obachtSecurity Scanner for Developer Environments

Inspect your local development setup for security misconfigurations using OPA/Rego policies

13 Built-in Rules

Checks across SSH, Git, Docker, Kubernetes, environment variables, shell, tools, PATH, and OS categories

Uses an embedded Open Policy Agent engine with Rego policies for flexible, extensible security evaluation — no external dependencies required

Add custom rules via --rules-dir with your own Rego policies and YAML metadata