I Built an Open-Source AWS Cloud Security tool for solo devs & founders !

A developer released Plexavo, an open-source AWS cloud security scanner designed for solo developers and founders. The tool scans IAM, S3, EC2, and networking for misconfigurations and privilege escalation paths, providing a 0-100 score and plain-English remediation commands. It is deterministic, using pure Python/boto3 for detection, with an optional AI layer for rewording findings.

If you're a solo dev running your own AWS account with no security team, you've probably had this thought: is my IAM setup actually fine, or did I just get lucky? Plexavo exists to answer that for people in that exact position, not for teams that already have Wiz. What it does pip install plexavo plexavo scan --profile prod --report-html Scans IAM, S3, EC2, and networking for misconfigurations and privilege escalation paths. Returns a 0-100 score and a plain-English report: what's wrong, what an attacker does with it, the exact command to fix it. Runs on your own local credentials zero telemetry, nothing leaves your machine. A RESULT OF A REAL FINDING - https://plexavo.com/sample-report https://plexavo.com/sample-report Why it's deterministic, not AI Detection is pure Python/boto3 no model decides what counts as a finding. A security scanner that hallucinates a finding doesn't just get something wrong, it gets uninstalled and never trusted again. There's an optional AI layer your own API key that rewrites findings into plainer language, but it never decides what's flagged, and it's fully opt-in. Try it, break it, tell me Run it against your own account I'd rather hear what it flagged or where it broke than get a star. Contribute issues and PRs are genuinely welcome, it's early v0.1.2 and there's a lot still to build. Review the code deterministic checks mean you can actually audit what it's doing, not just trust it. Contact me directly if you want to talk about it happy to answer anything.