Connecting…
CG
PRE-DEPLOYMENT SECURITY BETA

Catch the risk.
Before production.

Scan your infrastructure config for dangerous defaults. Get deterministic findings, evidence, and local AI-assisted remediation — before changes ship.

Local-first analysis Ollama-powered insights
Last scan findings
—awaiting scan
Run your first analysis
Critical risk
—
Immediate attention
High risk
—
Review before deploy
AI explainer
LOCAL
Ollama optional

Configuration scanner

Inspect infrastructure-as-code before it ships

01 / 02
deployment.yamlYAML
Config is analyzed by your local backend. No upload to a third-party service.

Risk assessment

Findings, evidence & remediation

STANDING BY
AWAITING INPUT

Your next deployment,
under the microscope.

Run a scan to surface risky defaults, inspect the exact evidence, and get actionable remediation guidance.

Evidence-backed rules Severity-ranked results Local AI explanations
Try a sample configuration to see it in action.
DETECTION ENGINE

What ChangeGuard checks

10 ACTIVE RULES
Container privileges Host networking Resource limits Public ingress Storage encryption Hard-coded secrets

Detection is deterministic; local AI is used only to explain findings. Terraform checks are currently heuristic-based.

SYSTEM STATUS

Local services

FastAPI backendlocalhost:8000Checking
Ollama runtimeqwen2.5:3bOptional
Local environmentChecked —