Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

IAMbic is Version-Control for IAM. It centralizes and simplifies cloud access and permissions. It maintains an eventually consistent, human-readable, bi-directional representation of IAM in Git.

MagTape Policy-as-Code for Kubernetes

Rules Registry for Compliance Frameworks

Shift-left cloud hygiene for AWS, Azure & GCP - deterministic read-only waste detection with no agents, no telemetry, safe for regulated environments.

Neuro-Symbolic-Causal AI - Project Chimera | 🌌 An open research project exploring formal verification of AI agent decisions, combining symbolic reasoning, causal inference, and runtime policy enforcement.

Terraform Test Framework

AWS Cloudformation Hook for OPA-powered infrastructure policy enforcement

GAMECHANGER aspires to be the Department’s trusted solution for evidence-based, data-driven decision-making across the universe of DoD requirements

GAMECHANGER Machine Learning Repo

The following is a simple example of how LLMs and langchain agents can simplify asking questions to understand the security posture of a cloud environment.

CA-PowerToys is a set of tools to help you manage Conditional Access policies. It is a command line tool that can be used to export, import, and clean up Conditional Access policies and associated Groups, helping to implement a Policy-as-Code approach.

GAMECHANGER Policy Analytics Site Crawlers

Deterministic policy language for AI agents. Z3 + TLA+ dual-engine formal verification. Runtime enforcement <1ms.

LLM guardrails & prompt injection detection for Python. Auto-instruments LangChain, CrewAI, OpenAI, LiteLLM + 8 more frameworks. PII masking, toxicity detection, policy CI/CD. One line, zero code changes.

nod is a platform-agnostic, rule-based linter that ensures AI/LLM specifications contain critical security and compliance elements before any agentic or automated development begins.

Next-gen enterprise multi-agent AI framework for autonomous agent swarms with code-level control, military-grade efficiency, and hybrid intelligence.

The little warrior that shouts when your infrastructure goes off track. But instead of just yelling "Access Denied!", she explains what went wrong - and even helps fix it.

Behavior contracts for AI agents