Modern cloud environments are a complex web of identities, roles, and permissions. PrivilegePredict provides total visibility and proactive defense across AWS IAM and Azure Entra ID. By modeling your cloud as a high-fidelity Identity Graph, we don't just find risks—we predict them.

• Phase 1: Visibility: Deep Graph Visualization of User-to-Resource relationships.
• Phase 2: Intelligence: Dynamic analysis of used vs. unused permissions + Least-Privilege synthesis.
• Phase 3: Prevention: Hard-stop CI/CD Guard blocks risky IAM changes in Terraform/CloudFormation.

Interactive Cytoscape-powered maps that expose how a single compromised "Unprivileged Role" can traverse the graph to gain AdministratorAccess.

• Shortest Path Detection: Instantly find the most dangerous escalation routes.
• Multi-Cloud Support: Direct ingestion and normalization of AWS and Azure identities.

A dual-layer scoring engine that combines deterministic security rules with machine learning readiness.

• Rule Engine: Flags sensitive actions (iam:PassRole, sts:AssumeRole) with weighted context.
• Path Simulation: Ephemerally injects proposed changes into the graph to see if they create new paths to high-value nodes.

Stop misconfigurations in the Pull Request.

• Terraform Integration: Native parsing of terraform plan -json.
• GitHub Actions Ready: Automatically comments on PRs with risk scores and blocks "Hard Fail" violations.
• Audit Log: Full archival of every IAM evaluation for compliance (SOC2/ISO27001).

A premium React-based command center for security operations.

• Risk Heatmap: Live KPIs on total identities, high-risk counts, and over-permissiveness.
• Live Alert Feed: Real-time streaming detection of high-risk IAM changes across your estate.
• SaaS First: Built with a multi-tenant data model and configurable risk thresholds.

graph TD
    A[Cloud Environments: AWS/Azure] --> B[Log Ingestors / Connectors]
    B --> C[Identity Normalizer]
    C --> D[(Neo4j Graph Database)]
    D --> E[FastAPI Backend Engine]
    E --> F[React Pro Dashboard]
    
    G[CI/CD: GitHub Actions] --> H[PrivilegePredict Guard CLI]
    H --> E
    E --> I[Graph Simulation Engine]
    I --> J[Decision Engine]
    J --> G

The easiest way to experience the full platform:

docker-compose up -d

Visit the Executive Dashboard at http://localhost:5173.

1. Backend (Python 3.11+)

cd backend
pip install -r requirements.txt
uvicorn app.main:app --reload --port 8000

2. Frontend (Vite + React)

cd frontend
npm install
npm run dev

To protect your cloud, add the PrivilegePredict Guard to your GitHub Actions:

- name: PrivilegePredict Guard
  run: |
    python backend/cli/guard_cli.py \
      --plan plan.json \
      --tenant ${{ secrets.PP_TENANT_ID }} \
      --gh-repo ${{ github.repository }} \
      --pr-number ${{ github.event.pull_request.number }}
  env:
    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

PrivilegePredict is released under the MIT License.