imhotep

Offline cloud snapshot analysis from the terminal. Analyze recorded cloud snapshots for IAM posture, storage exposure, network exposure, container posture and misconfigurations — without touching live provider APIs.

Guarantees

  • Offline by design — reads recorded snapshots only; live provider collection is refused honestly
  • Secret material is redacted at collection time and never stored or printed
  • Deterministic rule engine (IAM/STG/NET/DBE/CNT/SEC) across the snapshot surface
  • Risk scores are transparent: severity_weight × confidence × exposure, capped at 100

Install

git clone --depth 1 https://github.com/QYVORA/qyvora-imhotep && cd qyvora-imhotep && go build ./cmd/imhotep

Usage

  • imhotep assess --sim
  • imhotep snapshot --output snapshot.json
  • imhotep assess --snapshot snapshot.json
  • imhotep providers
  • imhotep findings
  • imhotep report -f json --out report.json