Grantmesh: RBAC Audit

About Grantmesh: RBAC Audit

Grantmesh is a focused Kubernetes authorization workbench for platform and security teams that need to answer who can do what without uploading cluster policy.

Turn local Kubernetes RBAC YAML evidence into a prioritized, editable review with explicit assumptions, ownership, and exportable decisions.

KEY FEATURES
- Native Kubernetes RBAC YAML import and normalization
- Interactive effective access map
- Editable subjects & bindings with owners and evidence
- Deterministic privilege paths scoring
- Current-versus-proposed state comparison
- Decision log with accountable disposition
- Portable rbac evidence packet export
- Private offline workspace with no account
- Native structured-file or CSV import
- Local PDF, workspace JSON, and domain-artifact export
- 48 original offline technical reference plates
- No account, ads, analytics, tracking, IAP, or subscription

Grantmesh evaluates imported RBAC declarations and recorded assumptions. It does not query a cluster or reproduce admission, aggregated roles, impersonation, webhook authorization, or every version-specific behavior. Verify important findings with the authoritative cluster.