obachtSecurity Scanner for Developer Environments

Inspect your local development setup for security misconfigurations using OPA/Rego policies

118 Built-in Rules

Checks across Claude Code, credentials, Docker, environment variables, Git, Kubernetes, OS, PATH, privacy, shell, SSH, bumblebee, and tools categories

OPA-Powered

Uses an embedded Open Policy Agent engine with Rego policies for flexible, extensible security evaluation — no external dependencies required

Extensible

Add custom rules via --rules-dir with your own Rego policies and YAML metadata