This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
TerraWatch
Terraform security that lives inside the pull request
TerraWatch scans every Terraform PR, blocks the merge if it finds security issues, and posts the exact code fix in the PR comment. No YAML. No CLI. No Checkov. 2 minute setup. 29 AWS rules. Free during beta. - Hardcoded diffs, not AI generated - Nothing auto-applied, you review every fix - Only reads changedtf files, never your full codebase
Hey everyone! I'm Alejandro, and I built TerraWatch from scratch over the past few weeks.
The problem: IAM wildcards and public S3 buckets keep slipping through Terraform code review because existing tools (Checkov, tfsec) require CI config and don't live where developers actually work, in the PR.
TerraWatch installs as a GitHub App, scans every PR that touches .tf files, blocks the merge if it finds issues, and posts the exact code diff to fix each problem as a bot comment. The developer copies the fix, pushes, and the merge unblocks automatically.
Would love feedback from anyone using Terraform in production. What rules would you want to see added?
No comment highlights available yet. Please check back later!
About TerraWatch on Product Hunt
“Terraform security that lives inside the pull request”
TerraWatch was submitted on Product Hunt and earned 0 upvotes and 1 comments, placing #42 on the daily leaderboard. TerraWatch scans every Terraform PR, blocks the merge if it finds security issues, and posts the exact code fix in the PR comment. No YAML. No CLI. No Checkov. 2 minute setup. 29 AWS rules. Free during beta. - Hardcoded diffs, not AI generated - Nothing auto-applied, you review every fix - Only reads changedtf files, never your full codebase
TerraWatch was featured in Developer Tools (515.4k followers), GitHub (41.3k followers), Security (2.7k followers) and Vercel Day (20 followers) on Product Hunt. Together, these topics include over 105.4k products, making this a competitive space to launch in.
Who hunted TerraWatch?
TerraWatch was hunted by alejny. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how TerraWatch stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
alejny
Hey everyone! I'm Alejandro, and I built TerraWatch from scratch over the past few weeks.
The problem: IAM wildcards and public S3 buckets keep slipping through Terraform code review because existing tools (Checkov, tfsec) require CI config and don't live where developers actually work, in the PR.
TerraWatch installs as a GitHub App, scans every PR that touches .tf files, blocks the merge if it finds issues, and posts the exact code diff to fix each problem as a bot comment. The developer copies the fix, pushes, and the merge unblocks automatically.
Would love feedback from anyone using Terraform in production. What rules would you want to see added?