TrustFix is a machine identity security platform designed to detect and remediate misconfigurations in non-human identities across cloud environments such as AWS, GCP, and Azure. The platform addresses the challenge of securing machine identities, which now significantly outnumber human users in cloud infrastructures and are frequently misconfigured, leading to potential security incidents. TrustFix continuously scans these environments for vulnerabilities like overly permissive OIDC trust policies, over-privileged IAM roles, custom RBAC drift, and exposed workload identity federation settings.
The platform operates by analyzing IAM roles and other machine identity configurations using 451 detectors that cover more than 24 distinct families of findings. When an issue is identified, TrustFix generates a validated Terraform fix and automatically opens a pull request on major code hosting platforms, including GitHub, GitLab, and Bitbucket. Each fix undergoes eight validation stages, including Z3 SMT formal verification, to mathematically prove that access is narrowed rather than widened. The platform also provides a proprietary TrustFix Confidence Score for every pull request, blocking any fix that scores below 50 and offering transparency for code reviewers. Fix alerts and pull requests are routed to engineers via Slack, and SOC2-ready audit evidence is packaged automatically.
TrustFix is delivered as a CLI and can be integrated into repositories as a GitHub Action for automated scanning and remediation. The platform utilizes AES-256-GCM encryption and maintains an audit trail designed for SOC2 compliance. It supports native integration with AWS, GCP, Azure, GitHub, GitLab, Bitbucket, and Slack, and its fix generation is code-aware, matching the patterns and conventions of the existing Terraform codebase. A second AI model independently reviews each fix to catch edge cases missed by the primary validation process.
The tool is intended for engineering teams responsible for securing machine identities in cloud environments, particularly those who need to automate detection, proof, and remediation of identity misconfigurations. TrustFix positions itself as an end-to-end remediation solution for non-human identity risk, with features built from research involving over 10,000 repositories and more than 54,000 workflows.
trustfix is a Security & compliance platforms product. It focuses on detecting and fixing OIDC trust policy misconfigurations for non-human identities in cloud environments. It is built as an open-source project for cloud security engineers. trustfix is open source under the MIT license. The product ships for the web and the command line.
It is developed by trustfix, and the product first shipped in 2026. Development happens publicly on GitHub with 4 commits in the last 90 days. PulseGate's similarity index finds few close equivalents — trustfix occupies a relatively distinct niche. Key capabilities include OIDC trust policy validation, policy intelligence engine, and Terraform PR automation.
Latest indexed changes and source events
trustfix.dev discovered by the PulseGate indexer
Other apps tracked under the same category.
