dd0c/drift

# Catch Terraform drift before it catches you

Lightweight Go agent scans your Terraform state files, compares against live infrastructure, scrubs secrets from reports, and alerts your team on Slack. Know when someone ClickOps'd your production VPC.

Start free → Read docs
🔍

### State scanning

Parses Terraform v4 state files. Detects resource changes, attribute drift, and deleted resources.

🔒

### Secret scrubbing

Regex + Shannon entropy detection. AWS keys, RSA keys, PEM certs — scrubbed before reports leave your network.

🔔

### Slack alerts

Block Kit messages with severity, affected resources, and one-click remediate/accept buttons.

### Install the agent

    $ curl -sSL https://install.dd0c.dev/drift | bash
    $ dd0c-drift check --state terraform.tfstate --endpoint https://drift.dd0c.dev
    ✓ Scanned 47 resources in 1.2s
    ⚠ 3 drifted resources detected (1 critical, 2 medium)

## Stop paying enterprise prices
for tools you half-use

dd0c is built by a solo engineer who got tired of $50K/year DevOps platforms that take 3 months to set up. Each tool does one thing well. Start free. Pay when it saves you money.

Get started — it's free →