Show HN: Plexavo – simplest way to find AWS misconfigurations and attack paths

Category: security

Tags: aws, cloud-security, misconfiguration, cli, python

Score: 5.8/10 (Innovation: 5, Technical: 5, Documentation: 7, Utility: 6)

Plexavo is a Python CLI tool that audits AWS accounts for security misconfigurations using your local credentials, producing a 0-100 score and plain-English HTML/PDF reports with remediation commands. It combines deterministic boto3 checks with optional Claude-based narration, and offers a Claude Code plugin integration. The project stands out for its local-first, no-AI-by-default design and beginner-friendly contribution model.

Target audience: cloud engineers, devops, security engineers, backend devs

Repository: https://github.com/plexavo/Plexavo · Python · AGPL-3.0 · 11 stars

View on Hacker News