PRE-DEPLOYMENT SECURITY BETA
Catch the risk.
Before production.
Scan your infrastructure config for dangerous defaults. Get deterministic findings, evidence, and local AI-assisted remediation — before changes ship.
Last scan findings
—awaiting scan
Run your first analysis
Critical risk
—
Immediate attention
High risk
—
Review before deploy
AI explainer
LOCAL
Ollama optional
Configuration scanner
Inspect infrastructure-as-code before it ships
deployment.yamlYAML
Config is analyzed by your local backend. No upload to a third-party service.
Risk assessment
Findings, evidence & remediation
AWAITING INPUT
Your next deployment,
under the microscope.
Run a scan to surface risky defaults, inspect the exact evidence, and get actionable remediation guidance.
Evidence-backed rules Severity-ranked results Local AI explanations
Try a sample configuration to see it in action.
DETECTION ENGINE
10 ACTIVE RULESWhat ChangeGuard checks
Container privileges Host networking Resource limits Public ingress Storage encryption Hard-coded secrets
Detection is deterministic; local AI is used only to explain findings. Terraform checks are currently heuristic-based.
SYSTEM STATUS
Local services
FastAPI backendlocalhost:8000Checking
Ollama runtimeqwen2.5:3bOptional
Local environmentChecked —