Greptile

ceo @greptile

Greptile Security is a new pull request scanner from Greptile, an AI code reviewer that automatically reviews pull requests already used by engineering teams at companies like Brex, Substack, and Bilt . The launch adds a security layer to Greptile's existing review agent, aimed at engineering and application security teams who want vulnerabilities flagged in the PR itself rather than after merge. It runs three passes on every change: Opengrep pattern-matching rules that catch dangerous code constructs deterministically, software composition analysis that checks dependencies against known vulnerability databases , and an AI agent that reads surrounding context to spot chained exploits that rule-based tools miss. The timing is the pitch. As coding agents push more machine-written code into repositories, teams need review that keeps pace without drowning reviewers in false positives from legacy SAST tools. Greptile's approach pairs deterministic scanning (Opengrep rules for known patterns, SCA for CVEs in dependencies) with LLM triage that reasons about whether a finding is actually exploitable in the specific codebase. Example catches on the product page include authorization bypasses, command injection through malicious Git tags, and PATH attacks in CI workflows. The product ships to every existing Greptile customer by default, with no separate SKU or setup. Greptile was co-founded in 2023 by CEO Daksh Gupta with fellow Georgia Institute of Technology alumni Soohoon Choi and Vaishant Kameswaran , along with Davis Liddell , and is based in San Francisco. This launch positions the company against pure-play PR security scanners while keeping code review and vulnerability review inside a single agent.

Tags

Comments (7)