Grantmesh: RBAC Audit

A Kubernetes authorization workbench: turn local RBAC YAML into a prioritized, editable review and answer who can do what — without uploading cluster policy.

Grantmesh is a focused Kubernetes authorization workbench for platform and security teams that need to answer who can do what without uploading cluster policy.

Turn local Kubernetes RBAC YAML evidence into a prioritized, editable review with explicit assumptions, ownership, and exportable decisions.

KEY FEATURES

• Native Kubernetes RBAC YAML import and normalization
• Interactive effective access map
• Editable subjects & bindings with owners and evidence
• Deterministic privilege paths scoring
• Current-versus-proposed state comparison
• Decision log with accountable disposition
• Portable rbac evidence packet export
• Private offline workspace with no account
• Native structured-file or CSV import
• Local PDF, workspace JSON, and domain-artifact export
• 48 original offline technical reference plates
• No account, ads, analytics, tracking, IAP, or subscription

Grantmesh evaluates imported RBAC declarations and recorded assumptions. It does not query a cluster or reproduce admission, aggregated roles, impersonation, webhook authorization, or every version-specific behavior. Verify important findings with the authoritative cluster.