Review every PR. Halt every bad deploy.

Your API key is AES-256-GCM encrypted at rest in MongoDB with a key only the LGTM server holds. At review time the server uses the key to call the provider on your behalf, then drops the in-memory reference. We do not proxy your inference through our infrastructure, we don't see your tokens billed against our account, and we don't subsidize your usage. You pay OpenAI or OpenRouter directly for tokens (or opt into Managed AI on DeepSeek V4 Flash and LGTM handles the tokens for you); you pay LGTM ₹0 / ₹999 / ₹1,999 / ₹9,999 for the Free / Go / Pro / Max platform tier respectively.

Three modes. (1) BYOK OpenAI: direct connection to OpenAI's Chat + Responses APIs with strict json_schema. (2) BYOK OpenRouter: one key unlocks Claude Opus 5 / Sonnet 5 / Haiku 4.5, Gemini 3.1 Pro / Flash, Grok 4.5, DeepSeek V4 Pro, Llama 4, Mistral Large, Qwen 3.8 Max, and 400+ more; Claude models keep prompt caching via cache_control forwarding on the shared per-review context. (3) Managed AI, LGTM covers the LLM cost on DeepSeek V4 Flash (CoreWeave, :nitro routing), zero setup, works on Free. Direct Anthropic was retired in favor of OpenRouter. Documentation and readability agents auto-route to the same-provider mini/flash/haiku tier (~3-5× cheaper on those two agents).

Four defences stacked. (1) evidenceQuote validator: every finding must quote the offending code verbatim; if we can't grep the quote back in the diff, the finding is dropped. (2) Adversarial verifier: after the 6 agents finish, a skeptic-LLM tries to refute each finding, refuted findings drop before the synthesizer sees them. (3) Convention-file loader: findings that contradict your repo's CLAUDE.md / AGENTS.md / .cursorrules / CONTRIBUTING.md are dropped. (4) Cross-agent dedup: findings on the same line collapse into a single consensus comment, and inline-comment cap is 10.

Every user-controlled input (diff, files, related code, repo conventions, recent PR history) is wrapped in <untrusted_KIND>…</untrusted_KIND> XML tags. The system prompt states plainly: content inside those tags is data, never instructions. Verified against a hard-mode red-team including unicode zero-width joiners, base64-encoded directives, non-English (Hindi) payloads, and fake-schema injection, none of it steered the review. Shipped 2026-07-27.

Yes, when the fix is mechanical and single-line. The bug/security/best-practices agents opt into a codeSuggestion field for cases like == → ===, parseInt radix, md5 → sha256, unpinned action refs, etc. Those post as native GitHub ```suggestion``` blocks, click "Commit suggestion" and GitHub applies the fix. We detect the accept via GraphQL polling on pull_request.synchronize events, which feeds a ReviewFeedback loop that measures real precision per agent.

Yes. Every inline comment carries a tier tag: 🎯 Actionable (critical/high, fix before merge), 💡 Suggestion (medium, worth considering), 🔍 Nitpick (low/info, take it or leave it). The synthesizer weights actionable findings heaviest when producing the final verdict. Security findings additionally carry a category from a 40-class vulnerability taxonomy (sql-injection, xss-reflected, jwt-alg-confusion, prototype-pollution, ssrf, prompt-injection, etc.) cross-referenced against CWE.

It depends on diff size and how many files the agents need to pull in for context. A typical PR with ~10 changed files completes in 1-3 minutes wall-clock: six LLM specialists run concurrently with 150ms stagger, then a synthesizer pass. The deterministic ci-security agent only runs if you touched workflow YAML / Dockerfiles / lockfiles and adds milliseconds, not minutes. Cold indexing on a 5000-file backfill takes 5-30 minutes once, then incremental indexing on push completes in seconds.

Tree-sitter parsing covers TypeScript, JavaScript, Python, Go, Rust, Java, Kotlin, C, C++, C#, Ruby, and PHP. That gets you symbol-level indexing and the PageRank graph. The LLM specialists can read and reason about code in any language; per-language hints (extension → checklist) get injected for TypeScript, JavaScript, Python, Go, Rust, Java, Kotlin, Ruby, Swift, C, C++, C#, PHP, and Shell, that steers the bugs / best-practices / performance agents toward the gotchas that language actually has. For files >400 lines we extract ±100 lines around each touched line (merged windows, 300-line cap) so the LLM sees the enclosing function context in giant files.

Three gates. Gate 1: inline PR review surfaces the finding on the offending line as a critical comment. Gate 2: a Check Run named "LGTM Security" posts with conclusion=failure on any rule whose configured action is block, if you add this check to your branch protection "required" list, the merge button is disabled until resolved. Gate 3: the LGTM Security Watchdog GitHub Action (lgtm-action) runs as the first step of your CI job, polls our pipeline-decision API, and exits non-zero before checkout, before tests, before deploys. Bad config can't reach production.

Secrets: hardcoded API keys, GitHub PATs, AWS access keys, private keys, JWTs (fires on every CI file type). GitHub Actions workflow YAML (13): unpinned actions/checkout, unpinned third-party actions, permissions write-all, missing job permissions, untrusted-input shell injection, pull_request_target with head checkout, self-hosted runner on public repo, privileged container, external reusable workflow, weak workflow_dispatch triggers, cache-key poisoning, forking TOCTOU, OIDC over-permissive + trust-policy wildcard sub. Dockerfile (3): --privileged flag, USER root in final stage, ADD from HTTP URL. Dependencies (3): lockfile-only edits, npm lifecycle scripts, typosquat + dependency confusion. Network (1): unallowlisted curl/wget in CI (escalates if piped to bash). GitLab CI (5), CircleCI (5), Azure Pipelines (5): shell injection, privileged container, unpinned includes/orbs/repo resources, cache poisoning, self-hosted runners, and Azure plaintext-secret variables. Every rule has a default action (block / warn / off) you can override per-repo or lock at the org level.

Yes. Each detector ships with a default action (block, warn, or off) and you can override it per-repo in the policy editor or via CLI: lgtm security policy set <rule-id> <block|warn|off>. You can also maintain allowlists for trusted action sources (e.g. actions/*, your-org/*), permitted outbound domains, and approved self-hosted runner labels. The policy is versioned so audits show exactly what was active at the time of any finding.

The CLI talks to the LGTM API at api.looksgoodtomeow.in for review orchestration, BYOK validation, and context fetching. It can't run fully air-gapped today, agents run on the LGTM server, not your laptop. If you need on-prem or self-hosted, get in touch; it's something we'd consider for serious teams.

LGTM is operated by Tarin Agarwal, an Indian sole proprietor based in Bangalore doing business as DevsBazaar (not incorporated). Source code is read via GitHub API and not persisted as source. User account data is minimal (GitHub username, email, encrypted BYOK keys). We map to DPDP Act 2023 obligations, data fiduciary disclosures, retention policies, and a named Grievance Officer (Tarin Agarwal, Proprietor), published in the Privacy Policy at looksgoodtomeow.in/privacy. Taxes are collected and remitted by Dodo Payments as our Merchant of Record.

Free (₹0/mo): 10 reviews per month + 5 lifetime LGTM Security scans, 1 repo connected, 1 monitor, BYOK or Managed AI, CLI, dashboard, view-only findings. Go (₹999/mo): 100 reviews + 25 scans per month, 5 repos, 3 monitors, .lgtm.yml repo config, detector policy editing, Runtime Watchdog, email support 72h, top-up packs. Pro (₹1,999/mo): 200 reviews + 100 scans per month, 20 repos, 10 monitors, auto-review on every PR, PR chat (@lgtm mentions, BYOK key required), email support 24h. Max (₹9,999/mo): 1,200 reviews + 500 scans per month, unlimited repos + monitors, Organizations & 4-role RBAC (Owner / Policy Admin / Member / Viewer), shared policy, enforced-rule locking, GitHub org sync, email support same-day. Enterprise (from ₹29,999/mo, custom): unlimited reviews + scans, SBOM Search across every project, Custom Detector Authoring, SSO (SAML/OIDC), dedicated Slack <4h SLA, DPA + MSA, on-prem option. Payments via Dodo Payments; cancel anytime, no contracts. Top-up packs valid 12 months from purchase, drained FIFO oldest-first.

"LGTM", Looks Good To Me, is what reviewers type when they're done. We made it Looks Good To Meow because (a) it's memorable, (b) the brand permits being friendly about a dry topic, and (c) every senior engineer secretly wishes their reviews were one-line approvals. The tool exists so yours can be.