← the swarm
CONFIG & IAC
DRIFT
Catches misconfiguration in code, before it reaches production.
4 findings in sample scan5 CWE classes
// WHAT IT HUNTS
- Exposed storage buckets
- Permissive CORS
- Debug endpoints in prod
- Information disclosure
- Unverified webhook signatures
- Missing security headers
// CWE COVERAGE
CWE-942CWE-732CWE-489CWE-209CWE-345
Inspects config & IaC — exposed buckets, permissive CORS, misconfigured secrets.
// IN THE SAMPLE SCAN
What DRIFT found in acme/api-gateway
HIGHPermissive CORS allows any originconfig/cors.js:8 · CWE-942DRIFTview →MEDPublic-read S3 bucket for user uploadsinfra/s3.tf:22 · CWE-732DRIFTview →LOWDebug endpoint enabled in production configconfig/app.js:5 · CWE-489DRIFTview →LOWVerbose stack traces leak file paths in prodconfig/express.js:14 · CWE-209DRIFTview →
Point DRIFT at your code.
Every scan runs the full swarm and returns a single report.