If you've ever wondered what an attacker would find in your code, these are the two weeks to find out. Through November 8, CodeRabbit is covering up to $5,000 in Deep Scan usage for any organization with two or more members, whether you're an open-source project, a current or former customer, or have never used CodeRabbit. We've put up to $1 million behind it, and it's first come, first served until that runs out.
Deep Scan is the part of CodeRabbit Secure that hunts for vulnerabilities the way an attacker would, and independently verifies which ones are reachable and exploitable before reporting them to your team. Attackers have the same AI models your developers do, and they're using it to dig through code nobody has looked at in years. Deep Scan puts that capability on your side.
For the next two weeks, we want as many teams and open-source maintainers as possible to find and fix the vulnerabilities that Deep Scan finds in their code.
Look beyond the latest change
Deep Scan examines committed code across an entire repository. It maps the codebase in detail, hunts for vulnerabilities across its code paths, examines the safeguards already in place, and uses semantic analysis to assess whether a vulnerability can actually be exploited. Before a finding reaches your team, an independent verifier reopens the code and rejects anything the evidence doesn't support.
Each published finding includes supporting evidence and an assessment of its reachability and exploitability. Your team gets the context it needs to understand the issue and decide what deserves attention first.
Keep the security tools already in your stack running. Deep Scan works alongside them, adding reasoning about first-party application logic and risks that become visible only when code is read in context. If a path crosses linked repositories, Deep Scan can use that context too.
For eligible findings, CodeRabbit can draft a fix that follows the standards already used in the codebase. A developer reviews the proposed change and remains responsible for what ships.
Why we're covering the scans
Developers are not the only people using AI to make sense of unfamiliar code. The same capability can help attackers search mature codebases for paths no one has followed in years. Teams need enough defensive capacity to examine their own code just as closely.
Open-source projects are a big part of why we're doing this. Companies rely on open-source software that is often maintained by small teams without dedicated security staff. A vulnerability in one widely used project can affect every organization that relies on it.
We want those maintainers to see what Deep Scan finds without budget being the reason they have to wait.
Put Deep Scan to work
Claim your free Deep Scan any time through November 8, 2026. Sign in or create an account, connect a repository, and run Deep Scan. CodeRabbit will cover eligible usage up to $5,000 per organization with two or more members while the allocation remains.
Start with the repository your team or your community depends on most. For the next two weeks, the scan is on us.
