Policy As Code Python Packages

pulumi-policy

Pulumi's Policy as Code SDK, CrossGuard. Define infrastructure checks in code to enforce security, compliance, cost, and other practices, enforced at deployment time.

shadow-diff

Behavior contracts for AI agents

cleancloud

Shift-left cloud hygiene for AWS, Azure & GCP - deterministic read-only waste detection with no agents, no telemetry, safe for regulated environments.

assay-it

CI-native evidence compiler for agent systems: MCP policy enforcement, evidence receipts, Trust Basis claims, and reviewable artifacts.

opal-common

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

opal-client

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

actra

Actra - control what runs before it runs, controls what actions are allowed before they execute. Evaluate policies across APIs, workflows and AI agents in real time.

opal-server

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

resotolib

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

agent-aegis

LLM guardrails & prompt injection detection for Python. Auto-instruments LangChain, CrewAI, OpenAI, LiteLLM + 8 more frameworks. PII masking, toxicity detection, policy CI/CD. One line, zero code changes.

prodcycle

Multi-framework policy-as-code compliance scanner for infrastructure and application code. Evaluates Terraform, Kubernetes, Docker, and source code against SOC 2, HIPAA, and NIST CSF.

resoto-plugin-aws

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-cleanup-aws-alarms

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-onprem

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-example-collector

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-gcp

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-protector

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-cleanup-untagged

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-vsphere

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-digitalocean

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-slack

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-github

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-cleanup-aws-loadbalancers

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-cleanup-expired

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.