An automated, lightweight Cloud Security static code analysis tool designed to scan Infrastructure-as-Code (IaC) templates for security vulnerabilities and cloud misconfigurations before deployment.
- Security Group Auditing: Detects open ports exposed to the public internet (
0.0.0.0/0). - Storage Compliance: Identifies public S3 buckets with risky Access Control Lists (ACLs).
- Instant Fixes: Recommends industry-standard mitigation strategies for detected vulnerabilities.
- Python 3
- Static Analysis Logic
- Terraform / Infrastructure-as-Code (IaC)
- Clone the repository:
git clone [https://github.com/iqrazulfiqar7373-coder/GuardAI-Scanner.git](https://github.com/iqrazulfiqar7373-coder/GuardAI-Scanner.git)