Interactive Demo

PosturaNet — Live Remediation Demo

Four synthetic AWS findings — S3 exposure, IAM privilege escalation, open SSH, and a live GuardDuty alert. Click Remediate on any finding to watch PosturaNet run the Z3 SMT safety check, generate a Terraform diff, and open a pull request — all against a read-only sandbox account with no real infrastructure at risk.

Read-only sandbox. No real AWS account is connected. The findings are synthetic; the Z3 verification runs the real solver; the Terraform diff and pull-request URL are illustrative. Apply for early access to connect your own account.

Sandbox Findings — 4 open

criticalaws.s3.001CIS 2.1.1

Overpermissive S3 bucket policy

The S3 bucket postura-demo-uploads has a bucket policy that grants s3:GetObject and s3:PutObject to Principal: *, making all objects publicly readable and writable.

account: 123456789012region: us-east-1MITRE: Exfiltration

highaws.iam.004CIS 1.16

IAM policy with wildcard actions

The managed policy postura-demo-app-policy grants iam:* on resource *, allowing any principal with this policy to create users, attach policies, or pass roles — a privilege escalation path.

account: 123456789012region: us-east-1MITRE: Privilege Escalation

criticalaws.ec2.001CIS 4.1

SSH open to the world (0.0.0.0/0:22)

Security group postura-demo-bastion-sg allows unrestricted inbound TCP access on port 22 from 0.0.0.0/0. Any internet host can attempt to SSH to instances in this group.

account: 123456789012region: us-east-1MITRE: Initial Access

highaws.guardduty.001CIS 1.10

GuardDuty: IAM credential recon from external IP

GuardDuty detected Recon:IAMUser/UserPermissions — API calls to iam:ListPolicies, iam:GetUser, and iam:ListRoles were made by postura-demo-cicd-role from 185.220.101.47 (Tor exit node). No MFA condition is enforced on the role's trust policy, enabling session hijack without a second factor.

account: 123456789012region: us-east-1MITRE: Discovery

Ready to run this against your real AWS account?

Apply for early access View pricing