Nightshift coding agents

The calm
nightshiftfor your codebase

Five fine-tuned SLM agents read your entire repo every night, open reviewed PRs that fix what they find, and hand you one prioritized briefing by morning, not a firehose of noise.

Already installed? Sign in to your dashboard

Read-only access. Your code is never stored, shared, or used to train models.

5
Specialist agents
Minutes
To your first scan
24h
Re-scans, automatically
<10%
False-positive rate
Hunter
Tracker
Keeper
Mason
Scribe
The pack

It reads the whole repo

PR bots only see the diff. Owlwatch reads your entire codebase from the root, every night, while you sleep.

Where coding is headed

It writes the fix

Finding the bug is the easy part. Owlwatch opens a reviewed PR, runs your CI, and waits for your merge.

It cuts the noise

Deduped, diffed, and ranked into one calm morning briefing. A signal you'll actually read, not a dashboard you'll mute.

Private by design

We never store, share, or train on your code

Granting an app access to your private repos is a real decision. Here's exactly what happens during a scan, and the only thing we keep afterward.

🐳

Ephemeral & isolated

Each scan spins up a fresh, throwaway container, clones your repo, and runs the agents, then destroys the container and the clone.

πŸ“„

Findings only

We keep the results of the scan, never your source. The code itself never leaves the run and is never persisted.

🚫

Never trained on

Your code is never used to train any model and is never shared. Access is read-only, so nothing is written back.

Automated fixes

Detection is table stakes. The fix is the product.

Code review moved from finding problems to fixing them. Owlwatch doesn't just hand you a ticket. It drafts the change, opens a PR, and runs your CI. It even keeps your docs in sync, because in agentic development every AI agent reads them, and stale docs break everything downstream.

Code fix Β· via Hunter
LowSecurityRecurring Β· via Hunter

Hardcoded AWS Credentials

orchestrator/eval/fixtures/hunter-hardcoded-aws-key/src/config.py:3-4
3AWS_ACCESS_KEY_ID = "AKIAIOSFODNN7EXAMPLE"
4AWS_SECRET_ACCESS_KEY = "wJalr…EXAMPLEKEY"
✦ AI-proposed fix · review before applying
import os
AWS_ACCESS_KEY_ID = os.environ.get("AWS_ACCESS_KEY_ID")
AWS_SECRET_ACCESS_KEY = os.environ.get("AWS_SECRET_ACCESS_KEY")
β†’ Hardcoded AWS access key and secret found in config.py. These should be removed and replaced with environment variables.
DismissOpen fix PR
Doc sync Β· stale docs break agents
DocsDrift detected

README is ahead of the API

docs/api.md:42 Β· src/app/api/summarize/route.ts
docs say POST /summarize β†’ { summary }
code does POST /summarize β†’ { summary, tokens }
✦ Owlwatch fix · update the docs to match
- returns { summary }
+ returns { summary, tokens }
DismissOpen PR

Starts with the safe classes: dependency bumps, mechanical refactors, and doc drift. Human-in-the-loop; nothing auto-merges.

What lands every morning

One signal, where you already work

The same triaged findings, delivered three ways: a morning digest, inline on your PRs, and a single repo-health verdict.

Morning briefing
πŸ¦‰ Owlwatch
Nightly briefing Β· acme/payments-api
Scanned at 9:00 AM Β· 2 new Β· 10 recurring Β· 0 resolved
Top findings, ranked by severity
HIGHπŸ›[BUGS]
Dangerous type cast in upload handler
src/components/FileUpload.tsx:147
β†’ Casting null to UploadResult can crash parent components.
MEDIUMπŸ”’[SECURITY]
Sensitive API key read from env var
src/app/api/checkout/route.ts:4
β†’ Ensure the secret is stored securely and never exposed client-side.
… +10 more Β· see full report β†’
Inline PR reviews
πŸ¦‰owl-watchBotreviewed

πŸ¦‰ OwlWatch reviewed this change: 2 new findings.

β€’ [MEDIUM Β· hunter] Hardcoded fallback secret src/config.ts:42

src/app/api/upload/route.ts
38+const form = await req.formData();
39+const file = form.get("file");
40+// TODO: validate size & mime type

πŸ¦‰ OwlWatch [INFO Β· mason] Long function handleUpload (212 lines)

Extract the validation logic into a smaller helper to improve readability.

Reply…Resolve
Repo Health score
87
Healthy
owlwatchhealth 87

One hotspot-weighted score and the files decaying fastest, plus a README badge that updates itself.

The pack

Five owls. One codebase. Every night.

Each is a fine-tuned SLM with its own tools and output schema, running in parallel through a shared, low-noise triage layer.

Hunter

Security

Secrets, CVEs & insecure patterns

Tracker

Bugs

Null refs, races & off-by-ones

Keeper

Dependencies

Updates, breaking changes, abandonware

Mason

Refactoring

Duplication, hotspots, structured diffs

Scribe

Analytics

Churn, coverage & complexity drift

1Install the GitHub App in seconds2Your first scan runs right away3Re-scans your whole repo every 24h4A ranked briefing, plus reviewed fix PRs
Why Owlwatch

Nobody owns the calm, low-noise nightshift

The market moved from PR-time review to whole-repo coverage. Here's where Owlwatch sits.

Coverage
PR-time bots (CodeRabbit, Cursor Bugbot)
Only see the lines in an open pull request.
Reads your whole repo every night, not just the diff.
Noise & price
Per-review indexers (Greptile)
Deep, but noisy and priced per review.
Deduped, diffed, and ranked. Flat per-repo pricing.
Breadth
Security-only scanners (Snyk, Semgrep)
One domain, with high false-positive volume.
Security, bugs, deps, refactors & health in one pass.
Delivery
Health dashboards (CodeScene)
A great score, but on a dashboard you must remember to visit.
A Repo Health score that lands in your inbox by morning.
Effort
DIY (cron + linters + scanners)
You own the glue, the noise, and the upkeep.
Installed in seconds. One briefing, maintained for you.
Pricing

Start free. Upgrade when the pack pays for itself.

Free
$0

For trying it on your repos

  • Up to 3 repositories
  • All five agents, nightly
  • Morning email briefing
  • Repo Health score + README badge
Install on GitHub
7-day free trial
Pro
$29.99/mo

For teams that want fixes, not just findings

  • Everything in Free, unlimited repos
  • AI fix PRs with CI
  • Slack briefings + inline PR reviews
  • Doc sync & safe refactoring transforms
Start free trial
Team
Contact us

For your whole organization

  • Everything in Pro, unlimited repos
  • Access for every user in your org
  • Centralized billing, one invoice
Contact us
FAQ

Questions, answered

We run your first scan the moment you install, so you see findings within minutes. After that, Owlwatch re-scans your entire repo every 24 hours. It clones at scan time, runs all five agents in parallel, then deletes the clone. Findings are deduplicated, diffed against the previous run, and ranked before the briefing goes out.

Wake up to a cleaner codebase

Install Owlwatch tonight. Your first scan runs right away, and a fresh briefing lands every 24 hours. Free for 3 repos, no credit card.