GitHub AppInstall in 30 seconds · Free for open source

Know what breaksbefore you merge.

Arbor analyzes every PR with graph-native intelligence and posts a blast-radius report directly in GitHub. Not LLM guesses — graph math.

Install on GitHub — Free See how it works

10+languages

<30sanalysis time

100%deterministic

0hallucinations

scroll

▲process_payment — HIGH — 14 downstream callers·◆UserService.validate — MEDIUM — 3 direct callers·●formatDate — LOW — isolated utility·▲DatabasePool.query — HIGH — centrality 0.89·◆AuthMiddleware — MEDIUM — 2 API routes affected·—Graph-native analysis · No LLM guessing · Sub-30s results·▲process_payment — HIGH — 14 downstream callers·◆UserService.validate — MEDIUM — 3 direct callers·●formatDate — LOW — isolated utility·▲DatabasePool.query — HIGH — centrality 0.89·◆AuthMiddleware — MEDIUM — 2 API routes affected·—Graph-native analysis · No LLM guessing · Sub-30s results·

How it works

Three steps. Zero config.

From install to your first blast-radius report in under a minute.

Install in 30 seconds

Click Install on GitHub and select your repositories. Arbor immediately starts monitoring new PRs. Zero configuration required.

Works with public and private repos

Graph built automatically

Every PR triggers a shallow clone and full parse using Tree-sitter. Arbor builds a live dependency graph with cross-file edge resolution in under 30 seconds.

Rust · TypeScript · Python · Go · Java · C/C++ · C# · Dart · and more

Blast radius in your PR

A structured report appears in your PR with every changed file, its risk level, and exactly which functions call it — sorted by centrality score.

High-centrality nodes are called out explicitly with caller counts

Live preview

This is what lands in your PR.

Structured. Sorted by risk. Posted automatically on every commit.

arbor-cloudbot commented just now

👍🚀👀❤️

Features

What makes Arbor different

SonarQube finds bugs. Snyk finds CVEs. Arbor tells you what breaks.

Core Engine

Graph-native analysis

Arbor builds a real dependency graph via Tree-sitter AST parsing — function calls, imports, class hierarchies. Not pattern matching.

Analysis

Blast radius scoring

Every changed file gets a risk score based on PageRank-derived centrality. High-impact nodes are flagged explicitly with caller counts.

Coverage

10+ languages

Rust, TypeScript, JavaScript, Python, Go, Java, C, C++, C#, Dart, Kotlin, Swift, Ruby, PHP. Same graph engine across all of them.

Transparency

Confidence explanations

Every report includes a confidence level and plain-English reasons. Know when to trust the analysis and when the graph might be incomplete.

Deterministic

Zero hallucinations

No LLM in the risk path. The graph tells you exactly what has edges to the changed code — nothing more, nothing less. Fully deterministic.

Dashboard

Dashboard & history

Every analysis is saved. Track architectural health over time, spot high-risk patterns, and see which PRs are consistently dangerous.

Pricing

Simple, honest pricing

Start free. Upgrade when your team needs more.

Free

$0forever

For open source projects and solo devs.

1 repository
Unlimited PR analyses
Public repos only
PR comment reports
7-day history
Community support
—Private repos
—Dashboard access
—Team seats