Radius maps it in Change Stack
upstream, downstream and tests, every edge backed by code evidence + security findings light up the paths they touch
(in open beta)
CodeRabbit retweeted
Most scanners check your code against known rules, vulnerable packages and exposed secrets
@coderabbitai Deep Scan works out what your app should enforce, then checks if your code does
That's how it finds application-specific flaws
CodeRabbit retweeted
Another great sunset event on our @coderabbitai rooftop 🌆
Follow our luma calendar and join us for the next one!
luma.com/coderabbitai
CodeRabbit retweeted
This week we didn’t see an uptick in shipping velocity. We stalled due to CI capacity issues with our provider, and to make things worse, even our cloud providers have run out of capacity to host our runners. VCs are getting excited about funding faster/cheaper runners while the reality is that constantly optimizing and rewiring CI/CD has become the name of the game. Once you solve the agentic validation and code-review bottlenecks, you still have plenty of engineering and janitorial work to keep the factory humming.
We at @coderabbitai shipped 5K PRs last week. Our tiny team is shipping more than a thousand-person dev team. And we are nowhere near hitting our maximum potential. If we industrialize software development correctly, 50K PRs a week are totally achievable, if not more. At this point, it’s machines building machines.
We are looking for pioneers to join our software factory initiative. Must meet one of the following criteria to join the project:
- Tastefully shipped at least 1000 PRs in the last 30 days.
- Played at least 500 hours of strategy or simulation games such as Civilization, Age of Empires, Transport Tycoon, Factorio, etc.
This is a once-in-a-lifetime opportunity to define the UX/DS for building and shipping software at scale. You'll solve a broad spectrum of problems, from designing provably correct software using formal methods to achieving operational excellence with agentic operations. You will also get millions of dollars of token budgets!
Please DM me only if you qualify and want to spend your next few months/years on this!
CodeRabbit retweeted
GPT-6.1 Sol is being used by @coderabbitai to help developers find security risks across complex codebases.
openai.com/index/gpt-6-1-sol…
CodeRabbit retweeted
For SF @Techweek_, I gave a talk at @Intuit about where we’re taking CodeRabbit: scaling engineering judgment as agents write more code.
Helping developers understand changes, check that they match their intent, and decide what should ship.
Full talk below.
"With customization, and with partners in the ecosystem that we work with, you could turn these models into the frontier. And as a result, turn your proprietary data into sovereign intelligence."
Thanks, @JensenHuang and @NVIDIAAI, for highlighting our work with the team at @coderabbitai on post-training open-source models to reach frontier capability!
CodeRabbit retweeted
Forgot to grab a good photo with you all, but I really enjoyed joining you at ThunderPlains @techlahoma! Thanks to @vlucas and the Techlahoma team for having me.
Slides & Github Repo in the comments 👇
🤖 Made with AI
CodeRabbit retweeted
We at @coderabbitai shipped 5K PRs last week. Our tiny team is shipping more than a thousand-person dev team. And we are nowhere near hitting our maximum potential. If we industrialize software development correctly, 50K PRs a week are totally achievable, if not more. At this point, it’s machines building machines.
We are looking for pioneers to join our software factory initiative. Must meet one of the following criteria to join the project:
- Tastefully shipped at least 1000 PRs in the last 30 days.
- Played at least 500 hours of strategy or simulation games such as Civilization, Age of Empires, Transport Tycoon, Factorio, etc.
This is a once-in-a-lifetime opportunity to define the UX/DS for building and shipping software at scale. You'll solve a broad spectrum of problems, from designing provably correct software using formal methods to achieving operational excellence with agentic operations. You will also get millions of dollars of token budgets!
Please DM me only if you qualify and want to spend your next few months/years on this!
What is happening inside @coderabbitai's engineering team feels unprecedented and is hard to explain to anyone on the outside. We have hardly grown as an engineering team, but we are shipping software 5–6x faster than we were six months ago. The world may not have seen productivity gains like this since the Industrial Revolution.
We’ve had to rewire how we ship software as we speedrun through one bottleneck after another: agentic reviews, agentic validation, local resource constraints, collaboration bottlenecks, CI/CD pipelines, release processes, and so on. Every bottleneck we solve exposes the next. Processes that worked just a few months ago are already struggling to keep up.
We are looking for passionate builders who want to help define how the industry ships software at scale. It’s a once-in-a-lifetime opportunity to be part of a team on a parabolic learning curve, encountering and solving problems that most other startups haven’t reached yet.
If that excites you, I would love to hear from you. DMs are open!
I want to give a shoutout to @coderabbitai for letting me do free code reviews on open source github repos.
Claude codes well, but coderabbit always finds the edge cases.
1,049,817 open-source code reviews in September, a new monthly record!
That's 2.49x April's volume and up 14.4% from August.
"Not using it today would be like racing Formula One without a seatbelt or helmet." – @tannerlinsley, creator of TanStack
CodeRabbit retweeted
A morning in the warren, or how @coderabbitai fix-ci works
6:02 a.m. Your carrot bed (your PR) fails inspection (CI)
1. You ring the bell: comment @coderabbitai fix-ci on the PR
2. The rabbit reads the inspector’s notes first: the failing checks, their output and your CI config
3. It never digs in your bed. It clones your repo into a sandbox and fixes things there
4. The irrigation isn’t its business. CI config, lockfiles and dependency manifests are left for you, listed in the status comment
5. The fix lands as a raised bed on top of yours: a stacked PR on your branch. Want it straight on your branch instead? fix-ci commit
6. The inspector comes back. Your real CI runs on the stacked PR
Merge it into your branch
Back in bed by 6:15

























