KloudSec IaC Security scans Terraform and CloudFormation pull requests for infrastructure misconfigurations before merge. Its GitHub App adds scan results as check runs and inline comments without requiring changes to CI pipelines. Analysis looks at relationships among resources, including network exposure, IAM permissions, encryption, and public access. Teams can configure critical findings to block merges until they are resolved or acknowledged. Findings include AI-generated corrected Terraform blocks or CloudFormation snippets. The platform maps nine frameworks, including CIS, PCI-DSS, SOC 2, ISO 27001, GDPR, HIPAA, NIST, DORA, and FFIEC. AWS is available, while Google Cloud Platform and Microsoft Azure are listed as coming soon. A 14-day free trial is offered without a credit card. The Free plan includes five code scans per month and email support; paid plans start at $79.00 USD per month. KloudSec describes its intended users as startups, small and medium-sized businesses, and enterprises.
Who it is for
It suits teams using Terraform or CloudFormation who want pull-request scanning and configurable merge controls. The maker describes it for startups, small and medium-sized businesses, and enterprises.
What is good
- Scans pull requests through a GitHub App.
- Posts findings as check runs and inline comments.
- Can block merges for critical findings.
- Offers a 14-day trial without a credit card.
- Maps nine security and compliance frameworks.
What to know first
- Free plan allows five code scans monthly.
- Google Cloud Platform and Azure are coming soon.
- Paid plans start at $79.00 USD per month.
Verdict
KloudSec focuses on infrastructure-as-code review within GitHub pull requests, with resource-level analysis and configurable merge blocking. Check its AWS availability and scan quotas against your cloud setup and workload.
KloudSec IaC Security plans and pricing
All plansCompared on infrastructure as code security software
- Free plan
- Yes
- Terraform analysis
- Yes
- CloudFormation analysis
- Yes
- Pull request scanning
- Yes



