Iris Code does not identify whether code was written by AI, and it makes no model calls. Editor, CLI, hook, and CI analysis runs in your environment. Opt-in Cloud scans temporarily fetch a selected GitHub repository, delete the working copy after the scan, and retain the report.
Four words used throughout
A finding is one thing Iris Code reports about your code. Every finding is either a blocker, serious enough to stop a push, or a warning, which is not. A threshold is a cap you configure, such as a minimum health score. The gate is the decision about whether a change gets through, made by comparing a scan against those thresholds. Those four carry most of the product. The rest are on the terminology page.Quick Start
Install Iris Code and read your first score, in about two minutes
Try the Playground
Edit a multi-file project and see the real Iris Code gate block or pass a simulated push
What it finds
Health scores, secrets, duplicate code and security smells
Blocking bad code
Hooks and CI gates that block code below your threshold
Terminal and CI
The same checks from a shell or a pipeline, with
@iris-code/cliConfiguration
One committed file so the whole team shares the same thresholds
Iris Code Pro
Whole-project scans, hooks, CVE audits and the full CLI
What you get
A score on every file, on every save. Zero to 100, reduced by long functions, deep nesting, leftover debug prints and hardcoded values. Nothing needs triggering. Secrets caught before they ship. A real API key is flagged in the sidebar with its value masked. Free on every plan, no configuration required. Copy-paste made visible. When the same block appears in three files, Iris Code reports all three locations and can open them side by side. A gate you turn on when you are ready. Preview how your project scores against six presets first. When the result looks right, a pre-push hook or a CI step blocks anything below your threshold.How it works
1
Install the extension
Install Iris Code from the Marketplace. It is free, and the icon appears in your Activity Bar immediately.
2
Open a file
JavaScript, TypeScript, Vue, Svelte, Go, Python, Ruby, C#, Java or Rust. The score appears in the sidebar with the findings below it. No configuration required.
3
Preview your enforcement posture
At the bottom of the File tab, click Preview Gate. It shows how your code scores against every preset without changing anything.
4
Enable enforcement
Install the pre-push hook, or add
iris gate to CI. Code below your threshold is then blocked before it ships.Your code stays on your machine
Analysis runs in the editor process, on your machine. Nothing you scan in the editor or the CLI is uploaded, and no AI model processes it. Iris Code does make network requests, and it is worth being specific about which: signing in, licence validation, dependency version and advisory lookups, and anonymous product-use events you can disable in your account settings. None of them carry source code, file contents or project structure. That local-first design gives you three things:- Instant feedback - milliseconds on save, with no round trip.
- Offline capability - file analysis and CLI commands work without a connection.
- Privacy by design - proprietary code, secrets and unreleased features stay on your machine.
The one exception is a cloud scan, which you have to switch on. If you connect a repository through the Iris Code GitHub App, the scanner fetches that repository’s source from GitHub in order to audit it without your editor open. The source is analysed and discarded; what is stored is the report. Nothing is ever executed, and no AI model sees it.Connect nothing and this does not apply: the editor and the CLI behave exactly as described above. See Cloud overview for what is fetched, stored and deleted.
Languages
Vue and Svelte script blocks go through the JavaScript or TypeScript analyser, and ERB through the Ruby one. The table is the list; counts are not stated in prose because they drift the moment a parser is added.Free or Pro
Everything needed to review your own code is free: unlimited file scores, clickable findings, secrets detection, one saved whole-workspace scan, and Gate Preview. Pro keeps project-wide evidence current over time, and turns the score into something that blocks.Free - $0/month
- One complete workspace scan, saved locally
- File scores, complexity, function counts
- Findings you click to jump to the line
- TypeScript-specific checks
- Code smell detection
- Hardcoded secrets detection
- Squiggles and Problems panel entries
- Status bar and Code Lens
- Detached panel and HTML export
- Trend history, 2 snapshots
- Preset configs via
presetId - Gate Preview, read-only
- CLI:
iris checkon a file,iris secrets,iris security,iris report,iris slack,iris hook status,iris config
Pro - $6/month
- Everything in Free
- Rescan the whole project whenever you like, plus folder scans
- Gate Preview drilldown: exactly which files fail, and why
- Pre-push hook enforcement
- Build hook enforcement
- Dependency versions and CVE scanning
- Issues tab with blocker and warning filters
- TODOs tab
- Your own thresholds in
.irisconfig.json - Hard limits on secrets, complexity, file size, smell density, security smells
- Custom scoring weights
- Config Studio, to build and share a config visually
- Unlimited trend history
- Full CLI:
iris gate,iris deps,iris todos,iris hook installand the rest - Account Analytics