OpenAna + Open Policy Agent

Unified policy enforcement across Kubernetes, microservices, CI/CD pipelines and API gateways.

Live connectionInfrastructure & policy

Ana + Open Policy Agent

What Ana does with it.

Infrastructure-as-code, Kubernetes and policy-as-code that Ana generates, reviews and enforces.

01
Writes and tests Rego policies from your rules
02
Adds policy checks to CI so misconfigurations fail early
03
Gates Ana’s own actions by policy

Setup

Connected in four steps.

1
Connect
Open Integrations in Ana and connect Open Policy Agent with a scoped token, OAuth app or service account.
2
Scope it
Start read-only and choose which projects, repositories or accounts Ana can see.
3
Set the rules
Decide which actions need approval and who approves them - Ana’s guardrails enforce it.
4
Put it to work
Ana uses Open Policy Agent in investigations, fixes and reports, and every action is logged.

In practice

Playbooks that use Open Policy Agent.

Security

Fixing cloud misconfigurations at the source

Your CSPM tool flags public buckets, wide IAM policies and open security groups. Ana traces each one back to the infrastructure-as-code that created it, fixes it there, and stops it from coming back.

Read the playbook →

SRE / DevOps

Reconciling infrastructure drift

Hot-fixes in the console and manual changes pile up until Terraform plans become scary. Ana finds every drifted resource, decides with you whether code or cloud is right, and brings them back in line.

Read the playbook →

Used by

Ana’s engineers

SRE / DevOps →Security →

Governed

Every action, approved and logged.

Ana’s guardrails decide what it may do with Open Policy Agent, route sensitive actions to named approvers, and keep evidence for each decision. OpenAna is SOC 2 Type II, ISO 27001, HIPAA and GDPR compliant.

Guardrails →Trust center →

FAQ