patrick4urcloud

I developed and use an IA tool to save $$$ . https://github.com/pszymkowiak/rtk

Save your token on any IA code solution: rtk gain from a session:

  RTK Token Savings
  ════════════════════════════════════════
  Total commands:    650
  Input tokens:      3.9M
  Output tokens:     204.4K
  Tokens saved:      3.7M (96.2%)

  By Command:
  ────────────────────────────────────────
  Command                Count       Saved     Avg%
  rtk find                  38        2.1M    86.2%
  rtk git status            93        1.4M    85.4%
  rtk grep                  67       84.5K    50.3%
  rtk read                  63       49.9K    30.7%
  rtk ls                   121       14.5K    52.9%
  rtk git push             138        9.4K    91.3%
  rtk env                   28        8.4K    98.4%
  rtk run-test               9        6.4K    87.0%
  rtk summary               13        5.1K    70.3%
  rtk kubectl svc            9        3.0K    95.3%

Estimations:

  Tier             Quota Brut      Équivalent RTK
  Pro ($20)        6.0M tokens     ~24M tokens
  Max 5x ($100)    30.0M tokens    ~120M tokens
  Max 20x ($200)   120.0M tokens   ~480M tokens

After building kexa.io, the open-source solution to scan your clouds for misconfigurations, we’re excited to announce the premium version, powered by AI for remediation assistance.

When we first launched Kexa, our goal was to give developers and security teams a simple, unified, and Infrastructure-as-Code native tool to automate compliance and security checks across AWS, GCP, Azure, and more.

Thanks for the feedback we got on our last post on HN !

One piece of feedback stood out: while developers loved the IaC approach, many teams wanted a way to visualize their security posture, manage rules, and track remediation without diving into config files.

That’s why we built the premium version.

We added a web interface to:

        Visualize your entire multi-cloud security posture from a single web interface.  

        Manage your rules through UI & edit with our no-code rule builder. 

        AI Remediation assistance with clear insights based on CIS benchmarks and Kexa rules. 

  

Please support us by giving a star to the kexa.io open source project on Github !

Happy to answer any questions. What do you all think? How are you currently handling multi-cloud compliance and misconfiguration scanning at scale?

contact@kexa.io

After building kexa.io, the open-source solution to scan your clouds for misconfigurations, we’re excited to announce the premium version, powered by AI for remediation assistance.

When we first launched Kexa, our goal was to give developers and security teams a simple, unified, and Infrastructure-as-Code native tool to automate compliance and security checks across AWS, GCP, Azure, and more.

Thanks for the feedback we got on our last post on HN !

One piece of feedback stood out: while developers loved the IaC approach, many teams wanted a way to visualize their security posture, manage rules, and track remediation without diving into config files.

That’s why we built the premium version.

We added a web interface to:

  Visualize your entire multi-cloud security posture from a single web interface.  
  Manage your rules through UI & edit with our no-code rule builder. 
  AI Remediation assistance with clear insights based on CIS benchmarks and Kexa rules. 

Please support us by giving a star to the kexa.io open source project on Github !

Happy to answer any questions. What do you all think? How are you currently handling multi-cloud compliance and misconfiguration scanning at scale?

contact@kexa.io

We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone.

Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security posture. You can define your own rules or use common standards.

We are now actively developing our SaaS offering, planned for a beta release around June 2025. The key feature will be an AI-powered security administration agent specifically designed for cloud environments (initially targeting AWS, GCP, Azure). Instead of just reporting issues, this agent will aim to provide proactive, actionable recommendations and potentially automate certain remediation tasks to simplify cloud security management and hardening.

We'd love for the HN community to check out the open-source project on GitHub. Feedback on the concept or the current tool is highly welcome, and a star if you find it interesting helps others discover the project! If the upcoming AI-powered cloud security agent sounds interesting, we'd be particularly keen to hear your thoughts or if you might be interested in joining the beta (~June 2025).

thank you !!