least-privilege

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

Create a break glass role for emergency use in order to limit AWS production account access. Configure automatic alerts and logging of activities in the role to secure its use in production environments.

Self-hosted execution layer for AI agents: connect any agent to real APIs, scope exactly what it can touch, and keep credentials out of the agent's hands.

Repository for iamfast questions and issues

🔐 Lightning fast, global scale authorization service without the overhead of a yet another DSL.

Validate all your Customer IAM Policies against AWS Access Analyzer - Policy Validation

Lambda Extension for iamlive

Verify what AI coding agents can actually read, write, execute and reach using synthetic canaries.

Find privilege that was granted and never used: unused permissions, narrowable roles, dormant principals, and ungranted use.

Cloud governance reports from native services in a clear and readable digest

TOTP MFA for teams: Shamir's Secret Sharing and zero trust OTP generation

A cross-platform, userspace declarative command policy launcher - post the standing orders once; the gatehouse (program, args, env, path, time) enforces them the same way, everywhere.

Catalog and understand risks from granting IAM privileges

Web4: an open standard for verifiable AI presence — LCT identity, T3/V3 trust tensors, MRH context, ATP/ADP. Rust + Python SDKs on crates.io/PyPI. AGPL-3.0-or-later.

Find privilege that was granted and never used: entitlement inventory, access-log windows, and decay verdicts.

NHInsight — Open-source security tool to find risky non-human identities, tokens, and CI/CD access paths across AWS, Azure, GCP, GitHub, Kubernetes, and GitHub Actions.

Python CLI for detecting cloud storage misconfigurations. AWS S3 real API scanning with boto3. Azure Blob and GCP Storage on roadmap.

command line interface for Permify