DriftLock

DriftLock is a web app (with optional CLI) that continuously detects and enforces security-critical configuration drift across CI/CD, cloud, and Kubernetes. Instead of dumping alerts, it maps drift to concrete risk: what changed, who/what changed it, what policy it violates, and the fastest safe rollback path. It integrates with GitHub/GitLab, Terraform/CloudFormation, Kubernetes admission logs, and major cloud audit trails to build a timeline of change events and correlate them to deployments. The MVP focuses on a narrow but painful slice: preventing insecure drift in production by auto-opening PRs to restore desired state, gating releases when drift exceeds thresholds, and generating audit-ready evidence. This is not a “replace your CSPM” pitch; it’s a drift-focused layer that plugs into existing tools and reduces the time between misconfiguration and remediation.