Freedom251 › Infrastructure as Code Security Software
audytx
What audytx is
audytx analyzes AWS infrastructure code and Terraform pull requests, presenting security and cost findings in GitHub and to coding agents. Its deterministic, non-AI engine is described as having 303 AWS Terraform checks and 27 cross-resource reasoning axes. It models resource relationships such as invocation paths, encryption chains, network exposure, resource lifetimes, and IAM trust graphs.
The GitHub App can add a pull request digest, inline review, and SARIF. It uses read-only repository contents permission and does not write repository code. An optional GitHub Actions step uploads a resolved Terraform plan over OIDC without shared secrets. The hosted MCP server exposes the engine to Claude Code, Cursor, and Codex; an autofix tool can apply line-anchored changes and rescan for up to three passes. The stated scope includes AWS and Terraform, plus CloudFormation through the hosted MCP server and GitHub App review. Free includes 100 scans per month; Plus costs $20 a month for 200 scans, and Pro costs $100 a month for 1,000 scans. The maker says it does not yet hold SOC 2 or ISO 27001 certification.
Who it suits
audytx suits teams reviewing AWS infrastructure code and Terraform pull requests in GitHub or through coding agents. CloudFormation users can use the hosted MCP server or GitHub App review, but not the offline CLI.
What it does well
- GitHub pull request reviews include findings and cost analysis.
- Hosted MCP server supports named coding agents.
- GitHub App does not write repository code.
- Plus and Pro list monthly scan limits and prices.
What to know first
- Azure, GCP, and Pulumi are not supported.
- Offline CLI is Terraform-only.
- SOC 2 and ISO 27001 certifications are not yet held.
Limits
Free allows 100 scans per month. Plus costs $20 a month and allows 200 scans; Pro costs $100 a month and allows 1,000 scans. The offline CLI is Terraform-only, and CloudFormation support is rolling out there.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | $0 / month · Unlimited repositories / files · Unlimited users · 100 scans / month · Email support | Free |
| Pro | $100 / month · Unlimited repositories / files · Unlimited users · 1,000 scans / month · Priority Email support · Custom checks and org-wide policy controls · Centralized suppression management · Audit log export | $100 a month |
| Plus | $20 / month · Unlimited repositories / files · Unlimited users · 200 scans / month · Priority Email support | $20 a month |
As audytx.com lists them, read 21 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://audytx.com/.
- Choose the Free, Plus, or Pro plan.
- Connect the GitHub App for pull request reviews.
- Optionally add the GitHub Actions step to upload a resolved Terraform plan over OIDC.
- Connect a coding agent through the hosted MCP server if desired.
Verdict
audytx focuses on AWS infrastructure review, with Terraform and limited CloudFormation support. Check its platform limits and certification status alongside the scan allowances and plan prices.
Questions
Is there a free plan?
Yes. The Free plan includes unlimited repositories and files, unlimited users, 100 scans per month, and email support.
What do the paid plans cost?
Plus is $20 a month and includes 200 scans per month. Pro is $100 a month and includes 1,000 scans per month, custom checks, org-wide policy controls, and audit log export.
Which infrastructure formats does audytx support?
The maker says it supports AWS and Terraform, as well as CloudFormation through its hosted MCP server and GitHub App review. It does not support Azure, GCP, or Pulumi.
What platforms and integrations are listed?
Platforms are API and web. The GitHub App supports pull request review, and the hosted MCP server works with Claude Code, Cursor, and Codex.
Does audytx store source contents?
The maker says Terraform files are loaded into memory for analysis and discarded, and source contents are not stored in databases or logs.
Who makes audytx?
It is built and operated by founders Victor and Sabari of Rexstart Labs Pvt Ltd.
Facts from audytx's own pages
- Autofix
- The MCP autofix tool applies line-anchored fixes, rescans, and loops for up to three passes. · audytx.com, 30 Sept 2026
- Autofix behavior
- Autofix applies only line-anchored safe replacements, rescans the result and loops for up to three passes. · audytx.com, 21 Oct 2026
- Board size
- The company record lists two directors, Sabari Sinha and Victor Sinha. · companyseekers.com, 21 Oct 2026
- Capital
- The public filing record lists authorised capital of ₹1 lakh and paid-up capital of ₹1 lakh. · companyseekers.com, 21 Oct 2026
- Changelog: CloudFormation
- The July 2026 v1.18 release added CloudFormation pull-request and MCP scanning, including SAM and CDK-synthesized output. · audytx.com, 21 Oct 2026
- Changelog: first stable release
- The June 2026 v1.0 release introduced the pull-request scanner, MCP server, Cost Sampler, Client IDs and security hardening. · audytx.com, 21 Oct 2026
- CloudFormation support
- CloudFormation scanning covers JSON, YAML short tags, SAM and synthesized CDK templates through GitHub App and MCP surfaces, while the offline CLI remains Terraform-only. · audytx.com, 21 Oct 2026
- Company incorporation
- The company record gives 25 May 2026 as the incorporation date. · companyseekers.com, 21 Oct 2026
- Company legal name
- A public Indian company record lists the legal name as Rexstart Labs Private Limited. · companyseekers.com, 21 Oct 2026
- Company registration
- The company record lists CIN U62099WR2026PTC294296 and ROC Kolkata II. · companyseekers.com, 21 Oct 2026
- Company status
- The company record describes Rexstart Labs Private Limited as active, private, Indian and non-government. · companyseekers.com, 21 Oct 2026
- Compliance references
- Findings can carry AWS FSBP, SOC 2 CC6, PCI-DSS and HIPAA references. · audytx.com, 21 Oct 2026
- Context analysis
- The engine models relationships between resources, including invocation topology, encryption chains, network exposure, resource lifetimes, and IAM trust graphs. · audytx.com, 30 Sept 2026
- Context reasoning
- The engine models invocation topology, encryption variants, network exposure, resource lifetimes and IAM trust graphs before deciding whether checks apply. · audytx.com, 21 Oct 2026
- Cost analysis
- Pull-request output includes cost opportunities such as gp2-to-gp3 changes, idle NAT gateways, oversized non-production resources and missing cost-allocation tags. · audytx.com, 21 Oct 2026
- Delivery stages
- The engine is offered at code-time through MCP, review-time through pull requests, and plan-time through resolved plan uploads. · audytx.com, 21 Oct 2026
- Detection engine
- The documentation describes a deterministic Rust engine with 306 checks and 27 cross-resource reasoning axes. · audytx.com, 21 Oct 2026
- GitHub App
- The GitHub App posts one pull-request comment with security and cost findings, supports inline suggestions, and can upload SARIF to GitHub Code Scanning. · audytx.com, 21 Oct 2026
- GitHub permissions
- Installation requests read-only repository contents, pull-request read/write, metadata read-only and code-scanning alert read/write permissions. · audytx.com, 21 Oct 2026
- GitHub workflow
- The GitHub App posts a pull request digest with security findings and cost analysis, plus inline review and SARIF. · audytx.com, 30 Sept 2026
- IAM analysis
- Its IAM engine evaluates effective permissions, wildcard expansion, trust relationships and multi-hop privilege-escalation attack paths. · audytx.com, 21 Oct 2026
- Licence
- The terms say audytx's check catalog, engine and associated software are proprietary property of Rexstart Labs Pvt Ltd. · audytx.com, 21 Oct 2026
- Limits
- The maker says it does not support Azure, GCP, or Pulumi, and its offline CLI is Terraform-only while CloudFormation support rolls out there. · audytx.com, 30 Sept 2026
- Listing status
- The filing record says the company is unlisted on a stock exchange. · zaubacorp.com, 21 Oct 2026