audytx
audytx analyzes AWS infrastructure code and Terraform pull requests, presenting security and cost findings in GitHub and to coding agents.
What audytx is
audytx analyzes AWS infrastructure code and Terraform pull requests, presenting security and cost findings in GitHub and to coding agents. Its deterministic, non-AI engine is described as having 303 AWS Terraform checks and 27 cross-resource reasoning axes. The analysis models relationships such as invocation topology, encryption chains, network exposure, resource lifetimes, and IAM trust graphs. The GitHub App can add a pull request digest, inline review, and SARIF; it uses read-only repository contents permission and does not write repository code. An optional GitHub Actions step uploads a resolved Terraform plan over OIDC without shared secrets. A hosted MCP server exposes the engine to Claude Code, Cursor, and Codex, and its autofix tool can apply line-anchored fixes and rescan for up to three passes. audytx supports AWS and Terraform, plus CloudFormation through the hosted MCP server and GitHub App review. Free includes 100 scans per month. Plus is $20 a month for 200 scans; Pro is $100 a month for 1,000 scans and adds custom checks, organization-wide policy controls, and audit log export.
Good
- GitHub reviews include security findings, cost analysis, and SARIF.
- Hosted MCP server supports Claude Code, Cursor, and Codex.
- Source files are analyzed in memory and discarded.
- Free plan includes 100 scans per month.
Watch out
- Does not support Azure, GCP, or Pulumi.
- Offline CLI is Terraform-only.
- No SOC 2 or ISO 27001 certification yet.
- Plus costs $20 a month.
Who it suits
It suits teams reviewing AWS infrastructure changes in Terraform or CloudFormation and developers who want findings in GitHub or coding agents. The Free plan offers 100 monthly scans; larger scan allowances and additional controls are listed on paid plans.
Verdict
audytx combines infrastructure analysis with GitHub review and coding-agent access for AWS-focused workflows. Check its cloud and infrastructure-as-code limits, along with scan allowances, before choosing a plan.
Plans and prices
From audytx's own pricing page, checked 30 Sep 2001.
| Plan | Price | What it gives you |
|---|---|---|
| Plus | $20 a month | Unlimited repositories / files · Unlimited users · 200 scans / month · Priority Email support |
| Pro | $100 a month | Unlimited repositories / files · Unlimited users · 1,000 scans / month · Custom checks and org-wide policy controls · Audit log export · Priority Email support |
| Free | — | Unlimited repositories / files · Unlimited users · 100 scans / month · Email support |
The facts
Each one read from audytx's own pages, with the date it was checked.
What it does
- Autofix
- The MCP autofix tool applies line-anchored fixes, rescans, and loops for up to three passes.checked 30 Sep 2001
- Context analysis
- The engine models relationships between resources, including invocation topology, encryption chains, network exposure, resource lifetimes, and IAM trust graphs.checked 30 Sep 2001
- Detection engine
- The features page describes a deterministic, non-AI engine with 303 AWS Terraform checks and 27 cross-resource reasoning axes.checked 30 Sep 2001
- GitHub permissions
- The GitHub App uses read-only contents permission and writes pull request comments and reviews, check-run status, and SARIF uploads, but never repository code.checked 30 Sep 2001
- GitHub workflow
- The GitHub App posts a pull request digest with security findings and cost analysis, plus inline review and SARIF.checked 30 Sep 2001
- Limits
- The maker says it does not support Azure, GCP, or Pulumi, and its offline CLI is Terraform-only while CloudFormation support rolls out there.checked 30 Sep 2001
- MCP and agents
- The hosted MCP server exposes the engine to coding agents including Claude Code, Cursor, and Codex.checked 30 Sep 2001
- Purpose
- audytx analyzes AWS infrastructure code and Terraform pull requests, with findings presented to coding agents and in GitHub.checked 30 Sep 2001
- Security certification
- The maker states audytx does not yet hold SOC 2 or ISO 27001 certification.checked 30 Sep 2001
- Source handling
- Terraform files are loaded into memory for analysis and discarded; the maker says source contents are not stored in databases or logs.checked 30 Sep 2001
- Support
- The pricing page lists email support on Free and priority email support on Plus and Pro; listed response SLAs are 24 hours for Free and 12 hours for Plus and Pro.checked 30 Sep 2001
- Supported scope
- The maker says audytx supports AWS and Terraform, and also supports CloudFormation through its hosted MCP server and GitHub App review.checked 30 Sep 2001
The company
- Maker
- audytx is built and operated by founders Victor and Sabari of Rexstart Labs Pvt Ltd.checked 30 Sep 2001
Money
- Plan scans
- An optional GitHub Actions step uploads a resolved Terraform plan over OIDC without shared secrets.checked 30 Sep 2001
Alternatives to audytx
- 1
Aikido CSPM
Free planWebAPILinuxmacOS7.9From $300 a month - 2
Kyverno
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 3
Fairwinds Polaris
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 4
KloudSec IaC Security
Free planWebAPILinuxmacOS7.0From $79 a month - 5
kube-score
Free planWebLinuxmacOSSelf-hosted6.9Free plan - 6
Trivy
Free planLinuxmacOSSelf-hostedWindows6.9Free plan