CodeRabbit Review: Is It Legit and Safe?
⚠ Policy change detected Oct 17, 2026 — see Policy Changes below for what's different.
Quick verdict: CodeRabbit
Our verdict
CodeRabbit was checked on 3 of 5 trust dimensions using public records. Evidence found for: company & identity, data & privacy, billing & subscription. Not yet assessed: product reality, community reputation.
Who operates CodeRabbit?
FactsWe could not confirm which company operates CodeRabbit.
Public records show that the team behind it isn't publicly identified and its domain was first registered in 2023. These are facts from public records; the sources are in the sections below, and we do not give an overall verdict.
What do CodeRabbit's privacy terms say?
FactsCodeRabbit's privacy policy commits to GDPR.
No billing complaints have been filed with us, but our reports database is still new — check recent Trustpilot reviews on cancellation and refunds before you subscribe. The specifics, with sources, are in the data section below.
A plain-language read of the documented evidence below — every claim here is backed by the sources in the sections that follow.
What we checked
We looked at 3 of 5 areas (the rest are marked “Not yet checked”). Each fact below links to its source and shows when we captured it — see how we check.
| Area | Sourced facts | How we checked |
|---|---|---|
| Company & Identity | 1 | Automated signals |
| Data & Privacy | 2 | Automated signals |
| Billing & Subscription | 1 | Automated signals |
| Product Reality | Not yet checked | |
| Community Reputation | Not yet checked | |
CodeRabbit pricing at a glance
From CodeRabbit's public pricing page · captured 2026-10-20. Prices change — verify current pricing →
- Essentials$24/user/mo.
- Team$48/user/mo.
- Advanced$72/user/mo.
- EnterpriseContact Us
Who's Behind CodeRabbit?
WHOIS: coderabbit.ai registered 2023-04-27 (~3 year(s) old).
What Happens to Your Data
Compliance commitments in policy — GDPR: yes, CCPA: no. Privacy policy changed (a major change): we detected it on October 17, 2026, and the previous version was still live on October 16, 2026 — Privacy policy for CodeRabbit changed: 92 clause(s) added, 70 removed. Flagged as a major change. Notable: "8. Third Party Websites and Links". Privacy policy changed (a major change): we detected it on October 9, 2026, and the previous version was still live on July 7, 2026 — Privacy policy for CodeRabbit changed: 54 clause(s) added, 34 removed. Flagged as a major change. Notable: "7. How We Disclose and Share Your Information".

Does CodeRabbit train AI on your data?
We don't reduce this to a yes/no — wording matters (defaults, opt-outs, enterprise carve-outs). Here is exactly what CodeRabbit's privacy policy said when we captured it on 2026-10-17:
“Other types of information we collect is information related to how you use our Website or Apps, which helps us improve our Services.”
“- Neither CodeRabbit nor OpenAI or Anthropic uses personal information collected as part of the code review to train, refine, or otherwise influence our models or any third-party models.”
Read it in context: CodeRabbit privacy policy ↗ (captured 2026-10-17). If this policy changes materially, it will appear on our policy-change alerts.
Pricing & Cancellation Reality
Specific prices shown publicly per their pricing page. Pricing changed: we detected it on October 20, 2026, and the previous version was still live on October 19, 2026 — Pricing for CodeRabbit changed: 1 clause(s) added, 1 removed. Notable: "Assign CodeRabbit to common engineering tasks via Slack. Ask questions about your code base or systems, run coding tasks, and create automations that run autono...". Pricing changed: we detected it on October 16, 2026, and the previous version was still live on October 15, 2026 — Pricing for CodeRabbit changed: 3 clause(s) added, 1 removed. Notable: "5*".
Product reality
We check tools against public records, so this page covers CodeRabbit's company, data, billing and reputation — not how well its output actually performs, which we haven't checked yet. To judge that, try the free tier if there is one and read recent hands-on reviews before committing to a paid plan.
Community Reputation
Not yet assessed.
No evidence on file yet.
Technical signals for CodeRabbit
- HTTPS certificate:The certificate we recorded expired on 2026-09-20; our last check (2026-07-07) is out of date — could not verify the current one
- Mail server:MX records configured on the domain
- Threat blocklists:Not on the Cloudflare malware blocklist
Network-level facts collected automatically on 2026-07-07. A missing header is common even on legitimate sites, so we draw no conclusion from it. A flagged threat blocklist is the only red flag in this list.
Frequently Asked Questions
Is CodeRabbit legit?
We could not confirm which company operates CodeRabbit from the public records we checked; the company & identity evidence we did find is listed above.
Is CodeRabbit safe to use?
We do not rate CodeRabbit on safety; the data section above lists the specifics we verified about how it handles data.
Is CodeRabbit a scam?
We could not confirm who operates CodeRabbit. We checked 3 of 5 trust dimensions and list the evidence above; we do not give an overall verdict, so weigh that before you pay.
CodeRabbit Alternatives
Similar AI tools we track (by semantic similarity):
Compare CodeRabbit head-to-head on trust: