CodeVouch
Your AI wrote it. Who reviewed it?
Real-time detection of AI-generated code bugs, hallucinations and security issues —
for code written by ChatGPT, Claude, Kimi, Copilot, Cursor and every other AI pair-programmer.
Why CodeVouch
AI writes code fast — and confidently ships hallucinated APIs, placeholder URLs, SQL string
concatenation, missing error handling and silent fallbacks. In CodeVouch's own testing across
75 AI-generated files, 81% contained at least one issue.
CodeVouch sits inside VS Code and catches these bugs as you save, before they reach production.
Free vs Pro
|
Free |
Pro — $15/mo or $150/yr |
| Local static scan (on save / on demand) |
✅ |
✅ |
| Quality report with score & fix priorities |
✅ |
✅ |
| Privacy-first: code never leaves your machine |
✅ |
✅ |
| AI Deep Review — a second AI reviews the AI's logic |
|
✅ |
| File, selection & whole-workspace review |
|
✅ |
| Verified findings (anti-hallucination second pass) |
|
✅ |
| Exportable HTML audit report |
|
✅ |
👉 See plans & pricing · 7-day money-back guarantee · cancel anytime
Deep Review runs on your own LLM API key (Kimi / OpenAI / DeepSeek — or fully local
via Ollama), billed by the provider. We never see your code or your key.
Quick Start
- Install CodeVouch and click the shield icon in the Activity Bar
- Hit Scan Workspace — issues appear inline and in the Problems panel
- Open the Quality Report for score, per-file breakdown and fix order
No commands to memorize — the sidebar has big buttons for everything, and a built-in
Getting Started walkthrough takes you from zero to your first report in about a minute.
What It Detects
- Security: hardcoded secrets, SQL injection, XSS via innerHTML, eval(), CORS wildcards, unsafe deserialization
- AI hallmarks: placeholder URLs (example.com…), hallucinated imports, debug mode left on, missing await
- Quality: missing error handling, bare except, mutable default arguments, missing React cleanup/key props
- Deep Review (Pro): logic and correctness bugs that rule-based scanners can't see
Python · JavaScript · TypeScript · JSX/TSX · HTML · CSS — with automatic rule updates.
Privacy
- The free scanner is 100% local — no telemetry, no analytics, no uploads
- Deep Review sends code only to the LLM provider you configure, using your key —
or nowhere at all with a local Ollama model
- License validation (Pro) sends only your license key + an anonymous machine ID
Privacy Policy · Terms of Service
Links
