PolicyPatch

PolicyPatch is a web app (with a lightweight CLI) that enforces application security policies at the pull request and CI stages, focusing on the stuff teams actually break weekly: headers, TLS settings, auth/session flags, CORS rules, and risky framework defaults. Instead of generic SAST noise, it reads your repo’s infrastructure/app config (Kubernetes manifests, Helm, Terraform, Nginx/Envoy, Spring/Express/Django settings) and compares it to a versioned policy baseline you control. When drift appears, it posts a precise diff, explains impact in plain language, and offers an auto-generated fix PR. It also tracks “policy debt” over time so security can see which services repeatedly regress. This is a combination traditional + AI app: traditional rules for determinism, AI only to draft fixes and explanations (never to decide pass/fail).