Home / Directory / AI SaaS tooling / AI code security / DryRun Security
DryRun Security
Austin, Texas company founded in 2023 that reviews every pull request with AI agents, flags risky code changes, and enforces security policies written in plain English.
Application security teams at mid-sized and large companies that want AI review of every pull request and custom policies without writing rules.
Teams that want public self-serve prices, or buyers looking for a full scanner suite with container and cloud coverage.
Verdict
DryRun Security is an Austin application security company that uses AI agents to review pull requests and catch risky code before it merges. It suits security teams that want plain-English policies enforced on every change. Its approach fits companies where AI coding tools are raising the volume of code to review.
Score Breakdown
How DryRun Security scores in the categories that matter to its buyers.
Pricing
DryRun Security does not publish prices. Quotes come through a demo request.
DryRun sells pull request review, full-repository scans, and plain-language code policies to security teams, so cost depends on repositories, developers, and features.
The Field at a Glance
How DryRun Security compares with other AI code security vendors we reviewed, by Overall Score and relative typical engagement cost.
DryRun Security scores 7.6 in AI code security, under ZeroPath (8.0) and Corgea (7.9), and ahead of Pixee (7.5). Relative cost lands mid-band for this subcategory.
Use-case matrix
| Use case | Fit | Notes |
|---|---|---|
| Pull request review | Strong | Reviews every code change with context about intent. |
| Plain-language policies | Strong | Security teams write rules in English. |
| Full-repository baseline | Strong | Scans an entire codebase for existing risk. |
| GitHub workflow | Strong | Findings appear inside pull requests. |
| Published prices | Weak | No public price list. |
| Container and cloud scanning | Mixed | Focused on code and code changes. |
Who it’s for
Good fit
- Application security teams
- Companies using AI coding tools
- Teams with custom security rules
Poor fit
- Buyers wanting list prices
- Teams needing cloud posture tools
- Hobby projects
Review Excerpts
Below are excerpts from public reviews. Our team scoured public reviews, forums, and chat rooms to get a balanced view of customers' experience with this company. Paid reviews and pay-for-play sites such as Clutch were excluded.
“As we lean harder into AI-generated code and highly customized delivery environments for our customers, we need more than a traditional code scanner.”
“Using DryRun Security, I've found the allowed authors feature helpful as it flags sensitive file changes in pull requests submitted by the committers who aren't approved to change certain parts of the codebase.”
DryRun Security publishes no prices, so buyers need a sales conversation to compare its cost with code scanners that list per-developer rates.
Company Facts
- Founded
- 2023 (PR Newswire)
- Headquarters
- Austin, Texas (PR Newswire)
- Seed funding
- $8.7M led by LiveOak Ventures and Work-Bench, January 2025 (PR Newswire)
- Founders
- James Wickett (CEO) and Ken Johnson (CTO) (PR Newswire)
- Volume
- More than 500,000 code reviews a week, per the company (dryrun.security)
- Website
- dryrun.security
Key Leadership
James Wickett
Co-founder and CEO
Methodology
This page is an independent evaluation of DryRun Security for buyers comparing options in AI code security. AI Industry Reviews accepts no sponsorships, advertising, or pay-for-placement fees. DryRun Security did not pay for this review.
What we scored
The headline number is an Overall Score on a 0-10 scale. Eight criteria sit under it in two groups.
- Buyer outcomes (for AI code security)
- Pull request review quality
- Plain-language policies
- Price visibility
- Breadth beyond code review
- Company & commercial
- Innovation & product leadership
- Project management & communication
- Pricing
- Contract fairness
Pricing measures whether the price looks fair for the value delivered, including packaging and renewal friction that show up in real buying cycles.
Score Composition
| Input | Weight | What it covers |
|---|---|---|
| Reviews | 40% | A proprietary read of what practitioners say about likes, complaints, and day-to-day use, including public review sites, forums, and private chat rooms. Paid reviews and pay-for-play sites such as Clutch are out of scope. |
| Product | 35% | Hands-on look at screens and workflows. |
| Pricing | 15% | Whether the price looks fair for what you get. |
| Docs & training | 10% | Docs, tutorials, and training material. |
How we balanced the evidence
The Overall Score is the simple average of the eight criteria. Recommendation language follows that score and the fit pattern described above.
Scope
DryRun Security is graded here as AI code security. Criteria scores can move as more review volume and product checks are added.