PRInspector Is in Pre-launch Development

AI Code Intelligence
for Better Pull Requests

PRInspector analyzes pull requests for security risks, architectural violations, and code-quality issues, helping engineering teams apply consistent review standards across their codebases.

Built for GitHubSelf-hosted AI inferenceGitLab & BitbucketOn the Roadmap
Security risks
Secrets, injection, unsafe patterns
Architecture
Layering and boundary rules
Code quality
Standards and maintainability
Inline feedback
Comments on the PR itself

Works seamlessly with your stack

GitHub
VS Code
TypeScript
Next.js
Node.js
React
Docker
Prisma
GitHub
VS Code
TypeScript
Next.js
Node.js
React
Docker
Prisma
Live Preview

See it in action.
Real-time AI code review.

An example of how PRInspector picks up a pull request, analyzes the code changes, and posts inline feedback.

app.diffnix.com/reviews/pr-847
8
Files Changed
+347
Lines Added
4
Issues Found
64/100
Quality Score
Running
PRInspector v4.2bash
20
20
const userRole = req.user?.role;
21
21
const resource = req.params.resource;
22
22
23
-
const query = `SELECT * FROM permissions WHERE role = '${userRole}'`;
23
+
const query = db.prepare("SELECT * FROM permissions WHERE role = ?");
PRInspectorcritical

SQL injection vulnerability fixed — parameterized queries prevent user input from being interpreted as SQL code.

24
+
const result = query.run(userRole);
24
25
25
26
if (!result.length) {
26
-
return res.status(403).send("Forbidden");
27
+
return res.status(403).json({ error: "Insufficient permissions" });
27
28
}
28
29
29
-
const token = generateToken(userRole);
30
+
const token = generateToken(userRole, { expiresIn: "1h" });
PRInspectorwarning

Token must have an expiration to prevent stale permission grants from persisting indefinitely.

30
31
req.permissionToken = token;
31
32
next();
32
33
};
Merge Blocked
Score 64 < threshold 70
How It Works

From push to review
without waiting on a queue

1

Webhook Received

PR event captured instantly from GitHub

2

Code Parsed

AST analysis and diff extraction

3

PRInspector Analysis

Deep semantic review with custom rules

4

Review Posted

Inline comments & status check

Customer-Controlled AI Inference

Your code stays
under your control.

Diffnix supports self-hosted inference for customers requiring private deployments, with optional cloud AI providers (planned) for teams that choose hosted inference. We don't store your source files, and we never use your code to train AI models.

Self-hosted AI Inference

Run PRInspector on models served from your own infrastructure with Ollama, so review requests stay on servers you control.

Encrypted Connections

All traffic between GitHub, our servers, and your browser is encrypted over HTTPS/TLS.

Inference You Control

Your inference configuration determines how code is processed — self-hosted today, with optional cloud AI providers planned.

Minimal Data Stored

Diffs are fetched for each review and not saved. We keep review results — repository names, PR numbers, scores and findings — not your source files.

Your Code
Git Repository
Diffnix
Analysis Engine
AI Inference
Your configuration
PR Comments
Inline Feedback
Your inference configuration determines how code is processed
Feature Suite

Everything you need.
Nothing you don't.

Core

Custom Rule Engine

Describe rules in plain English — no YAML or config files. Pick a severity, choose your repos, and PRInspector enforces it on every PR.

New Review Rule
RuleNo console logs in productionSeverity⚡ MediumInstruction“Flag console.log or console.debug calls, except in test files.”
✓ Rule active• Applied to 3 repos
AI

AI Review Engine

Deep semantic analysis catches architectural flaws that static analysis misses entirely.

utils/auth.ts:67
const token = jwt.sign(payload, secret);
const token = jwt.sign(payload, secret, { expiresIn: '1h' });

"JWT tokens should always include an expiration."

Config

Repo Targeting

Per-repository rule assignment. Enable, disable, and tune reviews independently.

acme/platform
12 rules
acme/api-gateway
8 rules
acme/auth-service
disabled
Security

Secret Detection

Automatic detection of hardcoded API keys, tokens, and credentials. Fails the review before they merge.

SECRET DETECTED
config/env.ts:14
const API_KEY = "sk-proj-a8f2...x9k1"
CHANGES REQUESTEDCHECK FAILED
Analytics

Review Analytics

Track latency, quality scores, violation trends, and AI cost attribution.

2.3m
Avg Review
82/100
Score
3.4
Issues/PR
94%
Fix Rate
Workflowsoon

Branch Policies

Configure different rule sets per branch. Stricter on main, relaxed on feature branches.

Branch Rules
main
12 rulesEnforced
develop
8 rulesActive
staging
5 rulesActive
Dashboard Preview · Sample Data

Observability built-in.

Track violations, quality scores and review history in a single dashboard. Figures shown are illustrative sample data, not customer results.

+12%
47
Reviews / Day
+3.2
78
Avg Score
-22%
4
Critical Issues
+18%
12.4h
Time Saved / Week

Violation Trend

Issues blocked in last 7 days

12
Mon
18
Tue
8
Wed
24
Thu
15
Fri
6
Sat
3
Sun

Issue Distribution

By severity level

Critical23 (12%)
Warning87 (45%)
Suggestion64 (33%)
Info19 (10%)
System Architecture

How PRInspector
processes your code

How PRInspector is designed to work — from webhook ingestion to inline PR feedback.

Webhook Gateway

AST Parser

PRInspector AI

Rule Engine

PR Feedback

Every PR
Review Trigger
Self-hosted
AI Inference
Inline
PR Comments
You Control
Inference
Why Diffnix

Built for engineering teams.

What PRInspector does for your review process.

Catches what reviews miss

PRInspector flags security flaws like SQL injection and hardcoded secrets on every pull request, before they reach main.

Consistent review standards

The same security, architecture and code-quality checks run on every pull request, with findings posted as inline comments.

Inference you control

Self-hosted AI inference for private deployments, with optional cloud AI providers planned for teams that prefer hosted inference.

Help Center

Common Questions

Everything you need to know about PRInspector and our AI analysis engine.

Integrating Diffnix is seamless. You simply install the Diffnix GitHub App or configure a GitLab Webhook for your organization. Once connected, you can select specific repositories for PRInspector to monitor. The AI automatically triggers every time a Pull Request is opened, updated, or synchronized, posting its analysis directly as comments within the PR interface. No complex configuration files are required to get started.
Pre-launch development

PRInspector Is in
Pre-launch Development

We're building AI-powered code review tools for engineering teams. Join the waitlist to follow development and hear when early access becomes available.

Free to joinNo credit card requiredDevelopment updates by email