Automated code review is a cybersecurity detection technique that uses specialized static analysis tools to systematically examine an application's source code, configuration files, and dependencies without executing the program. Its primary purpose is to proactively identify security vulnerabilities such as injection flaws, insecure direct object references, architectural weaknesses, coding errors, performance issues, and violations of coding standards or regulatory requirements.

This approach enables developers to "shift left" by discovering and remediating flaws early in the secure development lifecycle. Typically integrated into continuous integration and continuous deployment (CI/CD) pipelines, automated code review enhances the efficiency, consistency, and scalability of security assessments while providing immediate feedback. It serves as a fundamental practice for maintaining code hygiene, improving software quality, minimizing exploitable weaknesses, and complementing the critical oversight provided by human reviewers.