Infrastructure As Code Scanning With Policy Enforcement

via “configurable scanner composition and policy-driven security pipelines”

Open-source LLM input/output security scanner toolkit.

Unique: Supports configuration-driven scanner composition via YAML or code, enabling policy-driven security pipelines without custom orchestration code; supports conditional scanner execution and chaining, enabling complex security workflows; enables different policies per deployment/user without code changes

vs others: More flexible than hardcoded scanner sequences because policies are configuration-driven; more maintainable than custom orchestration code because logic is declarative; enables non-developers to modify security policies via configuration files