Registry

AWS IAM least-privilege assessment. Provide read-only AWS credentials via PaperSecret. Agent scans all IAM roles and policies, identifies over-permissioned access, maps actual usage via CloudTrail, and generates least-privilege replacement policies as executable Terraform.

Forensic log analysis for incident response. Upload NGINX, CloudTrail, VPC Flow, WAF, or application logs. Agent reconstructs the attack timeline, extracts IOCs, identifies lateral movement, and produces remediation recommendations with an executive summary suitable for regulators.