All featuresFeature Auto-Remediation

Auto-Remediation Detect. Approve. Fix. Verify.

Dedups agents fix AWS misconfigurations automatically using AI-generated, human-validated scripts - with a dry run before touching any live infrastructure.

30+auto-fixable checks
<5 minaverage fix time
Rollbackon failure
15 minutes to connect. No credit card. No sales call.

Auto-Remediation at a glance

What it does
Dedups agents fix AWS misconfigurations automatically using AI-generated, human-validated scripts - with a dry run before touching any live infrastructure.
In one line
Dry run, approve, fix - with rollback if anything goes wrong.
Human control
The dry run comes first. Every time.
Setup
About 15 minutes, read-only access, no credit card.
Pricing
Free first scan; Pro from $99/month; Enterprise from $10,000/year. See pricing.
The problem

Misconfigurations pile up faster than your team can fix them.

The backlog only grows. Each fix is a console click somebody has to find time for, so the easy ones get done and the awkward ones roll into next quarter. Nobody is ignoring security - there is just more of it than there are hours.

How it works

Four steps to done.

  1. 01Real-time Detection

    Continuous scanning across your AWS environment for misconfigurations, policy violations, and cost anomalies.

  2. 02Dry Run

    Simulates every change before touching live infrastructure - a full diff of what will happen before anyone approves.

  3. 03Approval Workflows

    Sends dry-run reports to approvers via Slack, Jira, or email with a single-click approve or reject action.

  4. 04Rollback on Failure

    Post-change health checks confirm success. Rolls back automatically and notifies your team if verification fails.

Capabilities

Everything included.

30+ auto-fixable CSPM checks out of the box

Full diff shown before any change touches production

Approval workflows via Slack, Jira, or email

Rollback with instant team notification on failure

Partial remediation support for checks requiring manual steps

1,000+ real-world remediation executions validated

Machine speed, human judgement

The dry run comes first. Every time.

Every fix is simulated and shown as a full diff before anyone approves it. Nothing touches live infrastructure until someone on your team says yes, and a fix that fails its own health check afterwards rolls back and tells you what happened.

  • It will not change anything you have not approved. Auto-approval is off unless you turn it on.
  • More than 30 checks fix themselves today. The rest are flagged with the manual steps attached, not quietly skipped.
  • Ten of the fixes need a person before or after the automation. The approval screen says which, before you click.
Straight answers

Common questions about Auto-Remediation.

Dedups agents fix AWS misconfigurations automatically using AI-generated, human-validated scripts - with a dry run before touching any live infrastructure. Dry run, approve, fix - with rollback if anything goes wrong.

1. Real-time Detection: Continuous scanning across your AWS environment for misconfigurations, policy violations, and cost anomalies. 2. Dry Run: Simulates every change before touching live infrastructure - a full diff of what will happen before anyone approves. 3. Approval Workflows: Sends dry-run reports to approvers via Slack, Jira, or email with a single-click approve or reject action. 4. Rollback on Failure: Post-change health checks confirm success. Rolls back automatically and notifies your team if verification fails.

It will not change anything you have not approved. Auto-approval is off unless you turn it on. More than 30 checks fix themselves today. The rest are flagged with the manual steps attached, not quietly skipped. Ten of the fixes need a person before or after the automation. The approval screen says which, before you click.

Connecting takes about 15 minutes with read-only access. No credit card and no sales call are needed to run the first scan.

It is included in DeDups: one full scan of one AWS account is free with no card, Pro is $99 a month plus published per-unit rates, and Enterprise starts at $10,000 a year. All rates are on the pricing page.

Ready to try Auto-Remediation?

15 minutes to connect. No credit card. No sales call required.