EntitleMap

EntitleMap is a web app (with optional CLI) that builds a continuously updated “effective permissions” graph across AWS, Azure, GCP, and Kubernetes. Instead of showing raw policies, it answers the questions security and platform teams actually ask: who can assume what, what actions are truly possible, and what the blast radius is if a credential is compromised. It ingests IAM configs, role bindings, group memberships, SCPs/permission boundaries, and common identity provider mappings, then computes effective access and highlights high-risk paths (admin-equivalent, privilege escalation chains, dormant but dangerous permissions). The product focuses on fast onboarding (read-only), clear remediation guidance, and exportable evidence for audits. It’s a combination traditional + AI app: deterministic permission computation plus AI-generated plain-English explanations and suggested least-privilege edits. Realistically, it will live or die on accuracy and trust—wrong results will get it rejected quickly.