Sigrid® Auto-Fix Agents
Auto-Fix Part of Sigrid® Axis

Agentically find and fix what matters in your codebase.

Auto-Fix Agents give your AI coding agent a prioritized list of findings from Sigrid — maintainability, security, reliability, and open source health. It works through the list, fixes what it can, and marks each finding resolved.

Four finding domains 3 levels of control Claude Code · Copilot · ChatGPT Full audit trail
Claude Code · fix verified by Sigrid
function calculateInvoiceTotal(items, context) {
  return applyDiscounts(
    baseTotal(items),
    context
  )
}
 
// complexity 18 → 4
function baseTotal(items) { 1 usage
  return items.reduce((sum, i) =>
    sum + i.price * i.qty, 0)
}
Sigrid · Re-analysis
Fix Verified
Show Details

Complexity dropped from 18 to 4. The refactor is re-analyzed against Sigrid's maintainability rules and confirmed to resolve the original finding.

Proposed by Claude Code, verified by Sigrid — ready for review.

Works with the AI coding tools your team already uses to ship better code faster

Cursor Claude Code GitHub Copilot ChatGPT VS Code Tabnine Devin Desktop OpenCode Cursor Claude Code GitHub Copilot ChatGPT VS Code Tabnine Devin Desktop OpenCode
0x

Faster time to market

SIG customer outcomes, 2026 — pairing AI adoption with governed remediation
0%

Lower maintenance cost

SIG customer outcomes, 2026 — pairing AI adoption with governed remediation
0%

Fewer security findings introduced

Sigrid Guardrail experiment on Claude Sonnet 4.6, 2026 — read the study. Measures Guardrail's real-time checks, not Auto-Fix Agents directly.

See Auto-Fix Agents fix a real finding from your own portfolio.

Watch a demo
How it works

Sigrid tells you what to fix. Auto-Fix improves it.

Five types of findings, one MCP server

Security, architecture, maintainability, open-source, and reliability findings, all served through Sigrid's MCP tools.

Plugs into your workflows

Connect the Sigrid MCP server to Claude Code, GitHub Copilot, or ChatGPT — whichever your team already uses.

Varying levels of autonomy

Ask for discovery-only, triage-then-fix, or a fully autonomous pass.

Deterministic analysis

Every finding traces back to Sigrid's fact-based rules and architectur context.

Flagged for review Fix verified
What it does

Five finding domains. One workflow.

M

Maintainability

Ranks refactoring candidates — duplication, unit size, complexity, module coupling — against your portfolio's own standards, and fixes what it can.

S

Security

Fetches findings by severity, investigates real-world exploitability in context, fixes what it can, and marks false positives with justification.

OS

Open-Source Health

Queries dependency risks — vulnerabilities, outdated libraries, license issues — and reports priorities and upgrade paths. Informational: there's nothing to auto-fix here, by design.

R

Reliability

Works through error handling, concurrency issues, and resource management — fixing the straightforward cases and flagging the complex ones for review.

A

Architecture

Guards against drift as code moves across files and modules faster than teams can review it.

See these agents work against your own codebase.

Request a free trial
// Demo

See Auto-Fix at work

Stay in control

Choose how much control you keep

Every prompt runs in the mode that matches how much trust you're ready to extend — from fully hands-off to fully reviewed. Mix modes across finding domains, or even within one session.

← You review everything Agent handles it end-to-end →
D

Discovery & prioritization

Surfaces and ranks findings with no code changes, so you decide what's worth fixing.

T

Triage, then fix

The agent triages findings first — will-fix or accepted — then picks up the will-fix items on your go-ahead. Nothing ships without sign-off.

A

Autonomous fixing

Give it a target property and your decision criteria, and it works through findings in a loop — fixing what it can and updating status as it goes.

Every decision — autonomous or not — gets written back to Sigrid as a finding status update, so there's a full audit trail of every fix.

Pick the mode that fits — we'll show you each one live.

Request a free trial
Auto-Fix Agents and Guardrails

Auto-Fix Agents cleans up what's already there. Guardrails keeps new code clean.

1

Ground

Auto-Fix Agents work from Sigrid's continuous, accurate map of your architecture, so every fix is grounded in how your system actually looks today, not a stale guess.

→
2

Plan

Sigrid identifies and prioritizes the risks worth fixing first, and hands each one to the right agent for the job.

→
3

Improve

Auto-Fix Agents refactor technical debt and security risks, then hand a cleaner map back to Ground.

→
4

Prevent

Sigrid Guardrails checks every agent change in real time, stopping new risk and drift before they enter your codebase.

You're already using Auto-Fix Agents to tackle the technical debt that already exists. Work with Sigrid Guardrails when you're ready to keep new code clean as it's written. Either way, the AI coding tools your team already uses tap into Sigrid's analysis as they work.

// Get started

Go faster — responsibly.

See Auto-Fix Agents run against a real finding from your own portfolio.

Request a free trial
// FAQ

Frequently asked questions

How is this different from just asking my AI coding assistant to refactor the code?

A generic AI coding assistant has no view of your codebase's standards or history — it's making its best guess. Auto-Fix Agents work from findings Sigrid has already triaged against your portfolio's own standards, and every proposed fix is re-analyzed by Sigrid to confirm it actually resolves the issue before anyone reviews it.

Do I have to let it commit code on its own?

No. You choose the mode in your prompt: discovery-only surfaces findings with no code changes, triage-then-fix requires a developer's sign-off before anything ships, and autonomous fixing works through findings in a loop and updates their status as it goes. You can set the mode per prompt, per finding domain.

Which AI coding tools does it work with?

Auto-Fix Agents connect to Claude Code, GitHub Copilot, and ChatGPT today. No new agent to learn — the fix is handed to the coding tool your team already uses.

What happens if it gets a fix wrong?

In discovery or triage mode, a developer reviews the proposed fix before anything ships. In autonomous mode, Sigrid re-analyzes the fix to confirm it actually resolves the finding before it's handed back. Every decision is written back to Sigrid as a status update, so there's a full audit trail of what changed and why.

What kinds of technical debt does it cover?

Four finding domains today: Maintainability (duplication, unit size, complexity, coupling), Security (findings by severity), Reliability (error handling, concurrency, resource management), and Open-Source Health (vulnerabilities, outdated libraries, license risk — reported, not auto-fixed). An Architecture domain, guarding against structural drift, is on the roadmap.

Is this a standalone product, or do I need Sigrid?

Auto-Fix Agents work from findings Sigrid has already triaged, so they run on top of your existing Sigrid analysis. They pair well with Sigrid Guardrail, which checks agent-written code against your standards in real time as it's written — Auto-Fix Agents handle what's already in the codebase, Guardrail handles what's being added to it.

Is this generally available?

Auto-Fix Agents are in early access. The current tools cover the core refactoring, security, reliability, and open-source health workflows described above, and we're actively adding more.

Which technologies are supported?

Java, Python, C/C++, C#, JavaScript, TypeScript, Kotlin, Progress ABL, and PHP.

See the Technology Support page for details.

Read our methodology

This field is for validation purposes and should be left unchanged.
Name*
Privacy*

Watch Core in action

This field is for validation purposes and should be left unchanged.
Name*
Privacy*

Watch Axis in action

This field is for validation purposes and should be left unchanged.
Name*
Privacy*

This field is for validation purposes and should be left unchanged.
Name*
Privacy*

This field is for validation purposes and should be left unchanged.
Name*
What type of partnership are you interested in?*
Privacy*

Register for access to Summer Sessions

This field is for validation purposes and should be left unchanged.
Name*
Privacy*