Review pillar

Find risk before it reaches production.

Use self-service guidance, automated checks, and dedicated viewers to assess architecture, security, performance, and solution quality.

Explore review guidance
9Review resources
5Quality lenses
1Prioritized report
Review skill catalog

Check the highest-risk area first

Explore review tools and task guides. Each guide explains what to bring and the intended output.

Architecture guides

Assess Well-Architected risks across reliability, security, operations, performance, and experience.

External review toolPower Pages

PowerCAT OverPage

Inspect a Power Pages site's structure, preview, code, and network activity without duplicating the dedicated viewer in Self-Service Portal.

Power PagesSolution ZIPFindings

Sanitized input: Use a solution ZIP containing powerpagecomponent records or a zipped pac powerpages download. Remove production data, identities, secrets, and credentials. Findings JSON and HAR captures are optional.

Expected output: An in-browser site review with supplied findings and network evidence overlaid. The viewer does not generate findings.

Open OverPage viewer View skill marketplace details
External review toolPower Automate

PowerCAT OverFlow

Inspect Power Automate workflows from one solution side by side without duplicating the dedicated Solution Master viewer in Self-Service Portal.

Power AutomateSolution ZIPFindings

Sanitized input: Use a solution ZIP containing a Workflows/ folder. Remove production data, identities, secrets, and credentials. A solution-level findings JSON is optional.

Expected output: An in-browser workflow review with any supplied findings overlaid by flow. The viewer does not generate findings.

Open OverFlow viewer View skill marketplace details
Review workflowRun locally

PowerCAT OverCode

Review a Power Apps Code App or React JavaScript/TypeScript project against an evidence-based rule catalog.

Code AppsSource folder or ZIPFindings JSON

Sanitized input: Use a local project folder, ZIP, or explicit file set. Remove secrets, credentials, personal data, and customer or production data before review.

Expected output: A local findings JSON and self-contained HTML viewer with prioritized, source-grounded recommendations.

How to proceed: Run the review in your approved local coding-assistant or code-review workflow, keep source files on the authorized device, and retain the findings JSON with the release evidence.

Power CAT skillCode Apps

Code App Release Evals

Check expected features and run static security analysis against a Power Apps Code App before release.

Presence checksSecurity

Sanitized input: Use a Code App project and optional requirements. Remove secrets, credentials, personal data, and customer or production data before generating evals.

Expected output: An executable two-layer eval suite with presence checks, static security analysis, and an HTML dashboard.

View marketplace details
Power CAT skillGenerative Pages

Generative Page Release Evals

Check expected features, run unit tests, and apply static security analysis before release.

Unit testsSecurity

Sanitized input: Use a Generative Page component and optional requirements. Remove secrets, credentials, personal data, and customer or production data before generating evals.

Expected output: An executable three-layer eval suite with presence checks, unit tests, static security analysis, and an HTML dashboard.

View marketplace details
Architecture15-25 min

Well-Architected Solution Review

Assess reliability, security, operational excellence, performance efficiency, and experience.

Risk reportWAF
Inputs and output

Bring the design and constraints. Leave with prioritized findings and recommended next actions.

Security20-30 min

Solution Security Review

Inspect roles, sharing, connectors, identities, data boundaries, and least-privilege controls.

AccessDLP
Inputs and output

Bring sanitized configuration evidence. Leave with security findings and remediation priorities.

Power CAT skillCanvas Apps

Analyze Canvas Performance

Audit loading, queries, delegation, collections, formulas, controls, error handling, responsiveness, and accessibility.

Canvas AppsPerformance
Inputs and output

Bring a locally synchronized Canvas App with its pa.yaml files and representative scenarios. Receive evidence-based findings and prioritized improvements.

View marketplace details
Quality10-20 min

Solution Checker Triage

Turn automated checker output into an actionable remediation plan based on severity and impact.

CheckerTriage
Inputs and output

Bring a sanitized checker report. Leave with grouped findings, owners, and resolution order.

A responsible review path

Prepare, assess, prioritize, improve

Keep the review bounded, evidence-based, and free of sensitive data from intake through remediation.

01 / SANITIZE

Remove sensitive data

Replace production content, identities, secrets, logs, and screenshots with safe examples.

02 / FRAME

State the concern

Describe the architecture, business outcome, constraints, and decisions needing scrutiny.

03 / REVIEW

Assess the evidence

Apply focused checks and capture severity, impact, confidence, and supporting evidence.

04 / RESOLVE

Close material risks

Assign actions, validate changes, record accepted risks, and retain the final report.