Skip to content
SPECIFICTION
Get listed

audytx

audytx.com

From $20/mo Free plan WebAPI
Visit audytx.com
Spec score 9.1 #2 of 22 in Infrastructure as Code Security Software

What it is

audytx analyzes AWS infrastructure code and Terraform pull requests, presenting security and cost findings in GitHub and to coding agents. Its deterministic, non-AI engine models resource relationships such as invocation topology, encryption chains, network exposure, resource lifetimes, and IAM trust graphs. The maker lists 303 AWS Terraform checks and 27 cross-resource reasoning axes. A GitHub App posts pull-request digests, inline review, and SARIF, using read-only contents permission while writing comments, reviews, statuses, and SARIF uploads. An optional GitHub Actions step uploads a resolved Terraform plan over OIDC without shared secrets. A hosted MCP server exposes the engine to Claude Code, Cursor, and Codex; autofix applies line-anchored changes and rescans for up to three passes. AWS, Terraform, and CloudFormation are supported in stated hosted workflows. Free includes 100 scans monthly; Plus costs $20 a month and Pro $100 a month.

Spec sheet

Purpose
audytx analyzes AWS infrastructure code and Terraform pull requests, with findings presented to coding agents and in GitHub.Read 30 Sep 2026 · audytx.com
Support
The pricing page lists email support on Free and priority email support on Plus and Pro; listed response SLAs are 24 hours for Free and 12 hours for Plus and Pro.Read 30 Sep 2026 · audytx.com
Maker
audytx is built and operated by founders Victor and Sabari of Rexstart Labs Pvt Ltd.Read 30 Sep 2026 · audytx.com
Autofix
The MCP autofix tool applies line-anchored fixes, rescans, and loops for up to three passes.Read 30 Sep 2026 · audytx.com
Autofix behavior
Autofix applies only line-anchored safe replacements, rescans the result and loops for up to three passes.Read 21 Oct 2026 · audytx.com
Board size
The company record lists two directors, Sabari Sinha and Victor Sinha.Read 21 Oct 2026 · companyseekers.com
Capital
The public filing record lists authorised capital of ₹1 lakh and paid-up capital of ₹1 lakh.Read 21 Oct 2026 · companyseekers.com
Changelog: CloudFormation
The July 2026 v1.18 release added CloudFormation pull-request and MCP scanning, including SAM and CDK-synthesized output.Read 21 Oct 2026 · audytx.com
Changelog: first stable release
The June 2026 v1.0 release introduced the pull-request scanner, MCP server, Cost Sampler, Client IDs and security hardening.Read 21 Oct 2026 · audytx.com
CloudFormation support
CloudFormation scanning covers JSON, YAML short tags, SAM and synthesized CDK templates through GitHub App and MCP surfaces, while the offline CLI remains Terraform-only.Read 21 Oct 2026 · audytx.com
Company incorporation
The company record gives 25 May 2026 as the incorporation date.Read 21 Oct 2026 · companyseekers.com
Company legal name
A public Indian company record lists the legal name as Rexstart Labs Private Limited.Read 21 Oct 2026 · companyseekers.com
Company registration
The company record lists CIN U62099WR2026PTC294296 and ROC Kolkata II.Read 21 Oct 2026 · companyseekers.com
Company status
The company record describes Rexstart Labs Private Limited as active, private, Indian and non-government.Read 21 Oct 2026 · companyseekers.com
Compliance references
Findings can carry AWS FSBP, SOC 2 CC6, PCI-DSS and HIPAA references.Read 21 Oct 2026 · audytx.com
Context analysis
The engine models relationships between resources, including invocation topology, encryption chains, network exposure, resource lifetimes, and IAM trust graphs.Read 30 Sep 2026 · audytx.com
Context reasoning
The engine models invocation topology, encryption variants, network exposure, resource lifetimes and IAM trust graphs before deciding whether checks apply.Read 21 Oct 2026 · audytx.com
Cost analysis
Pull-request output includes cost opportunities such as gp2-to-gp3 changes, idle NAT gateways, oversized non-production resources and missing cost-allocation tags.Read 21 Oct 2026 · audytx.com
Delivery stages
The engine is offered at code-time through MCP, review-time through pull requests, and plan-time through resolved plan uploads.Read 21 Oct 2026 · audytx.com
Detection engine
The documentation describes a deterministic Rust engine with 306 checks and 27 cross-resource reasoning axes.Read 21 Oct 2026 · audytx.com
GitHub App
The GitHub App posts one pull-request comment with security and cost findings, supports inline suggestions, and can upload SARIF to GitHub Code Scanning.Read 21 Oct 2026 · audytx.com
GitHub permissions
Installation requests read-only repository contents, pull-request read/write, metadata read-only and code-scanning alert read/write permissions.Read 21 Oct 2026 · audytx.com
GitHub workflow
The GitHub App posts a pull request digest with security findings and cost analysis, plus inline review and SARIF.Read 30 Sep 2026 · audytx.com
IAM analysis
Its IAM engine evaluates effective permissions, wildcard expansion, trust relationships and multi-hop privilege-escalation attack paths.Read 21 Oct 2026 · audytx.com
Licence
The terms say audytx's check catalog, engine and associated software are proprietary property of Rexstart Labs Pvt Ltd.Read 21 Oct 2026 · audytx.com
Limits
The maker says it does not support Azure, GCP, or Pulumi, and its offline CLI is Terraform-only while CloudFormation support rolls out there.Read 30 Sep 2026 · audytx.com
Listing status
The filing record says the company is unlisted on a stock exchange.Read 21 Oct 2026 · zaubacorp.com
Maker founders
audytx says it is built and operated by founders Victor and Sabari of Rexstart Labs Pvt Ltd, with more than 30 years of combined experience.Read 21 Oct 2026 · audytx.com
MCP and agents
The hosted MCP server exposes the engine to coding agents including Claude Code, Cursor, and Codex.Read 30 Sep 2026 · audytx.com
MCP API
The hosted API is a Streamable HTTP JSON-RPC 2.0 endpoint at https://audytx.com/mcp; tool calls require a Client ID supplied as X-Client-ID or a Bearer token.Read 21 Oct 2026 · audytx.com
MCP tools
The documented tools include scan_terraform, autofix_terraform, scan_cloudformation, autofix_cloudformation, dry-run autofixes, explain_finding and get_context_graph.Read 21 Oct 2026 · audytx.com
Payload limit
MCP calls are limited to 2,000 files and 10 MB per call in the getting-started documentation.Read 21 Oct 2026 · audytx.com
Plan scanning
An optional GitHub Actions workflow uploads terraform show -json output using GitHub OIDC without a shared secret.Read 21 Oct 2026 · audytx.com
Plan scans
An optional GitHub Actions step uploads a resolved Terraform plan over OIDC without shared secrets.Read 30 Sep 2026 · audytx.com
Product purpose
audytx analyzes AWS Terraform and CloudFormation infrastructure code for security, reliability, operations, compliance and cost findings.Read 21 Oct 2026 · audytx.com
Registered office
The registered office is listed in Kanksa, West Bengal, India, with a Durgapur address shown in the filing data.Read 21 Oct 2026 · zaubacorp.com
Repository scan limit
The current-limits section says repositories above 400 Terraform files are scanned diff-only.Read 21 Oct 2026 · audytx.com
Retention
Scan metadata and findings are retained for 90 days before automatic deletion.Read 21 Oct 2026 · audytx.com
Security certification
The trust page states that audytx does not yet hold SOC 2 or ISO 27001 certification.Read 21 Oct 2026 · audytx.com
Service availability
The terms provide the service on a best-effort basis and make no uptime guarantee.Read 21 Oct 2026 · audytx.com
Source handling
Terraform and plan contents are processed in memory and discarded rather than written to audytx databases or logs.Read 21 Oct 2026 · audytx.com
Support SLA
The pricing table lists a 24-hour email response SLA for Free and 12-hour SLAs for Plus and Pro.Read 21 Oct 2026 · audytx.com
Supported scope
The maker says audytx supports AWS and Terraform, and also supports CloudFormation through its hosted MCP server and GitHub App review.Read 30 Sep 2026 · audytx.com
Unsupported scope
The stated scope excludes Azure, GCP, Pulumi and non-Terraform infrastructure formats outside the CloudFormation hosted workflows.Read 21 Oct 2026 · audytx.com

Plans and prices

Free Free $0 / month Unlimited repositories / files · Unlimited users · 100 scans / month · Email support Read 21 Oct 2026 · audytx.com
Plus $20 a month $20 / month Unlimited repositories / files · Unlimited users · 200 scans / month · Priority Email support Read 21 Oct 2026 · audytx.com
Pro $100 a month $100 / month Unlimited repositories / files · Unlimited users · 1,000 scans / month · Priority Email support · Custom checks and org-wide policy controls · Centralized suppression management · Audit log export Read 21 Oct 2026 · audytx.com

Every audytx plan and price →

Strong points and limits

Strong points

  • 303 AWS Terraform checks
  • Cross-resource relationship analysis
  • GitHub pull-request review and SARIF
  • MCP access for coding agents
  • OIDC plan uploads without shared secrets

Limits

  • No Azure, GCP, or Pulumi support
  • Offline CLI is Terraform-only
  • No SOC 2 or ISO 27001 certification
  • Free plan has 100 scans monthly

Who it suits

It suits teams reviewing AWS and Terraform changes through GitHub or coding agents. CloudFormation users can use the hosted MCP server and GitHub App review.

Verdict

audytx combines deterministic AWS/Terraform analysis with GitHub review and agent integrations. Its published scope excludes several cloud and infrastructure formats, so platform fit should be checked before adoption.

Where Specifiction places it

Alternatives to audytxAll alternatives →