Cynative: research agent for your code/cloud/k8s infra - read-only
Source Reddit Cybersecurity
Discussion
Cynative is an open-source security research agent designed to analyze code, cloud environments, and Kubernetes infrastructure in a read-only manner. It operates within an ephemeral sandbox with guardrails that enforce read-only access, gating every call before credentials are attached across multiple cloud platforms and Kubernetes services. The tool is intended for security research and does not represent a vulnerability or active threat. There is no indication of exploitation or vulnerability associated with Cynative itself.
r/cybersecurity (opens in a new tab)u/CynativeTeam0 points0 comments
We just open-sourced Cynative, a security research agent (https://github.com/cynative/cynative)
It runs code in an ephemeral sandbox and guardrails enforce read-only - every call is gated before credentials are attached, across AWS, GCP, Azure, EKS/GKE/AKS, self-managed Kubernetes, GitHub and GitLab.
Our background: my co-founder and I founded a startup that Palo Alto Networks acquired, where we spent 10+ years building cloud security products.
Happy to answer questions on the enforcement model, sandbox isolation, or anything else. Feedback welcome.