Approach — Prsho

These are the principles our work is built on. Some of them apply differently to each product — see the notes below.

Evidence for every fact

A report is only as useful as it is checkable. Every statement points to the exact file and line it comes from.

Honest uncertainty

Static analysis cannot see everything. When the code does not settle a question, the report says not established and explains why. An unanalyzed path is never reported as safe.

Your code stays yours

For Prsho Dossier and Prsho Tenant Isolation:

• Analysis runs locally, on your machine.
• Your code is parsed, never imported or executed.
• Nothing is sent to us or to third parties.

For an audit, you share your code with us; it is processed in an isolated environment and is not passed to third-party AI services without your consent.

Same input, same output

For Prsho Dossier and Prsho Tenant Isolation, the same code produces the same result, so changes between two reports reflect changes in the code.

Depth over breadth

Our current focus is Python and Django, including Django REST Framework — URL configuration, views, permissions, settings, signals, migrations. JavaScript/TypeScript is planned; other languages later.

A tool that treats code as untrusted

Code under analysis may be hostile. Our tools are designed to read it safely: no execution, paths limited to the project folder, size and time limits.