CIS Controls

Pulumi points a security agent at its context graph to hunt cloud attack paths

Pulumi's research preview builds a threat model before it looks for anything, then leans on two inputs its own post treats as conditional, the infrastructure code behind a resource and the runtime telemetry around it.