DriftGuard

DriftGuard is a web app (with a lightweight CLI agent) that detects and explains configuration drift between what you think is running and what is actually running in Kubernetes and container platforms. It continuously snapshots key runtime facts—image digests, env vars, mounted secrets, resource limits, sidecars, admission mutations, and node-level differences—then compares them to Git/Helm manifests and your approved baselines. When drift appears, it pinpoints the exact delta, likely cause (manual kubectl edits, auto-injectors, mutated webhooks, hotfix images), and the blast radius across clusters/namespaces. It also generates a safe rollback plan or a PR-ready patch to reconcile desired state. This is not a generic “monitoring” tool; it’s a drift auditor focused on preventing silent changes that lead to outages, compliance failures, and irreproducible deployments. It integrates with Slack/Jira and supports audit trails for regulated teams.