llms.txt@public git:20261018.f8989e1A

Immutable. This exact content never changes and is served at /api/v1/blob/112d8b65a7f6b56e.

# grclanker

> Experimental open-source AI GRC CLI with native tools that assess SaaS, cloud, and security platform configurations against major compliance frameworks. Most shipped integrations have a repository spec: a language-neutral contract describing the integration's APIs, authentication, checks, framework mappings, and outputs.

Use a spec to inspect, extend, or reimplement an integration. Specs document design and intended behavior; the [tool catalog](https://grclanker.com/docs/tools/catalog/) lists the tools the CLI actually registers.

## Specs

All specs are available as raw markdown. Point your agent at any URL below.

- [Ansible AAP Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/ansible-sec-inspector.spec.md): Community spec for auditing Ansible Automation Platform security posture
- [CrowdStrike Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/crowdstrike-sec-inspector.spec.md): Falcon EDR prevention policies, sensor deployment, device control
- [Datadog Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/datadog-sec-inspector.spec.md): RBAC, API key management, log pipelines, security monitoring
- [Elastic Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/elastic-sec-inspector.spec.md): Authentication realms, TLS configs, RBAC, field/document-level security
- [GitHub Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/github-sec-inspector.spec.md): Enterprise Cloud SSO, branch protection, code security, Actions workflows
- [grclanker Compute Backends](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/grclanker-compute-backends.spec.md): Portable runtime contract for isolated local and remote compute backends
- [Google Workspace Operator Bridge](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/gws-operator-bridge.spec.md): Read-only and preview-first Google Workspace operator workflows
- [KnowBe4 Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/knowbe4-sec-inspector.spec.md): Security awareness training coverage, completion rates, user risk scores
- [LaunchDarkly Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/launchdarkly-sec-inspector.spec.md): IAM, feature flag hygiene, API token lifecycle
- [MuleSoft Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/mulesoft-sec-inspector.spec.md): Anypoint Platform IAM, API gateway policies, runtime security
- [New Relic Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/newrelic-sec-inspector.spec.md): Authentication, user access controls, API key management
- [PagerDuty Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/pagerduty-sec-inspector.spec.md): Authentication settings, user roles, access controls
- [Snowflake Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/snowflake-sec-inspector.spec.md): IAM, network security, data protection policies, encryption
- [Splunk Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/splunk-sec-inspector.spec.md): Authentication, authorization, server settings, data pipelines
- [Sumo Logic Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/sumologic-sec-inspector.spec.md): Authentication policies, access controls, data governance
- [Veracode Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/veracode-sec-inspector.spec.md): Scan coverage, policy compliance, flaw aging, SCA library health

<!-- generated integration registry start -->
### Generated portable contracts

- [AWS Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/aws-sec-inspector.spec.md): Read-only AWS posture inspection across identity, logging, detection, organization guardrails, data protection, and network security.
- [Azure Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/azure-sec-inspector.spec.md): Portable contract for the shipped Microsoft Entra ID, Microsoft Graph, and Azure Resource Manager security assessments.
- [Box Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/box-sec-inspector.spec.md): Portable contract for the shipped Box identity, sharing, governance, Shield, and monitoring assessments.
- [Cloudflare Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/cloudflare-sec-inspector.spec.md): Portable contract for the shipped Cloudflare identity, zone-security, and traffic-control assessments.
- [Duo Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/duo-sec-inspector.spec.md): Portable contract for the shipped Duo authentication, administrator, protected-application, and monitoring assessments.
- [GCP Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/gcp-sec-inspector.spec.md): Portable contract for the shipped Google Cloud identity, logging, organization, data-protection, and network assessments.
- [Google Workspace Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/gws-inspector-go.spec.md): Portable contract for the shipped Google Workspace tenant inspector, distinct from the gws operator bridge.
- [OCI Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/oci-sec-inspector.spec.md): Portable contract for the shipped OCI identity, Cloud Guard, Audit, networking, Vault, Object Storage, and Compute assessments.
- [Okta Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/okta-sec-inspector.spec.md): Portable contract for the shipped read-only Okta identity, administrator, integration, and monitoring assessments.
- [Palo Alto Networks Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/paloalto-sec-inspector.spec.md): Portable contract for the shipped Prisma Cloud CSPM, Prisma Cloud Compute, and PAN-OS assessments.
- [Qualys Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/qualys-sec-inspector.spec.md): Portable contract for the shipped Qualys scan coverage, asset inventory, vulnerability management, and administration assessments over the Qualys VM/PC, Administration, Asset Management, Cloud Agent, and WAS APIs.
- [Salesforce Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/salesforce-sec-inspector.spec.md): Portable contract for the shipped Salesforce platform, identity, data-protection, and monitoring assessments.
- [ServiceNow Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/servicenow-sec-inspector.spec.md): Portable contract for the shipped ServiceNow identity, hardening, access-control, and operations-governance assessments.
- [Slack Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/slack-sec-inspector.spec.md): Portable contract for the shipped Slack Enterprise Grid identity, administration, app, channel, and monitoring assessments.
- [Tenable Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/tenable-sec-inspector.spec.md): Portable contract for the shipped Tenable Vulnerability Management and Tenable Security Center scan program, sensor coverage, access control, and vulnerability management assessments.
- [Webex Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/webex-sec-inspector.spec.md): Read-only Webex organization posture inspection across identity, collaboration governance, meetings, hybrid services, and devices.
- [Zendesk Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/zendesk-sec-inspector.spec.md): Portable contract for the shipped Zendesk authentication, access-control, data-protection, and integration assessments.
- [Zoom Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/zoom-sec-inspector.spec.md): Portable contract for the shipped Zoom identity, collaboration-governance, and meeting-security assessments.
- [Zscaler Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/zscaler-sec-inspector.spec.md): Portable contract for the shipped ZIA administrative and policy assessments and ZPA zero-trust access assessment.
<!-- generated integration registry end -->

## Docs

- [Documentation](https://grclanker.com/docs/): Installation, runtimes, integration guides, workflows, and FedRAMP reference
- [Tool catalog](https://grclanker.com/docs/tools/catalog/): Native tools the CLI registers, grouped by domain
- [Using specs as inputs](https://grclanker.com/docs/specs/using-specs-as-inputs/): How to inspect, extend, or reimplement an integration from its spec

## Source

- [Website](https://grclanker.com/): Project site, docs, and spec browser
- [Repository](https://github.com/ethanolivertroy/grclanker): CLI, specs, and site source
- Clone all specs: git clone https://github.com/ethanolivertroy/grclanker.git