Terraform Scanner

Catch insecure infrastructure before it is created

Infrastructure as code means a misconfiguration is deployed at scale and repeatedly, so a single insecure default in a Terraform file becomes many insecure resources. This scanner reviews Terraform for the security issues that commonly slip through, so you can fix them in code rather than in production, before a single resource is created.

The patterns worth catching

The recurring problems include storage or databases left open to the public internet, security groups allowing traffic from anywhere, unencrypted volumes and databases, secrets hard-coded into the configuration, and overly permissive access policies. Because infrastructure code is applied wholesale, catching these in review prevents a whole fleet of misconfigured resources rather than one, and each finding is a specific line you can change.

Shift-left security, kept local

Reviewing infrastructure code before it is applied is the cheapest place to catch these issues, far cheaper than remediating live resources that may already be exposed. It is a defensive review of infrastructure you own and manage, and finding a problem here is a routine edit rather than an incident. The analysis runs entirely in your browser, so your configuration is never uploaded, which matters when it describes your own infrastructure.

Related tools

• CI/CD Security Gap Analyzer — Checklist based analyzer for CI/CD pipeline security gaps.
• Docker Security Scanner — A new tool extracted from the codebase.
• SQL Formatter — Format and indent SQL queries for readability. Handles joins, subqueries and CTEs, supports common dialects, and runs entirely in your browser.
• CI/CD Risk Analyzer — Analyze CI/CD pipelines for security risks and misconfigurations.