Cynative Security Research Agent - Ask your cloud anything without breaking prod. Read-only.
by•
Open-source AI CLI that answers security questions across cloud, code and runtime - GitHub, GitLab, AWS, GCP, Azure, K8s. Ask in plain language: "what's publicly exposed that shouldn't be?" or "can my CI escalate to cloud admin?".
Read-only by construction: every call is resolved to its IAM actions and authorized against a read-only policy before credentials attach. It can't modify your infra even if asked.
Unlike MCP tools, it writes JS in a sandboxed runtime - a script per turn, not one call.
Replies
Enforcing it rather than documenting it is the right call, and "failing closed on anything it can't classify" is the line in your comment that would make me trust this.
The follow-up I would want: what do I actually see when it fails closed? If an unclassifiable call gets skipped quietly, I get an answer that looks complete but is missing an account, a region or a resource type, and no way to know which. In a security context that is worse than an error, because I will act on it. If the run tells me plainly that three calls were refused and this answer therefore excludes X, that is something I can put in front of an auditor.
I ship something whose whole premise is that it cannot act, and the thing that surprised me is that enforcement is not what convinces people. Nobody believes a read-only claim from the description. They believe it when they can check it themselves in about a minute without reading your source. Pulling permission definitions from the providers daily is a strong answer and it is also invisible to the person deciding whether to point this at prod, so it is worth making that checkable from the outside rather than only true on the inside.
Cynative Security Research Agent
@sam_mcewen Thanks Sam! You get notified on a fail and the error comes back to the model also so it can decide to write a new script, the hard stop is repeated no-progress calls tripping a consecutive-failure ceiling, default 5. The final summary report you'll receive from the agent has the fails in context so it will tell you if the research task is not complete.