Hyrax AI

What is Hyrax AI

Hyrax is an AI-powered codebase auditing and improvement platform that helps engineering teams understand their codebase, identify high-impact improvements, and turn them into production-ready changes. It maps your codebase and understands how the product is built, then six specialized agents evaluate security, correctness, maintainability, performance, architecture, and operations. Prioritized improvements are verified through a 13-step gate and delivered as pull requests that the team reviews and merges. Hyrax never merges on its own.

How to use Hyrax AI

1. Connect GitHub: Hyrax builds a map of your repository on its first run, discovering services, dependencies, boundaries, conventions, risks, and architecture.
2. Review findings: Six specialized agents evaluate your codebase across security, correctness, maintainability, performance, architecture, and operations, producing a ranked list of findings and easy wins, each with a plan for the fix.
3. Choose improvements: Your team reviews what matters, dismisses what does not, and approves the improvements worth shipping.
4. Receive pull requests: Hyrax turns approved improvements into verified GitHub pull requests with the [Hyrax] prefix. Each PR is verified through a 13-step pipeline (tests, build, lint, reviewer agent) before it opens.
5. Review and merge: Your engineers review and merge every pull request. Hyrax never merges on its own.
6. Continuous learning: Every merge updates the context, so the next change starts smarter than the last. Accepted findings become deterministic scanner patterns and agent skills.

Features of Hyrax AI

• Codebase mapping: Discovers services, dependencies, boundaries, conventions, risks, and architecture across your repository. The map lives in your repo (HYRAX.md and .hyrax/discovery) so humans and AI tools read the same context.
• Six specialized agents: Evaluate security, correctness, maintainability, performance, architecture, and operations from shared context.
• Static code analysis: Includes a deterministic scanner and six parallel agent groups.
• Dependency and supply-chain (SCA) scanning: Package audit, registry vulnerability data, license and lockfile checks.
• 13-step verification gate: Checks an improvement before it reaches your team as a pull request. Covers isolated worktree execution, the tests it started with, the tests after the change, your build, lint and formatting, a size limit on the diff, a second review by an independent agent, a re-scan to confirm the original issue is gone, and CI. If a required check fails, the work stops and never becomes a PR.
• Automated pull request generation: Delivers improvements as pull requests with the [Hyrax] prefix for human review and merge.
• Automated PR review: Reviews every opened pull request automatically against codebase conventions, leaving comments that update as the code changes. It can block merge on must-fix findings (Pro and Team).
• Self-improvement: Accepted findings become deterministic scanner patterns and agent skills.
• Language support: Works across 19 languages: Python, TypeScript, JavaScript, Go, Rust, Swift, Ruby, Java, Kotlin, C#, C++, C, PHP, Scala, Dart, Elixir, Shell, Lua, and MDX. Works with frameworks built on them: React, Next.js, Vue, Svelte, Angular, Node.js, Django, Rails, Spring, FastAPI, Express, React Native, and Flutter.
• Integrations: GitHub for source control. Linear for ticket management. Tickets are created on audit and closed automatically when fixes merge.
• Security: All inference runs in the Hyrax AWS Bedrock account, and Hyrax does not train on customer code.

Use Cases of Hyrax AI

• Codebase auditing: Continuously understand what is happening across your codebase and identify what matters.
• Security and compliance: Evaluate security, correctness, and operations to find vulnerabilities and compliance issues. Solutions are available for FinTech (compliance-ready code governance), HealthTech (HIPAA-aware security scanning), E-Commerce (payment & checkout security), and SaaS (multi-tenant best practices).
• Automated code remediation: Turn improvements into production-ready changes delivered as pull requests.
• Dependency management: Scan dependencies and supply chain for vulnerabilities, license issues, and lockfile problems.
• PR review automation: Automatically review every opened pull request against codebase conventions and block merge on must-fix findings.
• Team collaboration: Engineering leads, security teams, platform engineers, CTOs, software engineers, and DevSecOps can use Hyrax to maintain code quality and architecture.
• AI-native engineering: Built for teams using Cursor, Copilot, Claude Code, Codex, and Devin to give AI output architecture, context, and control.

Pricing

Hyrax offers two plans:

• Free: Full access to Hyrax, $30 starter credit, $10/month ongoing credit, up to 100 PR reviews a month for free, no card required.
• Paid: $30 per user per month. Each paid user gets $30/month of credits.

Credits meter usage across repository mapping, verified improvements, and PR reviews; there are no feature walls. Overage is opt-in with budget caps.

FAQ

What is Hyrax? Hyrax helps engineering teams understand what's happening across their codebase, identify what matters, and turn improvements into production-ready changes. It maps your codebase and understands how your product is built, then six specialized agents evaluate security, correctness, maintainability, performance, architecture and operations. The highest-leverage work becomes verified pull requests in GitHub. An engineer reviews and merges every one.

How does pricing work? Free gives every workspace full access to Hyrax, a $30 starter credit, $10/month ongoing credit, and up to 100 PR reviews a month for free, with no card required. Paid is $30 per user per month, and each paid user gets $30/month of credits. Credits meter usage across repository mapping, verified improvements, and PR reviews; there are no feature walls. Overage is opt-in with budget caps.

When do I need a paid seat? When a developer wants deeper access: opening full summaries in Hyrax, asking Hyrax to fix an issue, or running more workflows than the free credits cover. Each paid user gets $30/month of credits, and paid workspaces can opt in to overage with a budget cap they set.

What is the 13-step verification? The 13-step verification gate checks an improvement before it reaches your team as a pull request. It covers isolated worktree execution, the tests it started with, the tests after the change, your build, lint and formatting, a size limit on the diff, a second review by an independent agent, a re-scan to confirm the original issue is gone, and CI. If a required check fails, the work stops and never becomes a PR.

How is Hyrax different from AI coding assistants? AI tools write code. Hyrax architects the system that code enters. Assistants edit what you point them at, and their context starts empty every session. Hyrax holds the map of your codebase, and six specialized agents reason about security, correctness, maintainability, performance, architecture and operations before anything ships. Use both.

What is Scan? Scan reads the whole codebase first, so it understands your architecture and conventions, then looks for problems the way a reviewer would. It produces a ranked list of findings and easy wins, each with a plan for the fix.

What is PR Review? Every change ships as a pull request with the [Hyrax] prefix. PR Review reviews every opened pull request automatically against the codebase conventions, leaving comments that update as the code changes. It can block merge on must-fix findings. You get up to 100 PR reviews a month for free.

What languages are supported? Hyrax works across 19 languages: Python, TypeScript, JavaScript, Go, Rust, Swift, Ruby, Java, Kotlin, C#, C++, C, PHP, Scala, Dart, Elixir, Shell, Lua, and MDX. It works with the frameworks built on them: React, Next.js, Vue, Svelte, Angular, Node.js, Django, Rails, Spring, FastAPI, Express, React Native, and Flutter.

What integrations are supported? GitHub for source control. Linear for ticket management. Tickets are created on audit and closed automatically when fixes merge.

Is my code secure? Hyrax works through GitHub with human control, and it never merges on its own. Verification runs before a pull request reaches your team, and your engineers make the final call. All inference runs in the Hyrax AWS Bedrock account, and Hyrax does not train on customer code.