Cora
by Procomix Technology Group
Code Operations & Review Agent - AI code review and DevOps automation for Azure DevOps.
CORA — the AI agent for Azure DevOps that lives in your tenant.
CORA (Code Operations & Review Agent) is an enterprise AI platform that automates code review, project provisioning, and board collaboration across the Azure DevOps lifecycle. Deployed as an Azure Managed Application, every component runs inside your Azure subscription: your code, your prompts, your completions, your Key Vault, your managed identity. The publisher has no network path to any of it.
Three components
- AI Code Reviewer. On every push, scans the diff for security flaws (SQL injection, XSS, hardcoded secrets, weak crypto), reliability bugs (resource leaks, race conditions, error-handling gaps), and quality drift. Files findings as Azure DevOps work items with remediation suggestions.
- Provisioning Portal. An MCP server that creates new Azure DevOps projects, applies organizational baselines, and bootstraps repos, iterations, and areas.
- Board Collaboration Agent. A second MCP server exposing work items, queries, and boards, wire it to Microsoft 365 Copilot Studio to manage your DevOps board through natural language.
The trust contract
Customer code, prompts, and LLM completions never leave the customer's Azure tenant. The publisher receives only sanitized usage telemetry , five allowlisted fields: an opaque tenant ID, event name, status, duration, and analysis type. The allowlist is enforced in code, not in policy. Customers can opt out at install time and the agent keeps working.
BYO Azure OpenAI
Point CORA at your own Azure OpenAI endpoint. Pick your model (gpt-4.1, gpt-4o-mini, gpt-5-mini), your region, your tokens. The publisher never has a key to your LLM.
Business impact
- Reduced effort : cut manual code-review workload; free senior engineers from routine inspections.
- Faster time-to-production: surface issues at push time, not at the end of the cycle.
- Stronger collaboration: developers, security, and managers in one conversational workflow.
Production posture
- Hardened container: pinned base image, non-root runtime user, build-time security assertions.
- All secrets in Azure Key Vault. All logs in your own Log Analytics workspace.
- Microsoft Entra ID single sign-on for the Provisioning Portal.
- Auto-scaling Azure Container Apps with optional VNet integration.
About PTG Group
CORA is built by PTG Group (Procomix Technology Group), a Microsoft Tier 1 Partner and Managed Security Services Provider serving the MEA, MENA, Gulf, and Africa regions. Part of the PTG AI Agents portfolio (Zahra, Talia, SIRA, CORA).