inbound
outbound
unencrypted / drift
Import an AWS, GCP, or Azure environment—or upload a Terraform .tfstate file—to map VPC boundaries, evaluate security group and firewall reachability between services, record service ownership notes, and surface undocumented network paths.
AES-256-GCM on write. The API never returns raw credentials after submission—only masked key hints.
.tfstate files).
accountId in S3. Account owners can grant or revoke access for additional team members by email.
Register a new account or sign in to an existing workspace.
Store your AWS, GCP, or Azure credentials in the write-only vault and run a scan, or import a Terraform .tfstate file. Only the provider(s) you configure will be queried.
Credentials are encrypted on write and never returned by any API endpoint. Configure only the provider(s) you use.
Upload a Terraform .tfstate or CLI JSON topology snapshot.
Evaluates security controls, cost optimization, redundancy, stability, and scalability against your topology.
Manage users authorized to view or modify this account's topology and notes.