DriftCanary

DriftCanary is a web app (with a lightweight CLI agent) that continuously detects configuration drift between what your deployment expects and what’s actually running in cloud environments. It snapshots key runtime signals—Kubernetes manifests, Helm values, Terraform state outputs, IAM policies, secrets references, and critical environment variables—then compares them to your Git/CI “source of truth.” When drift appears (manual hotfixes, emergency kubectl edits, console changes, unreviewed IAM tweaks), it flags the exact delta, the likely blast radius, and the fastest safe rollback path. It integrates into pull requests and release gates so teams can block risky deploys automatically or require approvals. This is not a full deployment platform; it’s a focused guardrail that reduces outages caused by silent changes. It’s realistic: teams already have CI/CD, but drift is still a common, expensive failure mode.