13 October 2026

Compass 0.1.0: Compass goes open source

The open edition of Compass: it maps an AWS account to the Terraform and repositories that own it, then acts on the map. It runs on your machine in Docker Compose, with your credentials, and nothing leaves.

The infra map

Every resource in every region, joined to the Terraform state and module that manages it and the repository that holds it. Export it as JSON, DOT or a single HTML page.

compass mapper run

Decoys that trip when used

Honeytokens (an IAM key, a database password, an SSH key, an S3 object, an API token, a DNS record) placed where they look real, as a pull request to your infra repo. When one is used you get the incident, its blast radius and a response within a risk policy you set.

compass honeypot create honeytoken_class=aws_credential

Code-as-cloud

Resources nobody wrote Terraform for become a pull request: generated configuration, literals rewired to references in your modules, checked with a plan, import blocks included. Drift is handled the same way.

compass iac import repo=<owner>/<repo>

A PR watcher

Compass syncs the pull requests it opened, reads the reviews and answers them. With an Anthropic key it pushes the revision a reviewer asked for, within the files the pull request already touches. Anything riskier is labelled for a human.

compass prs sync

Runs on your machine

A dashboard, an API, a daemon and a local DynamoDB in Docker Compose. Install it from the terminal in a few commands, or ask Claude Code: the compass-open skill walks the steps and checks each one. Apache-2.0.

docker compose up -d

Compass is open source (Apache-2.0).

Code, changelog and issues: github.com/beamreach-ai/compass. Already running it? The update card on Settings → Updates shows these notes before you update.