Security posture
Require HTTPS, approved TLS versions, private access, and safe secret handling.
Infrastructure as code (IaC) governance
AI writes the infrastructure.Herdly enforces your standards.
Use Herdly with the AI tools your team already uses—or with infrastructure written by hand. It governs ARM templates and Bicep, checking every change against your security, cost, and operational policies before production.
- ARM templates & Bicep
- Works with your AI tools
- Built for Azure
Infrastructure review
PR #284 · main.bicepPolicy gate
Production web platform
12 standards evaluated in 4.8s
HTTPS & TLS 1.2+Passed
Database public accessFix ready
Required resource tagsPassed
Estimated cost
$428 / mo
Change from main
+$36 / mo
01
Generate — AI agents or engineers
02
Govern — Herdly
03
Deploy — Cloud
Assurance for AI-generated IaC
Generated code doesn’t know your standards.
Herdly checks AI-generated and engineer-written ARM templates and Bicep against your security, architecture, operational, and cost policies—then points developers to a fix before merge or deployment.
main.bicep
Herdly policy review
12resource database 'Microsoft.DBforPostgreSQL/flexibleServers@2024-08-01' = {
13 name: 'prod-app-db'
14 properties: {
15 publicNetworkAccess: 'Enabled'
16 }
17}
Public database access isn’t allowed
Production databases must use private network access.
Suggested fix
publicNetworkAccess: 'Disabled'Organizational guardrails
Turn your standards into checks.
Apply your security, architecture, cost, and operational requirements to every infrastructure change before it reaches production.
Approved architecture
Keep regions, resource types, and SKUs within organizational guardrails.
Resource consistency
Enforce naming conventions, mandatory tags, and shared configuration patterns.
Cost impact
Compare estimated monthly costs before and after a change, before deployment.
Operational readiness
Check that logging, monitoring, backups, and recovery are configured.
Guided remediation
Give developers clear findings and suggested fixes in their workflow.
Works with your AI workflow
Govern every infrastructure change.
Use Herdly with the AI tools your team already uses—or with infrastructure written by hand. It checks ARM and Bicep against your policies, then surfaces findings and cost impact in the editor and pull request.
- 1
Generate with any AI tool
Start with the AI coding assistant your team prefers, or write the infrastructure yourself.
- 2
Validate in your workflow
See policy findings and cost estimates in VS Code and the pull request.
- 3
Resolve before deployment
Give developers and reviewers clear findings and suggested fixes before approval.
main.bicep
Herdly connected
resource database 'Microsoft.DBforPostgreSQL/flexibleServers@2024-08-01' = {
name: 'prod-app-db'
location: resourceGroup().location
properties: {
publicNetworkAccess: 'Enabled'
}
}
Herdly findings
Public database access
Production databases must use private network access.
Cost impact
+$36 / month
Compared with main
Let AI move fast—without lowering the bar.
Put a programmable governance layer between generated infrastructure and production.