Skip to main content

NimbusGuard Documentation

Welcome to the official documentation for NimbusGuard, a multi-tenant Cloud Security Posture Management (CSPM) platform. NimbusGuard discovers resources in your cloud accounts, evaluates them against security controls, and produces findings with evidence and remediation guidance.

What you'll find here​

This documentation is organized into the following sections:

  • Getting Started — a high-level overview of the platform and its architecture.
  • Cloud Onboarding — how to connect AWS and Azure accounts.
  • Controls — built-in controls, writing custom controls with OPA/Rego, and the Control Specification.
  • API Reference — authenticating and calling the NimbusGuard API.

:::info Work in progress NimbusGuard documentation is under active development. Pages marked with ⚠️ contain placeholder content that will be replaced with production material. :::

Platform at a glance​

NimbusGuard is composed of three independent services:

ComponentRole
Platform (backend)System of record: auth, RBAC, organizations, cloud accounts, inventory, findings, controls.
Web app (frontend)The user interface for dashboards, inventory, findings, and policies.
Evaluation EngineA stateless service that decides PASS/FAIL of a resource against a control.

Continue to Getting Started → Platform Overview to learn how these fit together.