New: AI Review is now available on DeepSource Enterprise Server, with support for BYOK. This brings state-of-the-art AI code review and code security to self-hosted environments without your code passing through DeepSource Cloud or any third-party endpoint.

Studies suggest that most orgs take ~6mo on average to fix CVEs, but attackers exploit new CVEs in <5 days. DeepSource's new continuous CVE monitoring helps security teams change that.

Introducing, BYOK for AI Review on DeepSource. The number one blocker we hear from enterprise teams evaluating AI code review: "We can't send our source code to a model provider we don't already have an agreement with." You can now bring your own model provider to DeepSource.

DeepSource CLI now supports Windows. Works on Windows amd64. Same functionality as macOS and Linux versions.

New: Block PRs only when it matters. Quality Gates now let you filter by severity and category, so you can fail builds on critical security issues without blocking on minor style problems. Works at the repo level and group level. Set different configurations for different teams.

Meet the new DeepSource's CLI, built to make it easier for your AI coding agent to work with our code review results.

We're excited to welcome Phillip Mitto to our GTM team in our SF office. Originally hailing from Connecticut, Phil is a soccer fanatic, Fulham F.C. fan, and an avid traveller. Bragging rights? He's hiked the Inca Trail to Machu Picchu.

New: Hybrid AI Agent for Secrets Detection 🔒 ✨ We've released a new detection engine for our Secrets Analyzer that finds more valid secrets in your source code while greatly reducing false-positives. This makes DeepSource the best way to run secrets analysis on your code.

Thanks Google Cloud for featuring DeepSource in their latest case study! We've been building on GCP since day one, and now process 1B+ lines of code every month for 7,000+ teams that trust us to ship secure code. We also use Gemini extensively for Autofix™ AI and Agents.

🚨 We’ve officially made it to Times Square! 🚨 DeepSource Agents are now front and center in the world’s most iconic digital billboard space! What better way to celebrate than with a little extra visibility? Ship code fearlessly.

👀 Did you spot the DeepSource truck around the RSA Conference last week?

Last Friday in San Francisco: We gathered an eclectic group of security leaders, CTOs, and founders to give them a peek at DeepSource Agents, our autonomous AI agents for code security.

🗓️ 4/25 in San Francisco: We're hosting an intimate gathering of founders, security leaders, and CTOs for a thought-provoking conversation around AI agents in security — and unveiling something radically new from DeepSource. Register: lu.ma/bdycpip5 (limited spots)

✨ Introducing, DeepSource SCA: Intelligent Supply Chain Security that helps you secure your open-source dependencies with best-in-class static analysis and Autofix™ AI. Learn more: deepsource.com/platform/sca DeepSource SCA is built for modern AppSec, with three key innovations:

We were delighted to see our Globstar launch covered by Mike Vizard in @devopsdotcom. Read the full coverage: devops.com/deepsource-...

"DeepSource isn't just a tool for us; it's a catalyst for cultural change in how we approach code quality." Learn how Babbel, a leading EdTech platform serving 16M+ users worldwide, transformed its code health and security stack with DeepSource. deepsource.com/customers/b...

Babbel • Customer Case Study

Babbel, a leading subscription-based language learning platform serving 16M+ users worldwide, needed to standardize code quality across their extensive engineering organization. With hundreds of developers working across multiple GitHub organizations, they faced significant challenges in maintaining consistent standards. By implementing DeepSource, they transformed their development practices — successfully rolling out comprehensive code analysis across their entire codebase within just six weeks, while processing thousands of commits monthly.

deepsource.com

Happy Friday, y'all! Our latest changelog is out and we've shipped three key things: 1. An all-new DeepSource Directory, where you can explore all static analysis and SAST checkers across 20+ Analyzers on DeepSource. 🔽 🔽 🔽

We get it: if you've been stuck with a legacy SAST system, DeepSource might feel... different. We don't ask you to make changes to your already complex CI pipeline. We don't show you all the issues in your repository all at once without any prioritization. Just a fresh take on code health. 🤷🏼

> A 23-year old codebase > mission-critical public safety software > had been using legacy products that didn't work Learn how Omnigo finally got a handle on its code quality and security with DeepSource. deepsource.com/customers/o...

Omnigo

Omnigo, a leading provider of incident management software for public safety and security teams, serves over 2,700 organizations with mission-critical solutions. Their software platform enables end-to-end incident handling, from planning and response to reporting, investigation, and resolution. With distributed development teams maintaining this essential platform, Omnigo transformed their code quality management by switching to DeepSource. Within two months of implementation, their engineering teams achieved unprecedented quality improvements, successfully addressing technical debt while strengthening the reliability of their public safety software.

deepsource.com

Happy Wednesday! ✨ We just published the latest changelog, with some of the updates to the DeepSource platform from the last couple of weeks: 1️⃣ Improvements to the Secrets Analyzer 2️⃣ A refreshed application navigation 3️⃣ New mutations in the GraphQL API

Writing a Globstar checker is easy — all you need is a simple YAML syntax and native tree-sitter S-expressions. Here's an example ⏬