Product · Features

Features

Explore the core components behind StackGuardian platform.

Observe

Inventories and remediation

See every cloud resource and IaC repository, then fix misconfigurations and codify what is unmanaged.

1See itInventories
Automated Discovery & ConversionAgents

Discovers resources across AWS, Azure and Google Cloud and generates OpenTofu or Terraform configurations from them.

Ask Your AssistantAgents

Ask Kyro, Claude, Copilot, Cursor or Gemini about drift, coverage and findings through the StackGuardian MCP server.

Intelligent Pattern Recognition

Reads naming conventions, tags and resource relationships to map dependencies, so the generated code mirrors the real architecture.

IaC Repository InventoryEarly access

Misconfigured OpenTofu and Terraform found in Git before it reaches the cloud.

Immediate Drift Detection

Detects drift between deployed resources and the generated code, so it can be reconciled early.

IaC Adoption Matrix

Shows how much of your infrastructure is under code and recommends the next steps toward full coverage.

2OptimizeRemediate & codify
Misconfiguration RemediationEarly access

Fixes for misconfigurations delivered as a patch you review and apply.

State File Generation

Creates and manages the Terraform or OpenTofu state for codified resources, so nothing is imported by hand.

Module-Aware Codification

Uses your private modules and internal standards to generate code that matches the patterns you already have.

Intelligent Grouping & Analysis

Groups discovered resources by application and dependency before codifying them, so the generated code lands in workflows that deploy together.

Guardrails from Day One

Applies StackGuardian policies during conversion, so newly codified infrastructure is compliant from the start.

Production-Ready from Day One

Codified infrastructure arrives as reviewed plans and policy-checked code, ready to run in a workflow.

Orchestrate

Deployments and audit

Ship changes through one path with policy checks, approvals and a full audit trail.

1Ship itRuns
Workflow Templates

Standardized workflows for OpenTofu and Terraform that automate provisioning, updates and lifecycle operations with guardrails built in.

Stack Templates

Compose templates into stacks, where the outputs of one workflow feed the next.

No-Code Policy Engine

Enforce compliance and security guardrails with SG Policy (Tirith) or OPA, with policy checks before every deployment.

Agents Ship Through the Same GatesAgents

Kyro and MCP agents act with your role. Runs, updates and deletes wait for approval, and Kyro never approves a run.

Reference Variables

Reuse outputs as inputs across workflows to enable modular, composable infrastructure pipelines.

Self-Service Speed

Launch compliant infrastructure in minutes without a ticket or IaC expertise.

2RecordAudit log
Workflow Groups

Organize stacks and workflows by team or domain with role-based access control.

Approvals & Audit Logs

Approvals and audit logs on every change: who approved what, on which plan, and when.

Operate

Day 2 and recovery

Day 2 operations, from drift checks to upgrades and rollbacks, and recovery to get back to a known-good state fast when something breaks.

1Operate itDrift & Day 2
Drift Detection

Detects drift between deployed resources and their code after every deployment, so the desired state stays visible.

Catch Drift

Scheduled drift checks with alerts.

Manage State

State and backends handled for every workflow.

Notifications

Failures, approvals and drift reach the right people.

2RecoverRollback & resilience
Discover what you run and what is at risk3 now · 1 early

Cloud inventory, marked managed, unmanaged or drifted
Misconfigurations by resource, account and region
Scheduled drift detection with alerts
Recovery readiness per application, against its SLAEarly access
Protect a recoverable copy of your configuration3 now · 1 early

State and sources of every run kept in your own storage
Codify unmanaged resources into OpenTofu or Terraform
Backup policies as code, with checks and approvals
Snapshots of resources nobody codifiedEarly access
Assess and fix what would break your SLA2 now · 2 early

Policies that block, warn or require approval
Approvals and audit logs on every change
Resilience policy pack: multi-AZ, deletion protection, backupsEarly access
Fixes delivered as a patch you reviewEarly access
Recover the infrastructure, then hand off the data2 now · 3 early

Recover a whole stack in dependency order
Review a plan before anything is applied
Roll back to a previous runEarly access
Recover into another region or accountEarly access
Start data restores in your backup platformEarly access
Prove it works before you need it2 now · 2 early

Scheduled checks that alert when something can’t be recovered
Run history and audit logs for every restore
Scheduled recovery drillsEarly access
Audit evidence, for example for DORAEarly access
Give every agent change a way backAgents2 now · 1 early

Kyro and MCP agents act with your role, behind approvals
Agent skills work through the same guardrails
A restore point before every agent changeEarly access
Early accessFounding 50 design partners get these first.Apply to join →

Ready to simplify your IaC?

Empower your teams with secure self-service deployments.

Free Forever ○ No Credit Card Required