Stett | Unblock your team's code reviews on GitHub

Stett is the PR review app where teams see the risky changes first and ship without the wait.

See the team pages

No card
Free on your own repos

simple-ai

simple-ai▾

Reviews start in 4 hours.

Down 38% from 6.5 hours in the last 30 days. 48 pull requests opened, 142 merged.

7 days30 days90 days

Waiting for a first review4 hoursmedian, time to first review38%vs the 30 days before

Time to merge1.2 daysmedian, from ready to merged9%vs the 30 days before

Stale open PRs11of 38 open, quiet over 5 days29%2vs the 30 days before

Merged without a review5of 142 merged25%vs the 30 days before

Review time, week by week

Median per week

Time to first reviewTime to mergeReview turnaroundAI share

8h6h4h2h

Week of Sep 29

3.4 hours

↓ 41% vs the week before

p90: 1.9 days

21 pull requests

Aug 18Aug 25Sep 1Sep 8Sep 15Sep 22Sep 29Oct 6

This periodThe 30 days before

Worth a look

Bottlenecklena-park has 9 reviews waitingOldest for 8 days
Longest waitfix(billing): retry failed invoice webhooksby marco-ol, waiting 11 days for a review in platform
Slowest mergerefactor(storage): move uploads to the new bucket took 9 days#451 by tob-reyes, 4 review rounds, 1,180 lines
Fastest mergefix(search): trim spaces from saved queries merged in 3 hours#463 by ines-vale, approved on the first round
Fastest reviewermarco-ol answers in 3 hoursAcross 71 review requests

Who the open work waits on

View all

ReviewerWaitingLoadTurnaroundOldest

lena-park99 hours58 answered8 days

jhollis52.2 days3 answered11 days

marco-ol43 hours71 answered2 days

noor-h36 hours44 answered1 day

Sample data. Simple AI and its people are made up.

Runs on

GitHubA GitHub App, 6 of 8 permissions read only
AnthropicAI features, no training on your code
NeonPostgres in the United States
VercelHosting and page analytics without cookies
StripeBilling, cancel from the portal

Every company that touches your data is named in the privacy policy.

Guided review

Review what's critical first.

Risk first, in steps, with answers beside the code. Reviews take less time and miss less.

PR OverviewNext PR

#14818WalkthroughFile by fileAll filesAI reviewSubmit reviewMerge

fix(backend/api): make v2 permissions match what each endpoint reaches

Tobias Reyeson

platform· 0/9 groups reviewed · 0/17 files reviewed ·Review required

See file treeSee PR overviewAdd review notes

Closes six permission escalation holes in v2 API endpoints where credentials could reach beyond their granted scopes.
Search now requires appropriate scopes for private content types, MCP tools that spend platform resources require USE_TOOLS, and credential deletion blocks platform-managed ones.
Auth caching prevents repeated hash verification, and comprehensive tests pin each fix in place.

In this PR

Auth Caching InfrastructureSearch Content Type PermissionsMCP Tool Permission RequirementsCredential Deletion ProtectionInvoice Sharing Permission AlignmentPublic Schema Metrics VisibilityPermission Enforcement TestsAPI Documentation UpdatesSchema Permission Definition

1.Auth Caching Infrastructure

0 of 3 files reviewed

Mark 3 files reviewed

Risk 7middleware.py

Modifies auth middleware to prevent double verification and fix rate limiting.

Worth readingFastAPI: Security dependencies↗api_key.py↗

… / api / external

global_rate_limit.py6

tenancy.py6

middleware.py7

…backend/backend/api/external/middleware.pyModified+19-2Viewed

@@ -1,12 +1,11 @@

0101 from fastapi import FastAPI, HTTPException, Security, status

0202 from fastapi.security import APIKeyHeader, HTTPAuthorizationCredentials, HTTPBearer

0303 from prisma.enums import APIKeyPermission

04−from starlette.requests import Request

04+from starlette.types import Scope

0505

0606 from backend.data.auth.api_key import validate_api_key

07−from backend.data.auth.api_key import verify_api_key_hash

0807 from backend.data.auth.base import APIAuthorizationInfo

0908 from backend.data.auth.oauth import (

1009 InvalidClientError,

1110 InvalidTokenError,

1211 validate_access_token,

@@ -15,6 +14,8 @@

)

Review in steps1/9 groups · 4/17 files

1.Auth Caching Infrastructure
3/3
2.Search Content Type Permissions
1/2
api/v2/search.pyRisk 8
tests/test_search_scopes.pyRisk 3
Mark 2 files reviewed
3.MCP Tool Permission Requirements
2 files
4.Credential Deletion Protection
1 file
5.Invoice Sharing Permission Alignment
2 files
and 4 more steps

Built to unblock each other, not to score people.

GitHub only
Stett reads GitHub and nothing else.
No score for a person
There is no single score for a person. Each signal shows its rule.
Yours to see
Your own numbers, never a colleague's.
Five or no median
Medians need at least five other people.
People, not bots
Bots and review apps never count as people.

simple-ai

simple-ai▾

marco-ol reviewed the most, 64 pull requests.

Up 12% from 57 in the last 30 days. 8 people active, bots left out.

7 days30 days90 days

marco-olAnswers review requests in 3 hoursReviewed6412%Merged186%

lena-parkAnswers review requests in 9 hoursReviewed418%Merged2216%

noor-hAnswers review requests in 6 hoursReviewed3731%Merged15about the same

Signals

Keeping the team going

marco-olreviewed 64 PRs, 29% of all reviews

Slow or silent

jhollisanswered 3 of 14 requests due, median 2.2 days

Opens but never reviews

kofi-aopened 9 PRs and reviewed none

Big PRs, hard to review

tob-reyesmedian 1,180 lines over 7 PRs

Small PRs, easy to review

ines-valemedian 64 lines over 12 PRs

Rubber stamps

sam-ortiz11 of 14 approvals with nothing but LGTM

Everyone

PersonReviewedMergedOpenedSizeStampsTurnaroundWeekly

marco-ol6412%186%21140 lines2 of 403 hours

lena-park418%2216%24210 lines4 of 309 hours

noor-h3731%15about the same1695 lines1 of 256 hours

jhollis940%1115%13320 lines–2.2 days

tob-reyes225%712%71,180 lines3 of 1622 hours

sam-ortiz18about the same910%11160 lines11 of 145 hours

For managers

See what blocks the team.

Where work waits, who it waits on and who carries the reviews, in five views.

Walk through the team pages

How it starts

Seamless install in a few minutes.

1
Install the GitHub App
An owner of your GitHub org installs it. That starts a 14-day Team trial, with no card. What the App asks for
2
Sync repositories
Stett reads your pull requests in the background and fills the team pages. Each view says how many repositories have synced.
3
Invite your team
Engineers join when they sign in with GitHub, up to the seat ceiling you set. You pay for the people who joined.

Free on your own repositories. $19 per seat a month on your org.

Install the GitHub App on your org for a 14-day Team trial.

Free

Your own repositories.

Free for good, no card

Includes

10 AI operations a day
Guided reviews, the inbox and AI briefings
No org repositories, no team pages

Team

14-day trial

Your GitHub org's repositories, with the team pages.

$19/ seat a month

$15 a month billed yearly, $180 per seat a year

A team of 8: $152 a month.

Everything in Free, plus

Team pages across your whole org
Pay only for people who sign in
250 AI operations per seat a day, pooled
Up to 25 people during the trial

Enterprise

More than one org, or terms your procurement team needs.

Talk to us

Or email team@stett.dev

Everything in Team, plus

One or more GitHub orgs
History beyond 90 days
AI limits set in your contract
Annual contract and invoice
Signed DPA and security questionnaire
Email replies, usually in one working day

FAQ

Before you install

Unblock your team's pull requests.

Install the GitHub App on your org and Team is free for 14 days. No card.

Send this to your GitHub admin

Stett is the PR review app where teams see the risky changes first and ship without the wait.

See the team pages

No card
Free on your own repos

simple-ai

simple-ai▾