Veriva provides an independent verification layer for AI‑generated code by running its own analysis pipeline on every pull request. It attributes each line to the originating model (e.g., Claude Code, Cursor, Copilot), grades the PR on security, correctness, and provenance, and enforces merge gates that block integration when predefined thresholds aren’t met. The service integrates via a CLI and supports GitHub, GitLab, Bitbucket, and CI workflows.
Funding
Funding not disclosed
Founders
Product
Problem
Development teams increasingly rely on AI code generators, but the output often lacks reliable security, correctness, and provenance checks, leading to hidden vulnerabilities and uncertain accountability for AI‑authored lines.
Solution
Veriva provides an independent verification layer that grades every AI‑generated pull request on security, correctness, and provenance. It attributes each line of code to the originating model (e.g., Claude Code, Copilot, Cursor) and runs a 10‑stage governance pipeline—including static analysis, reachability validation, and post‑merge outcome tracking—to produce an A–F grade and enforce merge‑gate policies in CI. The system maintains an auditable provenance trail for each finding, allowing teams to enforce custom policies, block merges that don’t meet thresholds, and retain full control over code changes while still leveraging AI assistance.
Target Audience
Primary customers are engineering teams that ship AI‑assisted code at scale, including multi‑repo organizations and solo open‑source maintainers who need independent verification of AI‑generated contributions.
Features
- Per‑line attribution of code to the specific AI agent that authored it
- Automated merge gates that override model confidence based on configurable policies
- Comprehensive provenance log documenting findings, grades, and decisions
- Multi‑stage pipeline combining input sanitization, static analysis, AI review, and reachability validation
- Real‑time grading with security, correctness, and provenance scores displayed per PR
- Integration with GitHub, GitLab, Bitbucket, Linear, Jira, and Slack for CI/CD workflows
- CLI tool for local scanning and CI integration; supports custom policies and API keys