Projects / Developer tools / Forseti

Forseti. Every pull request,
judged before it merges.

Forseti reviews every PR at the depth you choose, posts only verified findings, and quotes the price before it spends a penny.

Visit forseti.dev Connect GitHub Talk to the team

4 clicks to connectcontents read-onlyno repository copies, ever

Clicks to connect

Depths live

£0.43

Priced before it runs · Standard, medium PR

Never

Cloned, never trained on

— 01

Watch it judge a pull request.

Choose a depth on the dial. Price Guard quotes the review and checks it against your caps before anything is spent. Then only the findings that survive a second, independent check are posted, each with an ID it keeps across pushes.

Price GuardThe price is on the PR before anything is spent

Add partial refunds #517

feat/partial-refunds→main· 14 files · +812 −188

Review depth

per medium PRp50 about 1.6 minutes

Triage, a deep reasoning pass, then every finding verified.

Price Guard

Quoted £0.43 · ~1:35 · nothing spent yet
Within caps · per PR and per month
Approved · £0.86 held, you pay the measured cost

Choose a depth to rerun the review. Arrow keys work too.

Files changedFindings anchored to the changed line

src/refunds/create.ts+3−3

1414export async function createRefund(req: Req) {

15− const { orderId } = req.body;

16− const tenantId = req.auth.tenantId;

15+ const { orderId, pence, tenantId } = req.body;F-0141

1716 const order = await db.order.findFirst({

1817 where: { id: orderId, tenantId },

1918 });

2019 if (!order) throw notFound("order");

20+ if (pence > order.totalPence) throw tooMuch();F-0142

2121 return psp.refund({

2222 charge: order.chargeId,

23− idempotencyKey: req.id,

23+ amount: pence,F-0143

2424 });

2525}

migrations/0042_refund_status.sql+3−0

1+ALTER TABLE refunds ADD COLUMN status text;

2+UPDATE refunds SET status = 'settled'F-0144

3+ WHERE settled_at IS NOT NULL;

src/webhooks/psp.ts+1−1

88export function verify(req: Req) {

99 const sig = req.header("psp-signature");

1010 const expected = sign(req.rawBody);

11− if (!safeEqual(sig, expected)) throw denied();

11+ if (sig !== expected) throw denied();

1212 return JSON.parse(req.rawBody);

1313}

ReviewStandard · verified only findings

BlockingF-0141tenancy-authVerified

Tenant taken from the request body

Any caller can refund another tenant’s order by sending its tenantId. Read it from req.auth.

src/refunds/create.ts:15

Should fixF-0142moneyVerified

Checks the order total, not what is left

Two partial refunds can add up to more than the customer paid.

src/refunds/create.ts:20

BlockingF-0143moneyVerified

Idempotency key dropped

A client retry after a timeout now refunds the same request twice.

src/refunds/create.ts:23

Should fixF-0144migrationsVerified

Backfill updates every row at once

One unbatched UPDATE holds locks on refunds while it runs. Batch it, and add a way back.

migrations/0042_refund_status.sql:2

Merge readiness

No conflicts
CI passing
1 approval, stale after push
Forseti: 2 blocking @ 7c1e4ab

Not ready · 2 blocking

ExampleA sample pull request of about 1,000 changed lines. Prices are Forseti’s rate card for a medium PR; the code and findings are illustrative, replayed at speed.

— 02

Built on four promises.

Claims, not metrics. Each one is how the product behaves on every pull request it reads.

Priced before it runs

The estimate is on the PR first. Caps fall back to Glance and say so; nothing is skipped in silence.

Verified before it posts

A second pass re-reads each finding against the code. Only what survives reaches your PR.

Rules from the base branch

Config and team rules are read from the branch you merge into, so a PR can’t rewrite its own review.

Never cloned, never trained on

Diffs are read with a read-only token and held in memory. Findings keep only the few lines they quote, and you can switch that off.

— 03

Choose how hard it reads.

Depth sets how much reading a review does, and so what it costs and how long it takes. Set it per repo, branch and path, or ask for one on the PR with @forseti review deep.

Glance

Live

£0.04· p50 00:38

A fast summary of the change with a self-check. No line comments.

Use it forDocs, config, low-risk repos

Standard

Live

£0.43· p50 01:35

A fast triage pass, a deep reasoning pass, then a second, independent check of each finding. Low-risk files get the fast pass.

Use it forMost pull requests (the default)

Deep

Live

£0.58· p50 02:30

Standard, plus specialist passes for security, reliability and performance, and tests and contracts, each verified.

Use it forPayments, auth, migrations, release branches

Molecular

Early access

£10.23· p50 09:00

Deep, plus adjudication of blocking or uncertain findings, and an agent in a sandbox that attaches a failing test or run log to each serious finding.

Use it forTeams in the early-access queue

About Molecular

Prices and p50 times are Forseti’s estimate for a medium PR of about 1,000 changed lines, excluding VAT. Every PR is quoted on its own size; small PRs cost less.

Indicative · tested 20 October 2026

How much each depth catches.

Forseti tests every depth on pull requests with bugs planted on purpose, and publishes the results, including what each depth misses.

Deep caught every serious planted bug on both sets.

14 test pull requests with 29 planted bugs, 24 of them serious. Ranges show run-to-run variation. The samples are small, so treat these figures as indicative.

How Forseti tests

Planted bugs caught by each depth (indicative)
Depth	Small PRs44–128 changed lines	Large PRs1,065–3,391 changed lines
Glance	58%8–10 of 15	45%6–7 of 14
Standard	87%13 of 15	82%11–12 of 14
Deep	87%13 of 15	93%13 of 14

— 04

What else ships.

The review is the start. Everything around it is built to answer one question quickly: can this merge?

Review Ledger

One living record per pull request.

Every finding keeps an ID and a state across pushes: open, fixed, disputed or accepted. A finding is never raised twice, and the check says exactly which commit it judged.

Merge readiness

One place that answers “can this merge?”

Conflicts, CI, approvals, approvals gone stale after a push, how long a PR has waited, and Forseti’s verdict next to CI. Daily or weekly digests go to Slack or Teams.

Attention map & reviewers

The hunks that need human eyes, and who should look.

Up to three hunks where risk, uncertainty and new code meet, each with a reason, and two people to read them from CODEOWNERS and recent authors.

Ask Forseti & release notes

Ask about a PR in plain English.

Answers cite file and line, in the dashboard or with @forseti ask on GitHub. Merged PRs become notes grouped by Features, Fixes and Breaking.

Domain packs

Checks that know your domain.

VAT applied twice, a migration that locks a hot table, a query that forgets the tenant. Packs pair deterministic checks with a focused pass, and each ships with seeded test cases.

moneyInteger pence, VAT once per band, rounding rules.

migrationsLock safety, batching, CONCURRENTLY, and a way back.

tenancy-authTenant scoping, IDOR, and auth where routes are mounted.

piiPersonal data in logs and responses, retention, GDPR deletion.

architectureYour layering rules, from .forseti/architecture.yml.

Integrations

Where your code lives, and where your team talks.

GitHub today; Jira, Linear, Slack and Teams connect now; GitLab, Bitbucket and Azure next.

Live today

GitHub

Connect now

Jira
Linear
Slack
Teams

GitLab
Bitbucket
Azure DevOps

In testing

Built, and still being verified end to end. Not live yet.

Intent check
Supply chain
Team memory & precision

Drive it from the pull request

@forseti
review
ask
explain
confirm
pause
resume
split
release-notes
config
help

— 05

Pay for the review, not the seat count.

Buy prepaid credit when you need it. Every pull request is priced by its size and the depth you choose, and the price is on the PR before anything is spent.

2,000 credits

£20+ VAT

Enough to see Forseti on a handful of real pull requests.

10,000 credits

£100+ VAT

For a team reviewing every pull request, every week.

50,000 credits

£500+ VAT

For busy organisations with many repositories.

1 credit = £0.01, and credit never expires
No subscription, no seat fee
No auto-refill: you top up when you choose
Every review is priced before it runs
Unused credit refundable within 14 days
Findings dismissed as wrong are credited back, up to 20% of monthly spend

Per medium PR: Glance £0.04, Standard £0.43, Deep £0.58. Prices exclude VAT, which is added at checkout.

See pricing

See the price on your next PR.

Connect GitHub in four clicks. Contents stay read-only, and no repository is ever copied.

01Connect GitHub
02Authorize
03Pick the account
04Choose repos, install

Visit forseti.dev Connect GitHub Talk to the team

Built by UnknwnAI in the UK.

Forseti. Every pull request, judged before it merges.

Watch it judge a pull request.

Tenant taken from the request body

Checks the order total, not what is left

Idempotency key dropped

Backfill updates every row at once

Built on four promises.

Priced before it runs

Verified before it posts

Rules from the base branch

Never cloned, never trained on

Choose how hard it reads.

Glance

Standard

Deep

Molecular

How much each depth catches.

What else ships.

One living record per pull request.

One place that answers “can this merge?”

The hunks that need human eyes, and who should look.

Ask about a PR in plain English.

Checks that know your domain.

Where your code lives, and where your team talks.

Pay for the review, not the seat count.

See the price on your next PR.

Forseti. Every pull request,
judged before it merges.