Cynative

Ask your infrastructure anything.

An open-source framework for building security agents with live, read-only access to your code, cloud and Kubernetes. Apache-2.0, one binary.

Cynative runs frontier models across GitHub, GitLab, AWS, GCP, Azure and Kubernetes as one system and returns verified answers. It writes and runs code in an ephemeral sandbox and queries APIs in parallel, and one question fans out across the whole stack. Each finding is cross-checked and traced to its origin.

Read-only by construction. Each call is gated and authorized before a credential is attached. One static binary in pure Go that runs entirely in your environment and keeps every result there.

45 built-in agents are working examples. An agent is a Markdown file: frontmatter for the name and description, a body for the methodology. Drop it in ~/.cynative/agents/ and run it by name. It inherits the same action gate, sandbox, approvals and audit log as freeform deep-research sessions. Agents compose: pipe one agent's findings into another with -p, and the piped input is fenced as data. What comes back is a finding with its evidence and its trace, in text you can route into any process your team already runs. The framework finds and verifies; remediation stays your team's decision, made with the evidence in hand.