Skip to main content

Engineering assessment and governance

Engineering confidence before production

Preflyt is a self-hosted shift-left engineering platform for software teams. It brings engineering standards, branch policies, CI validation and optional AI code reviews into your GitHub delivery workflow.

Quick StartSelf-host Preflyt

Preflyt Engineering Overview showing repository coverage, pull request assessments, adopted standards and assessment activity.

Preflyt helps engineering teams identify security, software quality and infrastructure risks earlier in development. It connects the requirements your team defines to the checks your pipeline runs, then provides actionable findings and a traceable readiness result for each assessed commit.

Why teams use Preflyt​

CI pipelines and scanners produce results, but results alone do not establish whether a change meets your team's requirements. Checks can be missing, apply to a different revision, or vary across repositories and branches.

Preflyt gives teams a consistent way to define engineering standards, apply branch-specific policies, verify CI evidence and review issues before release. Developers receive feedback on pull requests; engineering and platform teams gain visibility into unmet requirements and the evidence behind each decision.

You run Preflyt on your own infrastructure with Docker Compose or the Kubernetes application bundle. A GitHub App connects the repositories you select. Your GitHub Actions workflows run the tests and scanners; optional AI reviews use the models and review instructions your organization chooses.

Features​

  • Repository profiles: languages, frameworks, CI, tests, lockfiles, containers, infrastructure as code and scanner configuration, each backed by file evidence at an exact commit.
  • Engineering standards: five versioned packs (Baseline Engineering, Application Security, Backend Services, Frontend Applications and Infrastructure as Code) with recommendations based on your stack.
  • Commit assessments: freeze the standards you selected and the CI results GitHub reported for a commit, so you can compare repositories and revisions over time.
  • CI evidence: signed GitHub pull request, check and workflow events, plus bounded JUnit and SARIF reports submitted automatically by the Action.
  • Contributors: who works on which repositories, from pull request and commit activity.
  • AI review skills: optional, advisory reviews you configure per organization. AI never decides a result.
  • Access control: GitHub or OIDC sign-in, organizations, teams and eight built-in roles.
  • Notifications: an in-app inbox and email channels for assessment outcomes.

From standards to pull request results​

Select repositories, review recommended standards, publish a policy for the target branch, and add the Preflyt Action to your workflow. Preflyt evaluates the resulting evidence and publishes Preflyt / Engineering Readiness on the pull request. Development and main can have different requirements.

You can begin with inspection and assessments, then enable PR checks and optional merge protection. GitHub blocks merges only when its rules require the check. AI feedback remains advisory and cannot waive a required engineering check.

See How Preflyt works for the complete workflow and Getting Started to set up your first repository.

Documentation sections​

Getting Started​

User Guide​

Self-Hosting​

Concepts​

Status of this documentation​

Preflyt is under active development. When a capability is not implemented yet, its page says so.