Launching 2026

FaridEx maps AWS IAM trust chains as a graph, ranks every exploitable route to admin, and drafts least-privilege fixes. A human approves each change.

Scroll

One role connects both paths.

A sample finding, traced from exposure to severance. Synthetic data.

  1. Exposure

    ec2:i-09a8f

    An internet-facing instance runs IMDSv1, which exposes an SSRF vector.

  2. Pivot

    Role/ProdDataPipeline

    The instance assumes a role that two separate attack paths already share.

  3. Crown jewel

    s3:prod-fin-ledger

    The role can write to the finance ledger. Blast radius: 14 downstream assets.

  4. Severance

    iam:PassRole

    FaridEx scopes the wildcard to one ARN. Both paths close once a human approves the diff.

Exploitable attack paths

Yen’s k-shortest paths over sts:AssumeRole and iam:PassRole edges rank the routes an attacker would take.

Native MCP server

Query the live security graph from Claude Desktop, Cursor, or your own agents over JSON-RPC.

Reviewable remediation

AI drafts each diff. You read it, approve it, and the decision is written to an audit log.

One email when FaridEx opens.

No newsletter. No second email.