Commits more than $10 million to keep AI code review and agent capabilities free for open source

SAN FRANCISCO--(BUSINESS WIRE)--

CodeRabbit, the pioneer of AI code review, today announced a $143 million Series C funding round at a $1.5 billion valuation and introduced Agentic Change Management — the control layer that enables teams to govern, understand, and ship software created by people and agents. The company will use the new capital to accelerate international expansion, research and product development.

The round was co-led by Atomico and Smash Capital, with participation from new investors including BMW i Ventures, Datadog, Hirtle Callaghan, SineWave Ventures, Scenic Management, and existing investors including CRV, Scale Venture Partners, Flex Capital, Pelion Venture Partners, Harmony Partners and Engineering Capital. Luca Eisenstecken, Partner at Atomico, will join the company's Board of Directors.

"As AI becomes critical infrastructure for the global economy, organisations will increasingly need independent governance layers that can validate software regardless of which model produced it. That kind of trusted, model-agnostic infrastructure strengthens the resilience of the software that businesses depend on," said Eisenstecken. "CodeRabbit's independent review system and deep contextual understanding position it as the control layer for agentic software development. The company's growth and product depth convinced us that CodeRabbit is defining the new and critical field of Agentic Change Management."

The latest funding comes less than a year after CodeRabbit’s $60 million Series B and follows a period of explosive growth. Revenue grew more than 5x year-over-year as engineering organizations globally adopted independent review and governance infrastructure for AI-generated code. The company plans to invest more than $10 million to keep AI code review and agent capabilities free for open source projects and maintainers over the next 12 months. CodeRabbit conducts more than 2 million code reviews each week and is depended on by more than 17,000 customers, including Adyen, BMW, Indeed, JFrog, NVIDIA, Trivago and Campfire.

“The digital ambitions of automotive companies depend on highly efficient engineering teams and consistently reliable software. CodeRabbit has become a key technology in helping developers improve code quality and work more effectively,” said Kasper Sage, Managing Partner at BMW i Ventures. “Our investment demonstrates our belief in the company’s technology and its long-term potential to be the category leader.”

AI is reordering software engineering

Traditional issue tracking systems such as Jira were built for an era in which teams planned and prioritized work before code was written. Engineering capacity was scarce and expensive, so product managers and engineering leaders curated a backlog of ideas, support requests, and requirements before assigning work to developers.

AI-native development is reversing that sequence. Developers, product managers, designers, marketers, background agents, issue systems, support tools, and observability platforms can now create code or open pull requests continuously. Code increasingly exists before a team has established alignment, assigned priority, or determined whether the work deserves to ship. The backlog is moving from tickets to proposed code.

This shift moves triage, planning, and governance downstream. The pull request becomes the auditable decision point where teams determine whether a change meets the quality bar, how much risk it carries, whether it deserves human attention, what it means for the larger system, and whether it should be accepted and shipped.

“Code changes now originate across the software organization, including from developers, non-technical personnel, as well as from coding agents to issue trackers, support systems, and production alerts. Every change creates a decision for the team,” said Harjot Gill, co-founder and CEO of CodeRabbit. “We pioneered AI code review to give teams an independent system that validates the work before it ships. Agentic Change Management expands that layer to determine what deserves attention, explain each change’s impact, and continue monitoring the codebase after it ships.”

CodeRabbit: The platform for Agentic Change Management

Agentic Change Management extends CodeRabbit’s independent AI code review into a broader system for governing software change. At its foundation, CodeRabbit validates changes created by developers and AI agents using repository-wide context, organizational standards, pre-merge checks, team knowledge, and evidence from isolated test environments. Coding agents can address findings through automated fix-and-re-review loops before human review, allowing teams to focus on understanding the change and deciding what should ship.

Together, these capabilities make Agentic Change Management operational through one central, independent system built for teams that spans validation, prioritization, explanation, and continuous codebase monitoring:

CodeRabbit Triage expands the independent review layer into prioritization and routing for incoming pull requests. It scores changes according to value, urgency, risk, dependencies, readiness, and reviewer fit, then directs consequential work to human reviewers, routes low-risk changes into automated workflows, and filters duplicate, irrelevant, or unready work. This helps teams focus reviewer capacity on the changes with the greatest value and risk.

CodeRabbit Change Stack expands the layer into explainability by showing what a change means. This explainability tool replaces the traditional alphabetical file view with a guided representation of contracts, domain behavior, integrations, tests, and migrations. Blast-radius and architecture analysis show how a change affects the larger system and where deeper scrutiny is required.

CodeRabbit Security expands the independent layer beyond merge. Full-repository scans and continuous monitoring identify vulnerabilities and other risks in code already in production. It verifies findings, prioritizes remediation, and sends proposed fixes back through the pull request process, so the same control layer that evaluates incoming changes continues protecting the code after it ships.

AI raises the stakes for codebase security

Large language models are lowering the cost and expertise required to discover software vulnerabilities, allowing defenders and attackers to examine more code and test more attack paths at greater speed and scale.

CodeRabbit Security gives security teams an AI-native response, a system that continuously hunts for vulnerabilities in code already running in production. It uses the proprietary codegraph technology CodeRabbit fine-tuned over years of advanced code review to dissect codebases into trust boundaries. CodeRabbit Security independently reasons across the entire codebase to identify complex vulnerabilities that fixed rules and file-level pattern matching cannot express.

Every surfaced finding is adjudicated against code evidence. This architecture allows CodeRabbit Security to identify vulnerability classes that traditional rule-based tools struggle to detect, including authorization bypasses, insecure direct object references, business-logic flaws, and emerging threats created by AI-enabled systems.

“Security now requires a continuous system that can reason across the repository, verify whether a threat is real, and move the fix back through the development workflow,” said Brad Twohig, Founding Partner at Smash Capital. “CodeRabbit Security brings that capability into the same independent control layer teams use to review, understand, and govern software change.”

Product availability

CodeRabbit Triage, Change Stack and CodeRabbit Security are all available now on CodeRabbit’s platform. Customers will receive these new capabilities immediately. New customers can sign up for a 14-day trial at coderabbit.ai.

International expansion

CodeRabbit has recently opened a London office in Moorgate, after seeing large customer pull from some of the most sophisticated European enterprises and scaling headcount to 50 full time employees across London and the EU. The company is planning to double down on the European footprint as part of this round. Additionally, CodeRabbit is planning to enter the Japanese market, as well as other key Asian markets, where the company is seeing large demand for its product.

About CodeRabbit

Headquartered in San Francisco, CodeRabbit pioneered independent AI code review and has expanded that layer into Agentic Change Management, the control plane for agentic software development. The platform reviews pull requests for quality, security, and reliability, whether changes originate with people, coding agents, or connected systems. CodeRabbit also prioritizes incoming work, explains the impact of each change, and continuously monitors production code for vulnerabilities and maintainability risks.

More than 150,000 open source projects and 17,000 customers worldwide trust CodeRabbit to improve their code, including Adyen, BMW, Indeed, JFrog, NVIDIA and Trivago, For more information, visit www.coderabbit.ai.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260812311754/en/

Source: CodeRabbit