If you're a solo dev running your own AWS account with no security team, you've probably had this thought: is my IAM setup actually fine, or did I just get lucky? Plexavo exists to answer that for people in that exact position, not for teams that already have Wiz. What it does
pip install plexavo
plexavo scan --profile prod --report-html Scans IAM, S3, EC2, and networking for misconfigurations and privilege escalation paths. Returns a 0-100 score and a plain-English report: what's wrong, what an attacker does with it, the exact command to fix it. Runs on your own local credentials zero telemetry, nothing leaves your machine.
A RESULT OF A REAL FINDING - https://plexavo.com/sample-report Why it's deterministic, not AI
Detection is pure Python/boto3 no model decides what counts as a finding. A security scanner that hallucinates a finding doesn't just get something wrong, it gets uninstalled and never trusted again. There's an optional AI layer (your own API key) that rewrites findings into plainer language, but it never decides what's flagged, and it's fully opt-in.
Try it, break it, tell me
Run it against your own account I'd rather hear what it flagged (or where it broke) than get a star.
Contribute issues and PRs are genuinely welcome, it's early (v0.1.2) and there's a lot still to build.
Review the code deterministic checks mean you can actually audit what it's doing, not just trust it.
Contact me directly if you want to talk about it happy to answer anything.