DriftGuard

DriftGuard is a web app (with optional CLI agent) for monitoring and controlling configuration drift across cloud infrastructure and SaaS admin settings. It continuously snapshots “known-good” states (IAM policies, security groups, Kubernetes manifests, critical SaaS toggles) and alerts when something changes outside approved workflows. The control layer lets teams auto-remediate low-risk drift (e.g., reopen a required firewall rule, revert a disabled audit log) or route high-risk changes into a lightweight approval queue. This is not a full-blown SIEM or observability suite; it’s a focused drift detector with tight scope, fast setup, and clear ownership. An AI layer summarizes changes in plain English, estimates blast radius, and suggests rollback steps, but the product’s value is still the deterministic diff and enforcement. Pricing is per environment/account with a small-team tier to reduce procurement friction.