Shieldly — AI-Powered Security Analysis for AWS

# Shieldly > Shieldly (shieldly.io) is AI-powered security analysis for AWS. It analyzes AWS IAM policies, resource-based policies (S3, Lambda, SQS, KMS, SNS, cross-account roles), CloudFormation templates, and AWS costs — surfacing over-privileged access, privilege-escalation paths, and misconfigurations with plain-English explanations and remediation steps. Free plan: 20 analysis units/day. A no-signup demo analyzer is available. User input is never logged or stored (one-way SHA-256 hash caching only). Shieldly ships as a web app, CLI (`@shieldly/cli` on npm), VS Code extension, GitHub Action, and CDK construct (`@shieldly/cdk-guard`). Shieldly is independent and not affiliated with Amazon Web Services. Full inline content (privilege-escalation reference + glossary, no extra fetches): https://www.shieldly.io/llms-full.txt ## Product - [Free IAM policy analyzer (no signup)](https://www.shieldly.io/app/iam): Paste an IAM policy, get an AI-powered risk score, findings, and fixes. - [Pricing](https://www.shieldly.io/pricing): Free 20 analysis units/day; Builder $19/mo; Pro $49/mo; Team $99/mo; Enterprise custom. - [FAQ](https://www.shieldly.io/faq): Units, privacy, daily limits, CI/CD usage. - [Integrations](https://www.shieldly.io/integrations): CLI, VS Code extension, GitHub Action, CDK Guard. ## Free Tools (no signup) - [IAM Policy Linter](https://www.shieldly.io/tools/iam-policy-linter): Client-side linter flagging wildcards, escalation actions, and risky patterns in IAM policy JSON. - [Trust Policy Explainer](https://www.shieldly.io/tools/trust-policy-explainer): Explains who can assume a role and flags confused-deputy risks in trust policies. - [S3 Bucket Policy Checker](https://www.shieldly.io/tools/s3-bucket-policy-checker): Checks whether an S3 bucket policy makes the bucket public or allows broad writes. - [CloudFormation IAM Checker](https://www.shieldly.io/tools/cloudformation-iam-checker): Extracts IAM resources from a CloudFormation template and