Now in pilot - free to use

Know your blast radius
before you deploy

OpStack analyses your Terraform plans against live AWS and Azure infrastructure to surface what breaks, what depends on it, and what the actual risk is - before you hit deploy.

Start for free Browse risk rules →

No credit card. 1 project, 2 environments, 10 analyses/month on the free plan.

opstack - analysis · azure-prod plan_20240417.json
1
Critical
1
High
1
Medium
0
Low
Critical
azure_subnet.app_subnet
Deletion will evict 3 AKS node pools and 6 network interfaces. Cluster workloads will be unreachable.
High
azure_nsg.api_nsg
Removal leaves 4 virtual machines with unrestricted inbound access on all ports.
Medium
azurerm_public_ip.nat_gateway
NAT gateway will lose outbound internet connectivity. Dependent services may fail to reach external endpoints.
8 resource changes analysed · Azure Central India ⚠ Deployment not recommended
How it works
Three steps to
deployment confidence

Upload a plan. OpStack queries your live infrastructure, builds a dependency graph, and tells you exactly what will break.

01
Connect your environment

Point OpStack at your AWS account or Azure subscription. Read-only access only - OpStack never modifies anything. Supports cross-account IAM roles and Azure Service Principals.

02
Upload your Terraform plan

Export your Terraform plan as JSON and upload it through the OpStack dashboard. OpStack parses every resource change - creates, updates, replaces, and destroys.

03
Review findings before apply

OpStack cross-references live infrastructure state against your plan, applies 40+ risk rules, and returns a prioritised finding list - critical to low - with remediation guidance for each.

Features
Built for engineers
who've been burned before

Every rule in OpStack exists because someone, somewhere, deleted something they shouldn't have.

Blast radius mapping

OpStack builds a live dependency graph of your infrastructure. When a resource is marked for deletion, it traverses every downstream dependency - subnets, clusters, databases, services - and surfaces everything that will be affected.

AWS + Azure
40+ risk rules

VPC deletion, subnet in-use detection, NSG removal, NAT gateway dependency, AKS node pool eviction, Key Vault access loss, private endpoint breakage, DNS zone deletion - and more. Every rule is grounded in real production failure patterns.

Azure-first
Live state awareness

Static plan analysis misses things. OpStack queries your actual cloud APIs at analysis time to understand what's currently deployed - catching dependencies that don't exist in your Terraform state but exist in reality.

Real-time
Dependency graph visualisation

See your infrastructure as a directed dependency graph - not just a flat list of resources. Understand which services are upstream and downstream of any change, and why the blast radius is what it is.

Visual
Risk scoring and prioritisation

Not all findings are equal. OpStack scores each finding as Critical, High, Medium, or Low based on the actual impact - data loss potential, service downtime, blast radius size - so you know what to fix first.

Prioritised
CI/CD ready

OpStack fits naturally into your existing deployment workflow. Review findings before applying any plan - whether you're running changes manually or as part of a larger release process.

Workflow
Rule coverage by service
Azure Networking
95%
Azure Compute / AKS
88%
Azure Data / Storage
82%
Azure Security / IAM
78%
AWS Networking
90%
AWS Compute / ECS
80%
Pricing
Start free.
Scale when ready.

The free plan gives you real value - not a crippled demo. Pro unlocks the depth you need for serious infrastructure work.

Free
$0
forever
  • 1 project
  • 2 environments (AWS or Azure)
  • 10 analyses per month
  • Networking blast radius rules - VNet, subnet, NSG, NAT, load balancer
  • Dependency graph visualisation
  • Risk scoring (Critical / High / Medium / Low)
  • Data, identity, and security rules
  • Unlimited projects and environments
  • CI/CD pipeline integration
Get started free
Get started
Stop guessing.
Know your blast radius.

Free plan. No credit card. Upload your first Terraform plan in under two minutes.

Create free account →

Already have an account? Sign in