I Built an Open-Source AWS Cloud Security tool for solo devs & founders !
If you're a solo dev running your own AWS account with no security team, you've probably had this thought: is my IAM setup actually fine, or did I just get lucky? Plexavo exists to answer that for people in that exact position, not for teams that already have Wiz. What it does pip install plexavo plexavo scan --profile prod --report-html Scans IAM, S3, EC2, and networking for misconfigurations…
For solo developers managing their own AWS accounts without a dedicated security team, a looming question often arises: "Is my IAM setup truly secure, or am I merely fortunate?" Plexavo aims to provide an answer to those in this exact predicament, focusing solely on individual users rather than established teams with tools like Wiz.
To accomplish this, Plexavo conducts a scan of IAM, S3, EC2, and networking configurations for misconfigurations and potential privilege escalation pathways. The outcome includes a score ranging from 0 to 100, accompanied by a detailed, jargon-free report highlighting the issues, the potential impact of an attacker, and precise instructions to rectify the problems.
This tool operates directly from your local machine, ensuring that no sensitive data is transferred outside of your system.
A tangible example of Plexavo's effectiveness can be found at https://plexavo.com/sample-report. The scanner's reliability stems from its reliance on pure Python and boto3, eliminating the risk of AI-driven inaccuracies. Furthermore, an optional AI layer is available for users who prefer their findings explained in simpler terms, but this feature is entirely opt-in and does not influence the initial detection process.
Whether you are curious about the scanner's performance, wish to explore potential vulnerabilities, or are eager to contribute to its development, Plexavo welcomes all feedback and contributions. The project is currently in its early stages (version 0.1.2) and offers ample opportunities for improvement. For further inquiries, feel free to reach out directly. The repository can be accessed at https://github.com/plexavo/Plexavo.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
