DriftWatch

DriftWatch is a web app (with optional lightweight desktop agent) for security monitoring that focuses on one ugly reality: most breaches start with small, untracked changes. It continuously compares your current security-relevant configurations against an approved baseline across cloud accounts, endpoints, and key SaaS tools, then alerts only when the drift is meaningful. Instead of dumping raw diffs, it maps changes to risk (e.g., public bucket, weakened MFA, new admin grants), suggests the fastest rollback path, and creates an audit trail you can hand to compliance. This is a combination traditional + AI app: traditional collectors and rules for deterministic detection, plus AI to summarize diffs, cluster related changes, and draft remediation steps. It’s not a full SIEM replacement; it’s a focused layer that reduces “unknown change” chaos and speeds containment.