DEV Community: Sandipan Saha

For product Ideas use Claude AI. Get some product building ideas here - https://claude.ai/ And terraform security use - https://tfgaurd.com/

Sandipan Saha — Fri, 03 Apr 2026 17:23:16 +0000

https://tfgaurd.com/blog/cloud-security-tfgaurd

Sandipan Saha — Thu, 12 Mar 2026 11:58:22 +0000

Cloud Security Crisis: How tfgaurd.com Prevents 93% of Preventable BreachesCloud Security Crisis: How tfgaurd.com Prevents Preventable Breaches

Why 93% of cloud security breaches are preventable and how automated infrastructure validation prevents misconfigurations.

tfgaurd.com

terraform security

Sandipan Saha — Thu, 12 Mar 2026 11:57:14 +0000

check my product https://tfgaurd.com/blog/cloud-security-tfgaurd

Terraform Security Check

Sandipan Saha — Wed, 18 Feb 2026 17:01:35 +0000

I've been working on a side project called Policy Engine – a Terraform security policy checker that scans your IaC configs for misconfigurations before they hit production.
What it does:

Checks against 60+ security rules across critical, high, medium, and low severity levels
Supports 9 AWS resource types: S3, EC2, RDS, IAM, Lambda, Security Groups, ELB/ALB, CloudTrail, and KMS
Returns results instantly – just paste your Terraform code
REST API available so you can plug it into your CI/CD pipeline
Check history so you can track improvements over time

Why I built it:
Caught a misconfigured S3 bucket in prod one too many times. Wanted something lightweight I could use without spinning up a full Checkov/tfsec setup for smaller projects.
It's completely free to use – no credit card, no sign-up required for basic checks.
🔗 Try it here: https://policy-engine-c7mc.onrender.com/
Would love feedback from this community – what rules or resources would you want added next? Happy to answer any questions.

Policy Engine

Sandipan Saha — Sun, 15 Feb 2026 15:11:22 +0000

Terraform scripts security checks - http://150.230.131.166:5000/

Built a Policy Engine for DevOps – Free to Use, Would Love Your Feedback!

Sandipan Saha — Sat, 14 Feb 2026 12:19:57 +0000

Hey r/devops!

I've been working on a policy-engine app that helps automate infrastructure policy checks and compliance auditing. It's live and free to use, and I'd really appreciate if some of you could kick the tires and let me know what you think.

What does it do?
Think automated policy enforcement for your infrastructure. Upload Terraform configs, run security checks, track history, and get compliance reports. Built it with real DevOps workflows in mind.

Some features:

Policy checks for Terraform, OCI, and custom scripts
REST API with auth (integrate with your CI/CD)
Web dashboard to view check history and results
Monitoring setup with Prometheus/Loki/Grafana
No installation needed – just use it
Try it here: click

What I'm looking for:

Does this solve a problem you actually have?
What's missing or broken?
What integrations would make this useful for your team?
General feedback on UX, API, or features
Not open source (yet?), but completely free to use. I'm actively developing and your feedback will directly influence where this goes next.

Thanks in advance! Feel free to DM or comment with questions, bugs, or suggestions.