Read-only, fail-closed security research agent for code and cloud infrastructure.
Features
- Multi-cloud and code-platform queries
- Enforced read-only policy
- Pre-call IAM authorization
- Fail-closed security model
- Per-turn JavaScript sandbox
Use Cases
- Cloud security investigations
- Permission and configuration audits
- Repository security research
- Kubernetes risk analysis
FAQ
Cynative is an open-source security research CLI for GitHub, GitLab, AWS, GCP, Azure, and Kubernetes. Every API call is resolved to IAM actions and authorized against a read-only policy before credentials are attached, failing closed when policy checks do not pass. Per-turn JavaScript runs in an isolated sandbox without host access. Core capabilities include: Multi-cloud and code-platform queries, Enforced read-only policy, Pre-call IAM authorization.
Common scenarios include: Cloud security investigations, Permission and configuration audits, Repository security research.
