I ran a Terraform setup that looked completely fine.
No errors.
No warnings.
Everything deployed successfully.
Then I scanned it.
Score: 18/100.
Here’s what it found:
– Public S3 bucket
– Open SSH (0.0.0.0/0)
– Public database exposure
– HTTP instead of HTTPS
The weird part?
Nothing was broken.
Everything worked exactly as expected.
That’s what made it uncomfortable.
Most cloud issues don’t cause failures —
they silently expose your infrastructure.
I’ve been building a tool to surface these risks directly from .tf files.
This is a real output:
https://stageauto-site.netlify.app/report-example.pdf
How are you catching these issues before production?