llms.txt@public git:20261018.4057fbdA

Immutable. This exact content never changes and is served at /api/v1/blob/f5170c1b43a4e577.

# grclanker

> Experimental open-source AI GRC CLI with native tools that assess SaaS, cloud, and security platform configurations against major compliance frameworks. Most shipped integrations have a repository spec: a language-neutral contract describing the integration's APIs, authentication, checks, framework mappings, and outputs.

Use a spec to inspect, extend, or reimplement an integration. Specs document design and intended behavior; the [tool catalog](https://grclanker.com/docs/tools/catalog/) lists the tools the CLI actually registers.

## Specs

All specs are available as raw markdown. Point your agent at any URL below.

- [Ansible AAP Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/ansible-sec-inspector.spec.md): Community spec for auditing Ansible Automation Platform security posture
- [Datadog Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/datadog-sec-inspector.spec.md): RBAC, API key management, log pipelines, security monitoring
- [Elastic Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/elastic-sec-inspector.spec.md): Authentication realms, TLS configs, RBAC, field/document-level security
- [GitHub Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/github-sec-inspector.spec.md): Enterprise Cloud SSO, branch protection, code security, Actions workflows
- [grclanker Compute Backends](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/grclanker-compute-backends.spec.md): Portable runtime contract for isolated local and remote compute backends
- [Google Workspace Operator Bridge](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/gws-operator-bridge.spec.md): Read-only and preview-first Google Workspace operator workflows
- [LaunchDarkly Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/launchdarkly-sec-inspector.spec.md): IAM, feature flag hygiene, API token lifecycle
- [MuleSoft Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/mulesoft-sec-inspector.spec.md): Anypoint Platform IAM, API gateway policies, runtime security
- [New Relic Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/newrelic-sec-inspector.spec.md): Authentication, user access controls, API key management
- [PagerDuty Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/pagerduty-sec-inspector.spec.md): Authentication settings, user roles, access controls
- [Snowflake Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/snowflake-sec-inspector.spec.md): IAM, network security, data protection policies, encryption
- [Splunk Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/splunk-sec-inspector.spec.md): Authentication, authorization, server settings, data pipelines
- [Sumo Logic Security Inspector](https://raw.githubusercontent.com/hackIDLE/grclanker/main/specs/sumologic-sec-inspector.spec.md): Authentication policies, access controls, data governance

<!-- generated integration registry start -->
### Generated portable contracts

- [AWS Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/aws-sec-inspector.spec.md): Read-only AWS posture inspection across identity, logging, detection, organization guardrails, data protection, and network security.
- [Azure Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/azure-sec-inspector.spec.md): Portable contract for the shipped Microsoft Entra ID, Microsoft Graph, and Azure Resource Manager security assessments.
- [Box Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/box-sec-inspector.spec.md): Portable contract for the shipped Box identity, sharing, governance, Shield, and monitoring assessments.
- [Cloudflare Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/cloudflare-sec-inspector.spec.md): Portable contract for the shipped Cloudflare identity, zone-security, and traffic-control assessments.
- [CrowdStrike Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/crowdstrike-sec-inspector.spec.md): Portable contract for the shipped CrowdStrike Falcon prevention policy, response readiness, device control and firewall, sensor coverage, and access governance assessments over the CrowdStrike Falcon API.
- [Duo Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/duo-sec-inspector.spec.md): Portable contract for the shipped Duo authentication, administrator, protected-application, and monitoring assessments.
- [GCP Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/gcp-sec-inspector.spec.md): Portable contract for the shipped Google Cloud identity, logging, organization, data-protection, and network assessments.
- [Google Workspace Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/gws-inspector-go.spec.md): Portable contract for the shipped Google Workspace tenant inspector, distinct from the gws operator bridge.
- [KnowBe4 Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/knowbe4-sec-inspector.spec.md): Portable contract for the shipped KnowBe4 phishing program, training program, user risk, and account governance assessments over the KnowBe4 Reporting API and the optional PhishER GraphQL API.
- [OCI Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/oci-sec-inspector.spec.md): Portable contract for the shipped OCI identity, Cloud Guard, Audit, networking, Vault, Object Storage, and Compute assessments.
- [Okta Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/okta-sec-inspector.spec.md): Portable contract for the shipped read-only Okta identity, administrator, integration, and monitoring assessments.
- [Palo Alto Networks Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/paloalto-sec-inspector.spec.md): Portable contract for the shipped Prisma Cloud CSPM, Prisma Cloud Compute, and PAN-OS assessments.
- [Qualys Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/qualys-sec-inspector.spec.md): Portable contract for the shipped Qualys scan coverage, asset inventory, vulnerability management, and administration assessments over the Qualys VM/PC, Administration, Asset Management, Cloud Agent, and WAS APIs.
- [Salesforce Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/salesforce-sec-inspector.spec.md): Portable contract for the shipped Salesforce platform, identity, data-protection, and monitoring assessments.
- [ServiceNow Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/servicenow-sec-inspector.spec.md): Portable contract for the shipped ServiceNow identity, hardening, access-control, and operations-governance assessments.
- [Slack Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/slack-sec-inspector.spec.md): Portable contract for the shipped Slack Enterprise Grid identity, administration, app, channel, and monitoring assessments.
- [Tenable Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/tenable-sec-inspector.spec.md): Portable contract for the shipped Tenable Vulnerability Management and Tenable Security Center scan program, sensor coverage, access control, and vulnerability management assessments.
- [Veracode Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/veracode-sec-inspector.spec.md): Portable contract for the shipped Veracode scan coverage, policy compliance, findings hygiene, SCA posture, and access control assessments over the Veracode Applications, Policy, Identity, Dynamic Analysis, Findings, Summary Report, and SCA Agent REST APIs.
- [Webex Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/webex-sec-inspector.spec.md): Read-only Webex organization posture inspection across identity, collaboration governance, meetings, hybrid services, and devices.
- [Zendesk Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/zendesk-sec-inspector.spec.md): Portable contract for the shipped Zendesk authentication, access-control, data-protection, and integration assessments.
- [Zoom Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/zoom-sec-inspector.spec.md): Portable contract for the shipped Zoom identity, collaboration-governance, and meeting-security assessments.
- [Zscaler Security Inspector](https://raw.githubusercontent.com/ethanolivertroy/grclanker/main/specs/zscaler-sec-inspector.spec.md): Portable contract for the shipped ZIA administrative and policy assessments and ZPA zero-trust access assessment.
<!-- generated integration registry end -->

## Docs

- [Documentation](https://grclanker.com/docs/): Installation, runtimes, integration guides, workflows, and FedRAMP reference
- [Tool catalog](https://grclanker.com/docs/tools/catalog/): Native tools the CLI registers, grouped by domain
- [Using specs as inputs](https://grclanker.com/docs/specs/using-specs-as-inputs/): How to inspect, extend, or reimplement an integration from its spec

## Source

- [Website](https://grclanker.com/): Project site, docs, and spec browser
- [Repository](https://github.com/ethanolivertroy/grclanker): CLI, specs, and site source
- Clone all specs: git clone https://github.com/ethanolivertroy/grclanker.git