Octopus
octopus-review.ai
What it is
Octopus indexes a codebase and uses that context to review pull requests automatically. When a pull request opens, it retrieves related indexed code through vector search and sends the changes and context to a configured language model. Findings receive severity ratings and appear as inline comments. The GitHub integration also reviews updates, posts check runs, and can create issues from findings. Octopus supports GitHub, GitLab, Bitbucket, and Forgejo, and includes source-cited codebase chat plus a CLI for reviews, context queries, and repository checks. Teams can use knowledge-base documents to guide reviews, with rules, repositories, and reviewer settings shared across an organization. AI options include providers such as Anthropic Claude, OpenAI, Google, xAI Grok, Alibaba Qwen, Cohere, and OpenRouter. It can be self-hosted with Docker Compose, PostgreSQL, and Qdrant, with optional local models and embeddings through Ollama. The cloud service stores review and indexing data; findings persist through the PR lifetime and 90 days after closure, while indexed embeddings remain as long as a repository is connected. Free self-hosted and cloud tiers are listed. Live team telemetry requires a paid organization.
Spec sheet
- What it does
- Octopus indexes a complete codebase and automatically reviews pull requests with context-aware, severity-rated inline findings.Read 20 Oct 2026 · octopus-review.ai
- Product
- Octopus indexes a codebase for context and automatically reviews pull requests, posting severity-rated findings as inline comments.Read 7 Oct 2026 · octopus-review.ai
- Security
- The security overview says HTTP traffic uses TLS 1.2 or higher and OAuth tokens for listed third-party integrations are encrypted at the row level using AES-256.Read 7 Oct 2026 · octopus-review.ai
- Support
- The free cloud tier includes community support, and the maker invites users to report issues and contribute through GitHub.Read 7 Oct 2026 · octopus-review.ai
- License
- The application source is available under a Modified MIT License with a commercial attribution condition.Read 20 Oct 2026 · octopus-review.ai
- Headquarters
- London, England, United KingdomRead 28 Sep 2026 · octopus-review.ai
- Company
- The site identifies SC Technology Limited as the company behind Octopus and gives its registered address as 3rd Floor, 86–90 Paul Street, London EC2A 4NE.Read 7 Oct 2026 · octopus-review.ai
- AI code context
- When a pull request opens, Octopus retrieves relevant indexed code using vector search and sends the diff and context to a configured language model for analysis.Read 7 Oct 2026 · octopus-review.ai
- AI limitation
- The terms say generated reviews are suggestions that require human validation and are not a substitute for human review of critical systems.Read 20 Oct 2026 · octopus-review.ai
- AI providers
- Cloud and self-hosted configurations support providers including Anthropic, OpenAI, Google, Alibaba Cloud, Cohere, Grok, OpenRouter, and local Ollama in self-hosted deployments.Read 20 Oct 2026 · octopus-review.ai
- API access
- Organization-scoped API tokens are supported for CLI, CI/CD, and scripts, and the documentation exposes CLI model-discovery endpoints.Read 20 Oct 2026 · octopus-review.ai
- Audit retention
- Hosted audit entries are retained for 365 days by default, while self-hosted installations can configure retention.Read 20 Oct 2026 · octopus-review.ai
- Automatic review workflow
- New or updated pull requests receive AI reviews, check runs, and line-level comments.Read 20 Oct 2026 · octopus-review.ai
- Chat and CLI
- The product includes source-cited codebase chat and a CLI for reviews, context queries, and repository state checks.Read 7 Oct 2026 · octopus-review.ai
- CLI
- The octp command-line client can trigger reviews, index repositories, query the codebase, manage knowledge documents, and report usage.Read 20 Oct 2026 · octopus-review.ai
- Company headquarters
- The legal address listed in the terms is 3rd Floor, 86-90 Paul Street, London EC2A 4NE.Read 20 Oct 2026 · octopus-review.ai
- Company legal identity
- The terms identify the operator as SC Technology Limited, registered in England and Wales under company number 09579805.Read 20 Oct 2026 · octopus-review.ai
- Data handling
- Hosted Octopus stores review and indexing data; review findings remain for the PR lifetime plus 90 days after closure, while indexed embeddings remain as long as the repository is connected.Read 7 Oct 2026 · octopus-review.ai
- Data processing limitation
- Cloud reviews send repository context to the configured LLM provider; keeping processing entirely on a private network requires self-hosting with local AI services.Read 20 Oct 2026 · octopus-review.ai
- Dependency analysis
- The CLI can scan npm dependencies for known vulnerabilities, malicious packages, and supply-chain risks.Read 20 Oct 2026 · octopus-review.ai
- Documentation depth
- Public documentation covers setup, integrations, pricing, CLI, self-hosting, GitHub Actions, security, privacy, terms, and a dated changelog.Read 20 Oct 2026 · octopus-review.ai
- Editor extensibility
- An editor plugin page documents Octopus integration for Cursor and Claude Code, while the organization publishes plugin repositories.Read 20 Oct 2026 · octopus-review.ai
- Git providers
- Octopus supports GitHub, GitLab, Bitbucket, and Forgejo; GitLab supports self-hosted instances, and private Forgejo can connect through a local connector.Read 7 Oct 2026 · octopus-review.ai
- GitHub workflow
- The GitHub integration reviews pull requests on open and update, posts inline comments and check runs, and can create issues from findings.Read 7 Oct 2026 · octopus-review.ai
- Issue tracking integrations
- Review findings can be converted into Linear or Jira issues with project, team, priority, and status handling.Read 20 Oct 2026 · octopus-review.ai
- Knowledge base
- Teams can upload architecture documents, style guides, and other knowledge files for reviews to consult.Read 20 Oct 2026 · octopus-review.ai
- Limit
- Live team telemetry requires a paid organization, defined as any credit purchase or bring-your-own-key setup.Read 7 Oct 2026 · octopus-review.ai
- Limit: company scale
- MakerStack characterizes Octopus as operated by a single developer, which may limit support and scale.Read 20 Oct 2026 · makerstack.co
- Limit: indexing speed
- The DEV comparison reports that indexing large repositories takes time and first setup is not immediate.Read 20 Oct 2026 · dev.to
- Limit: pricing transparency
- MakerStack says the public pricing page omits important credit, subscription, and volume-bonus figures.Read 20 Oct 2026 · makerstack.co
- Limit: retrieval noise
- The DEV comparison reports that retrieval can sometimes select irrelevant context, producing noisy suggestions.Read 20 Oct 2026 · dev.to
- Limit: security scanning
- The DEV comparison describes security scanning as basic and says a separate vulnerability tool may be needed.Read 20 Oct 2026 · dev.to
- Notable news
- Product Hunt shows Octopus Review promoted with the tagline “Ship code fast, no bugs” and a visible score of 10 on its listing page.Read 20 Oct 2026 · producthunt.com
- Open issues signal
- Good First Issue lists 17 beginner-friendly open issues and reports 53 of 54 outside pull requests merged in the previous 30 days.Read 20 Oct 2026 · goodfirstissue.org
- Praise: repository context
- The independent DEV comparison praises full-repository indexing, codebase Q&A, and team knowledge-base support as strengths.Read 20 Oct 2026 · dev.to
- Project activity
- The public GitHub organization shows the main repository with 109 stars, 24 forks, and updates through October 2026.Read 20 Oct 2026 · github.com
- RAG chat
- The product provides source-backed chat answers about indexed code, documentation, reviews, and knowledge-base content.Read 20 Oct 2026 · octopus-review.ai
- Rating on G2
- No rating out of 5 from 0 reviews; G2 says Octopus Code Review has not been reviewed yet.Read 20 Oct 2026 · g2.com
- Rating on MakerStack
- 7.0 out of 10 from 1 editorial review.Read 20 Oct 2026 · makerstack.co
- Repository-wide context
- Reviews retrieve relevant chunks from the indexed repository instead of relying only on changed lines.Read 20 Oct 2026 · octopus-review.ai
- Security controls
- Authentication supports GitHub, Google, Microsoft/Entra ID, and magic links, with organization roles, revocable sessions, webhook verification, and audit logs.Read 20 Oct 2026 · octopus-review.ai
- Security encryption
- Official security documentation states TLS 1.2 or higher in transit and encrypted PostgreSQL, Qdrant, object storage, and integration-token data at rest.Read 20 Oct 2026 · octopus-review.ai
- Self-hosting
- Self-hosting uses Docker Compose with PostgreSQL, Qdrant, and a prebuilt ghcr.io/octopusreview/octopus-selfhost image.Read 20 Oct 2026 · octopus-review.ai
- Severity levels
- Findings are categorized as Critical, Major, Minor, Suggestion, or Tip, with Critical findings able to block merging.Read 20 Oct 2026 · octopus-review.ai
- Slack integration
- The Slack app supports an /octopus command for codebase questions and configurable review and indexing notifications.Read 20 Oct 2026 · octopus-review.ai
- Supported code hosts
- Integrations are available for GitHub, GitLab, Bitbucket, and Forgejo, including self-managed GitLab.Read 20 Oct 2026 · octopus-review.ai
- System requirements
- The self-host guide requires PostgreSQL 15 or newer, Qdrant, Node.js 20 or Bun, and an OpenAI key for default embeddings unless local Ollama is used.Read 20 Oct 2026 · octopus-review.ai
- Team standards
- Knowledge-base documents can guide reviews, and team rules, repositories, and reviewer settings are shared across an organization.Read 7 Oct 2026 · octopus-review.ai
Plans and prices
Strong points and limits
Strong points
- Posts severity-rated findings as inline comments.
- Supports four Git providers, including Forgejo.
- Includes source-cited codebase chat and a CLI.
- Free cloud tier includes integrations and community support.
Limits
- Live team telemetry requires a paid organization.
- Hosted findings remain 90 days after PR closure.
- Indexed embeddings remain while a repository is connected.
Who it suits
Octopus suits software teams that want automated pull request feedback across supported Git providers, with organization-level review rules. Teams can choose hosted service or self-hosting, and may use local models in a self-hosted setup.
Verdict
Octopus combines indexed code context, automated reviews, team standards, and several hosting options. Review data retention and the paid requirement for live team telemetry are worth considering before choosing the cloud tier.
Where Specifiction places it
- Code review software#12 of 518.6
- AI Code Review Tools#12 of 488.5