Skip to main content

Platform Overview

NimbusGuard is a multi-tenant CSPM platform. It discovers resources in a customer's cloud (AWS in production today, Azure in progress), evaluates them against security controls, and generates findings with evidence and remediation.

End-to-end flow​

AWS  →  Platform (boto3 collectors)  →  normalized resource
     →  Evaluation Engine (PASS/FAIL + evidence)
     →  Platform turns the result into a Finding
     →  Web app shows dashboards, inventory, and findings

Boundary rules​

  • The web app never talks to the Evaluation Engine directly — everything goes through the Platform.
  • The Platform is the only caller of the Engine, using a shared secret (not tenant API keys).
  • The Engine never touches AWS or a database: it receives already-normalized configuration and responds.

:::warning Placeholder ⚠️ Expand this page with onboarding prerequisites, supported regions, and a first-scan walkthrough. :::