CodeRabbit raises $143M at $1.5B valuation to manage the AI-generated code explosion

AI can now write code faster than humans can reasonably review it. That imbalance is creating a new problem for software teams, and investors are betting CodeRabbit can become the layer that keeps the flood under control.

CodeRabbit has raised $143 million in a Series C funding round at a $1.5 billion valuation, less than a year after the AI code review startup closed its $60 million Series B. Atomico and Smash Capital co-led the new round.

BMW i Ventures, Datadog, Hirtle Callaghan, SineWave Ventures and Scenic Management joined as new investors. Existing backers CRV, Scale Venture Partners, Flex Capital, Pelion Venture Partners, Harmony Partners and Engineering Capital participated. Atomico partner Luca Eisenstecken is joining CodeRabbit’s board.

“Code is abundant. Judgment is scarce. We raised $143 million to help it scale,” CodeRabbit said in a post on X.

That short statement gets to the heart of the company’s bet. AI coding agents are making software creation cheaper and dramatically increasing the amount of code flowing through development teams. The scarce resource is shifting from writing code to deciding which changes are safe, useful, and ready to ship.

CodeRabbit says its revenue grew more than fivefold over the past year. Its platform now performs more than 2 million code reviews each week and serves over 17,000 customers, including Nvidia, BMW, JFrog, Trivago, Adyen and Indeed. More than 150,000 open-source projects use its technology.

When AI writes more code than humans can review

AI coding assistants started as tools that helped developers complete functions or generate snippets. Autonomous coding agents are pushing the model much further. They can work for hours, modify thousands of lines, and submit pull requests (PR) with limited human involvement.

CodeRabbit points to data showing just how quickly that shift is happening. The company says GitHub is on pace to record 14 times more commits this year. Citing research from Jellyfish, CodeRabbit said autonomous agents already open 35% of pull requests at companies in the 90th percentile of coding-agent adoption.

That changes where the bottleneck sits.

Software teams historically spent considerable engineering time turning an idea, bug report or product requirement into working code. AI agents can increasingly jump from an issue to a proposed change almost immediately. The result is a growing queue of pull requests that still requires someone to determine what deserves attention, what introduces risk and what should reach production.

“As AI becomes critical infrastructure for the global economy, organizations will increasingly need independent governance layers that can validate software regardless of which model produced it,” Eisenstecken said.

CodeRabbit is trying to occupy that position regardless of which coding model or agent developers choose.

The startup’s AI review system analyzes changes using repository context, organizational standards, team knowledge and pre-merge checks. Rather than simply flagging suspicious lines, CodeRabbit says it can explain the impact of a change and verify potential failures before a human reviewer spends time investigating them.

The security stakes are rising alongside code output. More capable AI models give defenders the ability to examine larger codebases, but those same capabilities can help attackers search for vulnerabilities and test potential attack paths at greater scale.

CodeRabbit moves beyond code review

Alongside the funding, CodeRabbit introduced what it calls its Agentic Change Management platform, broadening its ambitions beyond reviewing individual pull requests.

Three new capabilities sit at the center of the platform: CodeRabbit Triage, Change Stack and CodeRabbit Security.

Triage assesses incoming changes based on factors such as urgency, value, risk, dependencies and readiness, helping teams decide which pull requests deserve human attention. Change Stack is aimed at explaining large AI-generated changes at a system level rather than forcing developers to start with thousands of altered lines.

CodeRabbit Security extends that approach to software already running in production. The system examines relationships across files, services, data flows, and authorization boundaries to identify vulnerabilities and business-logic risks. Findings can then be routed back into the pull request process with proposed fixes.

The larger strategy is straightforward. CodeRabbit wants to become an independent control layer sitting between the growing population of coding agents and the software companies eventually ship.

Humans still make the final calls on architecture, product decisions, and acceptable risk. CodeRabbit is betting that the more code machines produce, the more valuable that judgment becomes.

The San Francisco-based company recently opened a London office and plans further European growth, followed by expansion into Japan and other Asian markets. The new capital will fund international growth, research, infrastructure and development of its Agentic Change Management platform.

CodeRabbit plans to put more than $10 million into keeping its AI code review and agent capabilities free for open-source projects and maintainers over the next 12 months.

The $1.5 billion valuation reflects a broader bet emerging from the AI coding boom. Generating software may be getting dramatically easier. Deciding what code can actually be trusted to ship could become the harder and more valuable problem.