Automated · Delivered within 24 hours

Free infrastructure
security audit.

Submit a GitHub repository. lra scan runs Trivy and Checkov across your entire codebase — infrastructure, containers and pipelines. Complete PASS/FAIL report with remediation guidance, delivered by email.

🔍

Vulnerability scan

Trivy detects CVEs in container images and IaC files.

⚙️

IaC analysis

Checkov audits Terraform, Kubernetes and Dockerfile configurations.

📋

Remediation report

AI-generated findings with severity classification and fix guidance.

Request your free audit

Need help implementing the findings? Remediation support starts at €249.

Sample output

What your report looks like

Illustrative scan output on a repository similar to lra-cloud-ops/aws-terraform-devops

$ lra scan --github org/repository

→ Cloning repository...

→ Detecting stack: terraform, kubernetes, docker

TRIVY — Container & IaC vulnerabilities

✓ Critical: 0

✓ High: 0

⚠ Medium: 2 → auto-documented

CHECKOV — IaC misconfigurations

✓ Terraform: 47/50 passed

✓ Dockerfile: 8/8 passed

⚠ K8s manifests: 3 warnings

✓ SCAN COMPLETE — PASS · 4.2s

Common questions

Is the audit really free? +

Yes. No credit card, no commitment. You receive the full report and decide what to do with it.

Do you support private repositories? +

Yes. For private repos, we request temporary read access via a GitHub token you control and can revoke after the audit.

How long does it take? +

The automated scan runs within minutes. The full report with AI-generated remediation guidance is delivered within 24 hours.

What technologies does lra scan support? +

Terraform, Kubernetes manifests, Dockerfiles, GitHub Actions workflows, AWS CloudFormation and Ansible. Container image scanning included.

What happens after I receive the report? +

Nothing, unless you want it to. If the findings are useful and you need help implementing the fixes, we can discuss an engineering engagement.

Free infrastructuresecurity audit.