
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
@shieldly/cli
Advanced tools
AI-Powered Security Analysis for AWS — official CLI.
Analyze AWS IAM policies and CloudFormation templates for security risks from any terminal, shell script, or CI/CD pipeline. Powered by Shieldly.
npm install -g @shieldly/cli
analyze-iam runs in demo mode without an API key (5 lifetime analyses):
shieldly analyze-iam policy.json
To unlock analyze-cf, history, and 20 free analyses per day,
create a free account and set your key:
export SHIELDLY_API_KEY=sk_live_...
shieldly analyze-cf template.yaml
Upgrade to a paid plan for higher daily limits, team access, and priority AI.
# Set your API key (get one free at https://www.shieldly.io/app/api)
export SHIELDLY_API_KEY=sk_live_...
# Analyze an IAM policy
shieldly analyze-iam policy.json
# Analyze a CloudFormation template
shieldly analyze-cf template.yaml
# Manage API keys
shieldly api-keys list
| Mode | Limit | Requires |
|---|---|---|
| Demo (no key) | 5 analyses total | No account |
| Free account | 20 units/day | Free sign-up |
| Builder | 150 units/day | Paid plan |
| Pro | 300 units/day | Paid plan |
| Team | 600 units/day | Paid plan |
Analysis units depend on input size — a small IAM policy costs 1 unit; large CloudFormation templates cost more. Compare plans →
| Command | Description |
|---|---|
shieldly analyze-iam <policy-file> | Analyze an IAM policy for security issues |
shieldly analyze-cf <template-file> | Analyze a CloudFormation template |
shieldly api-keys list|create|revoke | Manage API keys |
shieldly completion bash|zsh|install | Shell completion |
| Option | Description |
|---|---|
--api-key <key> | API key (or set SHIELDLY_API_KEY) |
--version | Show version |
-h, --help | Show help |
- name: AI-Powered IAM Analysis
run: |
npm install -g @shieldly/cli
shieldly analyze-iam ./iam-policy.json
env:
SHIELDLY_API_KEY: ${{ secrets.SHIELDLY_API_KEY }}
For pull-request gating with PR comments, use the Shieldly GitHub Action instead.
Shieldly does not log your policy input. Cache keys are one-way SHA-256 hashes of the input.
MIT © Shieldly
Amazon Web Services (AWS) is a trademark of Amazon.com, Inc. Shieldly is not affiliated with, endorsed by, or sponsored by Amazon Web Services.
FAQs
AI-Powered Security Analysis for AWS — official CLI
The npm package @shieldly/cli receives a total of 49 weekly downloads. As such, @shieldly/cli popularity was classified as not popular.
We found that @shieldly/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.