Understudy

Plays the attacker in rehearsal, so the real one never gets the part.

Understudy reads your infrastructure code, finds the routes an attacker could take from the internet to your data, and proves each one: a test that fails while the route is open, a fix, and the same test passing.

Or scan a public GitHub repository

Checking is free: it reads the Terraform and prices the scan before anything runs.

Or upload a .zip of Terraform files

Open a sample scan. No sign-up, nothing to wait for.

What happens in a scan

  1. Find the route

    Reads the Terraform into a graph of resources, identities and data, then finds the routes from the internet to anything sensitive. A model proposes; the graph checks every hop exists.

  2. Prove it's open

    Writes a policy test that fails while the route exists, and runs it against the code in a sandbox. Red.

  3. Fix it and prove it's closed

    Writes the smallest change that breaks the route and runs the same test again. It has to pass, and the rest of the checks can't get worse. Green.