I scanned a Terraform setup and found a hidden risk that didn’t trigger any alerts

I’ve been exploring Terraform security recently and decided to scan a real setup.

At first glance, everything looked normal.

No errors. No warnings. Infrastructure running perfectly.

But when I looked deeper, I found something unexpected.

Not just obvious issues like public resources — but a misconfiguration that could silently expose data without breaking anything.

That’s what surprised me the most:

Most infrastructure risks don’t crash your system — they stay invisible.

So I built a small tool to help surface these issues automatically.

It scans .tf files and generates a report showing security, architecture, and compliance risks.

It runs 100% locally. No files are uploaded.

I’m still early, so I’d really appreciate feedback from people working with AWS or Terraform.