COMING SOON

ASTRIA CLI

Compliance in your editor, before you push. Catch violations as code is written.

💻 VS Code⚡ Git Hook📦 npm CLI

Built for teams

For every developer on your organisation

Astria CLI shifts compliance left: from a post-merge administrative burden to an interactive assistant that helps your whole team ship secure, compliant code every day.

⚡

Catch it before code review

Violations surface as inline squiggles, right as the code is written. Developers fix issues in seconds, not after a PR comment from a compliance reviewer.

10xfaster to fix than post-merge

🔒

Same rules, every developer

The CLI enforces the exact same SOC 2, HIPAA, GDPR, and EU AI Act rules your organisation configured in the Astriguard dashboard. No gaps between local and CI.

100%rule parity with cloud scans

📋

Override with accountability

Developers can mark false positives directly in VS Code. Every override injects a justified comment that syncs to your continuous audit ledger, with no exceptions going unrecorded.

0untracked overrides

Setup

Up and running in under two minutes

STEP 01

Install once, org-wide

Run `npm install -g @astriguard/cli` and `astria-cli install-hooks`. Your git repository is protected from that moment forward.

npm install -g @astriguard/cli
astria-cli auth
astria-cli install-hooks

STEP 02

Code with live compliance feedback

On every file save, the VS Code extension runs a local fast scan and a cloud AI pass. Violations appear as native Problems panel entries with one-click patches.

// VS Code Problems panel
⛔ CC6.1  Database publicly accessible  · line 13
▲  GDPR   Encryption at rest disabled  · line 14

STEP 03

Pre-push gate as final guardrail

Even if the extension is disabled, the git hook runs `astria-cli scan --pre-push` and returns exit code 1 on critical violations. The code simply can't leave the machine.

$ git push
Running astria-cli pre-push scan...
❌ Push aborted: 1 HARD BLOCK detected.

See it in action

From line written to push blocked

Watch the full local compliance lifecycle: editor detection, quick-fix, and pre-push gate.

VS Code · my-project

CLEAN

01 · WRITING CODE

Developer adds infrastructure change

infra/database.tf

10resource "aws_db_instance" "prod" {

11 instance_class = "db.t3.medium"

12 engine = "postgres"

13 publicly_accessible = true

14 storage_encrypted = false

15}

astria-cli · local shield

Architecture

Local speed. Cloud intelligence.

The CLI splits work into two paths so you always get the fastest possible result without sacrificing depth.

🔍

Local Fast Path

Runs in milliseconds · no network

Deterministic static analysis runs on your machine using embedded tools (tfsec, checkov). Catches syntax errors, config mismatches, and secret patterns instantly on every file save.

tfseccheckovsecret scanningno internet

🧠

Cloud Agent Loop

Deep reasoning · privacy analysis

For semantic violations, like a controller route leaking PII to an unvetted endpoint, the extension sends the diff to Astriguard's AI agent which uses extended reasoning and your org's compliance rules.

Claude Sonnetprompt cachingcontext graphorg rules

Both paths merge into the native VS Code Problems panel and gutter decorations with no custom dashboard or context switching required.

The difference

Reactive compliance vs proactive compliance

Aspect	Without Astria CLI	With Astria CLI
When violations are found	xPR review comments, after code is pushed	vInline in editor, while writing the code
Time to fix	xHours to days (context switch, PR back-and-forth)	vSeconds (one-click patch, never left the editor)
Who sees violations	xOnly the PR reviewer and the PR author	vDeveloper, reviewer, and compliance admin in sync
Override tracking	xInformal, ad-hoc (Slack message, manual notes)	vInline comment + audit ledger sync, automatic
Compliance rule source	xSeparate CI config, drift possible	vPulled from Astriguard dashboard, the single source of truth

🛡️

LAUNCHING SOON

Be the first to try Astria CLI

Join a small group of engineering teams getting early access. We will reach out as soon as early access opens.

No commitment. Unsubscribe any time.