Key findings
- For 227 merged pull requests, Victor Lyuboslavsky estimated Qodo at US$590 to US$895 a month, against US$38 on its old plan. Self-hosted PR-Agent, reviewing each pull request once, came to about US$27 a month in model tokens.
- LightSpeed capped its Claude Sonnet 5 PR-Agent pilot at US$20 a month. It estimates about 140 automatic runs, or about US$0.14 a run.
- Qodo's pack estimates work out to about 139 credits, roughly US$1.67, per review. At that rate GILD calculates about US$500 for 300 monthly reviews.
- A self-hosting team has to run and patch PR-Agent and keep the model key away from pull request authors. PR-Agent's community now maintains it outside Qodo.
A self-hosted PR-Agent review costs cents in model tokens, and a hosted Qodo review costs more than a dollar in credits. Self-hosting moves the rest of the cost onto the team that runs, patches, and secures PR-Agent. Prices are in US dollars, checked October 12, 2026.
What teams that self-host report
Lyuboslavsky's repository merged 227 pull requests in 30 days at 2.35 commits each, with Qodo reviewing every push. That implied 350 to 530 agentic reviews a month on Qodo credits. Lyuboslavsky moved PR-Agent into GitHub Actions and reviewed only when a pull request opened. He estimated tokens at about US$27 a month on GPT-5.6-Sol or about US$5 on Gemini 3.7 Flash. Actions minutes are free for public repositories, so the model bill is the whole bill.
LightSpeed runs PR-Agent's Docker image on Claude Sonnet 5. An environment secret holds the key, and a cap in the Anthropic console holds spend to US$20 a month. Another team runs the GitHub Action on every push with Claude Sonnet 4.5 on Amazon Bedrock.
What Qodo charges per review
Pro Team credits cost US$0.012 each in packs of 2,500, 5,000, and 20,000. Qodo estimates about 18, 36, and 144 monthly reviews for those packs. Larger pull requests cost more.
For 300 pull requests reviewed once each, GILD calculates about 41,700 credits, or US$500 a month. Overage bills at the same rate up to your cap.
What the hosted product adds
Qodo Review checks bugs, rule violations, requirement gaps, and cross-repository breaking changes with specialized agents. The agents use an index of the codebase and pull request history. Review Standards and Relevance are in beta. Self-hosted PR-Agent has no codebase index, Review Standards, or Relevance.
Self-hosting gives you the choice of model and control of the network boundary. Lyuboslavsky picked a reviewer model from a different vendor than the one that writes the code, so the reviewer does not share the writer's blind spots.
What self-hosting costs beyond the model bill
A team running PR-Agent's GitLab webhook on Kubernetes saw new releases die from lack of memory at startup until a later release fixed it. LightSpeed stayed off Claude Sonnet 5.5 because the release pins an older LiteLLM model map. OpenVanilla removed PR-Agent after reviews stopped in April 2025 and a revival failed.
LightSpeed keeps its model key in an environment secret because pull request authors can reach a repository secret. The hosted product carries its own risk. In January 2026, Kudelski described how a comment led to code execution on Qodo Merge Pro's GitHub app and exposed an AWS administrator key. Qodo fixed the issues by October 2025.
Methodology
GILD calculated Qodo costs from its list prices and pack estimates, checked on October 12, 2026. Each self-hosted figure is the cost the linked team reported for its own model and traffic. GILD states each assumed volume where it uses one.
Products in this piece
Sources
- Official documentation
- 4
- Public source
- 7
- Qodo pricing
- Qodo docs: Pricing & usage
- Qodo docs: How Qodo code review works
- Qodo docs: Platform architecture
- Victor Lyuboslavsky, fleet-edr issue #1141: Run PR-Agent from CI instead of the metered Qodo review (Sep 21, 2026)
- LightSpeed .github issue #3535: Validate the qodo-pr-agent pilot credential boundary and activation (Sep 24, 2026)
- PR-Agent issue #2184: Is it possible to remember code suggestions from the previous push? (Jan 27, 2026)
- PR-Agent issue #2540: OOMKilled when upgrading from 0.36.0 (Jul 23, 2026)
- OpenVanilla pull request #230: Remove Qodo's PR agent CI workflow config (Dec 10, 2025)
- Kudelski Security: How We Exploited Qodo, from a PR comment to RCE and an AWS admin key (Jan 15, 2026)
- The-PR-Agent/pr-agent README: a community-maintained legacy project of Qodo (Oct 2026)