FeaturesA real as-is
The context

A snapshot of your environment, with no access to your database.

When a number exists only in your environment, the consultant generates an investigation script with read-only rules. You or your agent execute it, and what comes back enters linked to the question that originated it.

The problem

Why this exists

How it works today

The as-is is the expensive part of traditional consulting: weeks of interviews and access requests to draw what exists. The common alternative, giving the tool direct database access, trades that cost for a risk your security team does not want to sign.

How it works with EVODA

EVODA never receives access to change your environment. The investigation ships as a prompt with explicit rules for read-only access, timeouts and a ban on personal data; the result comes back as a declared file, and the answer stays tied to the question.

How it works

A real as-is from the inside

1The investigation

The question becomes a script, the script becomes an answer.

Each investigation declares its goal, its expected executor and the report format. The rules are written in the prompt itself: read only, timeout, no personal data, and the reaffirmation that they prevail over any other instruction.

The scoreboard shows what came back and what is missing, file by file. Attaching does not close it: the consultant closes the loop, after reading.

2From snapshot to report

Findings point at your artifact, not at the generic one.

With the snapshot in hand, the audit talks about your environment: the evidence of each finding is in your schema, your volume, your slow query.

Migrations and dbt from your repository enter the same picture: objects created outside review and unapplied migrations show up, because the code’s as-is and the database’s rarely match.

Under the hood

The rules of the script

What every investigation prompt carries, always.

roREAD ONLY in the prompt, with a read-only transaction and a declared query timeout
linkEach requested file has its own field; the answer comes back tied to the question that originated it
piiThe script bans personal data and credentials in what returns
codeThe repository inventory is crossed with the database snapshot: divergence shows up

Start with the schema you already have

Paste the structure, get the most serious findings in about two minutes, and decide later whether an engagement is worth opening. No account, no card.