.svg)
Operate · Infrastructure as code
Fix the misconfigurations that are live in your cloud first.
Heeler matches each IaC finding to the cloud resource it built, ranks it, and sends it to its owner with the steps to fix it.
Matched to the resource it built
Tied to the live cloud resource.
acme/infra · modules/db/security.tf:14
- definition
cidr_blocks = ["0.0.0.0/0"] - live resource
sg-0a41 on orders-db - service
orders-api · Tier 1
Terraform, OpenTofuCloudFormationPulumiKubernetesDockerfiles
Network exposureAccess controlEncryptionLoggingKubernetes workloadsDockerfilesSecrets in configSecure defaults
sg-0a41 open ingress · orders-db
- Open in the definition
- Most tools stop here
- Live resource matchedsg-0a41
- Internet accessibleConfirmed
- Tier 1 · Production
URGENTFix within 14 days
Exposure in code only? Capped at Plan.
Heeler sends the owner the fix
The recommended change and How to Fix steps, in a ticket routed to the owning team.
sg-0a41 open ingress · modules/db/security.tf:14
- before
cidr_blocks = ["0.0.0.0/0"] - recommended
cidr_blocks = ["10.0.0.0/16"]
- How to FixSteps from the rule
- Owner@payments-team
- TicketJira, Linear or GitHub
- SLO14 days, or override
Your team makes the fix in code.
Heeler verifies the fix and closes it
Fixed in code, on the owner's SLO.
- OpenIn the definition
- FixedChanged in code
- ClosedVerified by Heeler
@payments-teamSLO 14 days
Prevent
Stop misconfigurations before they deploy.
Routed by workflow.Autotriage→Ticket to the owner→Fixed in code→Next scan confirmsAutonomous Operations →More in Operate
