CodeRifts review
A Git-centric governance layer for controlling OpenAPI changes before merge or deployment.
Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026
CodeRifts is API governance software for teams managing OpenAPI contracts through Git-centric development workflows. It analyzes OpenAPI 3.0 and 3.1 changes and produces reports covering breaking changes, risk, authentication impact, lifecycle status, and policy violations. Teams can review changes through the web interface, CLI, REST API, GitHub App, or CI/CD integrations before merge or deployment. It is particularly suited to engineering organizations that need repeatable API change controls rather than a standalone documentation tool.
The published plans show a useful progression from contract checks to broader governance. The Free plan costs $0 USD per organization per month and includes breaking-change detection, web, CLI, and REST API access, plus signed, verifiable verdict receipts. Pro adds unlimited repositories, GitHub App pull-request comments, API design linting, and deprecation lifecycle tracking. Team adds policy-as-code merge blocking, freeze windows, approval matrices, exception lifecycle management, and governance health scoring. Enterprise adds custom rate limits, SLA and dedicated support, SSO, a self-hosted option, and compliance features. The pricing page states that Pro and Team features are free during beta while also listing their standard monthly prices.
Integration breadth is a central part of CodeRifts’ fit. GitHub App comments and GitHub Actions support repository review, while GitLab CI and Bitbucket Pipelines extend CI/CD coverage. The REST API and CLI support automation, and VS Code, Backstage, and MCP connect governance with developer and platform workflows. AI features are also included. Teams seeking policy enforcement, lifecycle controls, risk scoring, approval workflows, and auditable exceptions should find the feature set aligned with governed API delivery. Teams needing access controls without Enterprise, or governance beyond OpenAPI 3.0 and 3.1, should consider a different fit.
Questions about CodeRifts
Does CodeRifts have a free plan? Yes, there is a free plan.
What does CodeRifts run on? Web. It runs in the cloud and self-hosted.
What does CodeRifts integrate with? 9 integrations, including GitHub App, GitHub Actions, GitLab CI, Bitbucket Pipelines and REST API.
Who is CodeRifts built for? Small businesses, mid-market companies and enterprises (our editorial estimate).
CodeRifts pros and cons
- Where it wins
- Free plan includes breaking-change detection and signed verdict receipts
- Policy-as-code can block merges and manage approvals, exceptions, and audit trails
- GitHub, CI/CD, CLI, REST API, VS Code, Backstage, and MCP integrations
- Where it doesn't
- Access controls, SSO, and self-hosting require the Enterprise tier
- Governed formats are limited to OpenAPI 3.0 and 3.1
- Advanced governance capabilities are spread across paid tiers
CodeRifts fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update