12 analyzers · runs in under a second

Know what your Terraform plan
actually does

Paste your terraform show -json output. Get blast radius, security findings, cost delta, policy violations, and drift — all at once.

live demo — scroll to trigger

terraform plan analysis
$terraform show -json tfplan | xkz terraform analyze
·Parsed plan18 resources · 3 providers
·Destructive guardaws_db_instance.main — destroy + recreate
·Blast radiusScore 73/100 · HIGH · 12 downstream deps
·Security analysis2 critical · 1 high · 4 medium
·Policy compliance3 violations (HIPAA tagging, encryption-at-rest)
·Cost estimate+$847/mo · new RDS Multi-AZ instance
·Drift analysis1 stale resource detected
·Dependency graph18 nodes · 34 edges · 3 impact chains
·Output changes2 removed · 1 modified — breaking changes detected
·Non-determinism1 unprotected timestamp() — perpetual diff risk
·Module versions2/4 modules unpinned
·Complete318ms
0
Blast Radius
2
Critical Findings
+$0
Monthly Cost
HIGH
Overall Risk

Six analyzers. One paste.

Every analysis runs in parallel the moment your plan lands.

💥

Blast Radius

Impact score from 0–100. Counts affected resources by category and flags downstream dependencies.

🛡️

Destructive Guard

Catches destroys, forced replacements, and data-loss operations before they reach production.

🔒

Security Analysis

Scans for IAM misconfigurations, open network rules, and hardcoded secrets. Scored 0–100.

💰

Tags & Cost

Tag compliance scoring plus monthly cost delta per resource. Surfaces tagging violations before merge.

🔄

Drift Analysis

Detects state drift and stale resources with remediation strategy recommendations.

📤

Output Change Impact

Flags removed and modified outputs that will break downstream terraform_remote_state consumers. Critical for multi-stack architectures.

Three steps

No CLI install. No API key. No setup.

01

Run the command

Generate the JSON plan output from your local Terraform or CI pipeline.

terraform show -json tfplan
02

Paste the JSON

Drop it into the analyzer — or upload the file directly. Optionally include your HCL source for deeper structure analysis.

03

Review the results

Twelve analyses appear instantly: risk score, findings, cost delta, and a GitHub PR comment ready to copy.

Output formats

Results are available in three forms the moment analysis completes.

📊
Interactive dashboard
Collapsible sections for each analyzer. Expandable findings. Filterable by severity.
💬
GitHub PR comment (Markdown)
Ready-to-paste comment with risk badge, summary table, and per-section findings. One click to copy.
⌨️
CLI output
ANSI-formatted output for terminal display or CI log readability. Copy and paste into your pipeline.
🏗️

Ready to analyze your next plan?

Paste your terraform show -json output and get a complete risk picture in under a second.