If you're a solo dev running your own AWS account with no security team, you've probably had this thought: is my IAM setup actually fine, or did I just get lucky? Plexavo exists to answer that for people in that exact position, not for teams that already have Wiz.

What it does

pip install plexavo

plexavo scan --profile prod --report-html

Scans IAM, S3, EC2, and networking for misconfigurations and privilege escalation paths. Returns a 0-100 score and a plain-English report: what's wrong, what an attacker does with it, the exact command to fix it. Runs on your own local credentials zero telemetry, nothing leaves your machine.