IAMTripwire

IAMTripwire is a web app (with optional Slack/Teams integration) that continuously audits cloud identity and access in AWS and GCP, focusing on the fastest-moving risk: over-permissioned roles, stale access keys, and privilege escalation paths. Instead of dumping hundreds of findings, it builds an “attackable path” view: which principal can reach which sensitive resource and how, based on effective permissions and common escalation techniques. It then generates safe, minimal remediation steps (least-privilege policy diffs, role split suggestions, and key rotation tasks) and tracks completion. This is a combination traditional + AI app: traditional graph analysis and policy evaluation, with AI used to explain findings in plain language and propose least-privilege policy edits that engineers can review and apply. The goal is fewer alerts, faster fixes, and measurable reduction in blast radius.