WillItSurvive
Cloud and infrastructure providers · United States

CodeRabbit

coderabbit.ai ↗

AI tool that automatically reviews code and flags bugs before merge.

Losing its protection
Assessed 21 July 2026 · Evidence as of 21 July 2026
The structural protection is eroding.
On the recordSince 21 July 2026 · Checkable from H2 2026 · Every call on the record Checkpoint: Next ARR/growth disclosure showing whether MoM growth holds above 10% as Copilot Code Review matures
The call

CodeRabbit is growing fast and widely installed, but sits between two better-funded rivals giving away or beating its core feature for free.

CodeRabbit is a tool that uses AI to read and check code changes before they go live, catching bugs and problems. It is hard to replace right now because it works across many different coding platforms and tools, but GitHub just added free code review to its paid plans, and Cursor made a tool called Bugbot that finds bugs better and faster than CodeRabbit does. The company could stay in the game if it keeps growing fast and keeps customers who use GitHub as their main tool, but if growth slows down or if free tools squeeze out the need to pay for CodeRabbit separately, the business will shrink.

Why
01
AI pressure: GitHub Copilot Code Review and Cursor Bugbot. Copilot Code Review ships free inside GitHub seats; Bugbot beats CodeRabbit's bug-detection rate, both cutting into its paid niche. Could AI do the core job? Only partly.
02
Bigger players: Microsoft/GitHub. GitHub bundles Copilot Code Review into Business and Enterprise plans at no extra seat cost, undercutting standalone pricing. Could a giant copy it? Yes, easily.
03
What protects it. Deep multi-platform coverage and workflow lock-in for shops running GitHub, GitLab, and Bitbucket together, not any single technical edge.
What would change this call
CodeRabbit's MoM ARR growth rate over the next 2-3 quarters (currently ~20%). A drop below 10%/month would show bundled/free rivals are compressing its standalone pricing model.
Net new logo growth specifically on GitHub-primary, homogeneous-platform shops. Slowing growth here would show Copilot Code Review is winning customers CodeRabbit relied on.
Whether CodeRabbit lands binding compliance/audit-trail deals in fintech, healthcare, or defense verticals. Such deals would show a durable regulatory moat forming that GitHub/Cursor can't quickly cross.
Key numbers
  • ~$15M ARR, growing 20% MoM (Sept 2025)
  • $550M valuation on $60M Series B (Sept 2025)
  • ~12% market penetration, #2 ranking per Ramp (Jul 2026)
Named risks
  • GitHub and Cursor bundling free/cheaper code review into tools already paid for. Severity: high
  • RCE vulnerability exposed ~1M repositories via GitHub App key, disclosed Aug 2025. Severity: high
  • $550M valuation on ~$15M ARR (Sept 2025) creates re-rating risk if growth slows. Severity: medium
  • Standalone AI code review category may consolidate around 1-2 winners. Severity: medium
  • Inconsistent public data on HQ location and headcount signals reporting/organizational flux. Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
GitHub Copilot Code Reviewgaining onBundled free into Copilot Business/Enterprise, 60M+ reviews processed by 2026
Cursor Bugbotgaining on78% bug-resolution vs CodeRabbit's 49% in Cursor's April 2026 benchmark
GraphitecontestingRaised $52M Series B led by Accel in 2025
GreptilecontestingIn talks for $30M Series A with Benchmark as of September 2025
Questions people ask
Is CodeRabbit profitable?
No profitability figures are disclosed. CodeRabbit reported over $15M ARR at its September 2025 Series B, growing about 20% month-over-month, and raised $60M that round, which points to a still cash-burning growth-stage startup rather than a profitable one.
Could AI replace CodeRabbit?
Yes, partially. GitHub's Copilot Code Review is bundled free into Business/Enterprise plans and had processed 60M+ reviews by 2026, while Cursor's Bugbot reported a 78% bug-resolution rate versus CodeRabbit's 49% in Cursor's own April 2026 benchmark.
Who owns CodeRabbit?
CodeRabbit is privately held and venture-backed, founded by Harjot Gill in early 2023. Its $60M Series B in September 2025 was led by Scale Venture Partners, with NVIDIA's NVentures, CRV, Harmony Partners, Flex Capital, Engineering Capital and Pelion Venture Partners also participating, valuing it at $550M.
What is CodeRabbit's biggest competitor?
Cursor's Bugbot and GitHub's Copilot Code Review are the two biggest threats: Bugbot claimed a 78% bug-resolution rate versus CodeRabbit's 49% in an April 2026 Cursor benchmark, while Copilot Code Review is bundled at no extra seat cost inside GitHub plans.
How much funding has CodeRabbit raised?
CodeRabbit had raised a total of $88M as of September 2025, per SiliconANGLE, across a $16M Series A led by CRV in August 2024 and a $60M Series B led by Scale Venture Partners in September 2025 that valued the company at $550M.
Did CodeRabbit have a security breach?
Yes. Kudelski Security publicly detailed on August 19, 2025 a remote code execution vulnerability via a RuboCop misconfiguration, discovered in January 2025, that exposed a GitHub App private key with potential write access across roughly 1 million installed repositories.
Timeline
  • 2026-07-14Ramp reports CodeRabbit at ~12% category penetration, up 6pts YoY, ranked #2
  • 2026-06Crustdata records headcount at ~218 employees, 170% YoY growth
  • 2026-04-08Cursor publishes Bugbot benchmark showing 78% detection vs CodeRabbit's 49%
  • 2025-09-16CodeRabbit raises $60M Series B led by Scale Venture Partners, valuation hits $550M
  • 2025-09-16CodeRabbit launches CLI tool orchestrating Claude Code, Codex CLI, Cursor CLI, Gemini
  • 2025-08-19Kudelski Security discloses RCE vulnerability exposing ~1M repositories
  • 2025-05CodeRabbit adopts OpenAI o3, o4-mini, GPT-4.1 models and launches VS Code integration
  • 2024-08CodeRabbit raises $16M Series A led by CRV
  • 2023-01CodeRabbit founded by Harjot Gill
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Cognition AILovableReplit
More in Cloud and infrastructure providers →
Sources