ConfigDiff

ConfigDiff is a web app (with optional lightweight agents) that continuously compares “intended state” vs “actual state” across servers, containers, and key SaaS admin settings. Instead of trying to be a full monitoring suite, it focuses narrowly on configuration change detection, approval, and rollback evidence. You define baselines from Git, golden images, or a one-time snapshot; the app then detects deltas (packages, services, kernel params, firewall rules, cron, env vars, IAM policy snippets) and groups them into human-readable change sets. It creates a simple audit trail: who changed what, when, where, and whether it was authorized. An AI assistant helps summarize diffs into plain language and suggests likely blast radius, but it doesn’t “auto-fix” by default. Realistically, the value is strongest for small-to-mid teams that keep getting surprised by “nothing changed” incidents.