Act Security Launches Free Open-Source Toolkit for Cloud Access Policy Management

Amphi is built on Cloud Copilot, the open-source AWS IAM tool created by David Kerber, and recently acquired by Act Security

Act Security, the action-centric cloud security company, announced the launch of Amphi, a free and open-source suite of tools that take the guesswork out of managing cloud access policies. The suite covers the full policy lifecycle, from reading, testing, simulating, shrinking, converting policies, and querying reachability across the cloud. Amphi is built on Cloud Copilot, the popular open-source AWS IAM tool created by David Kerber, which was recently acquired by Act Security.

Access is the foundation of cloud security. If permissions are misconfigured, every other control put in place can be bypassed. Yet the developer tooling to work through cloud access with any confidence has mostly been missing, which keeps the whole process slow and manual. Amphi reflects Act’s broader commitment to driving open, community-led innovation in cloud access control, giving the engineers who own access full clarity into complex policies and the freedom to manage them without the manual overhead.

“Every CISO we talk to already wants to fix access sprawl, but it’s their infrastructure and platform teams who actually have to manage the access behind that decision,” said Jonathan Langer, co-founder and CEO of Act Security. “Cloud Copilot earned trust with those engineers already, one policy at a time, without ever asking for a login. We acquired Cloud Copilot to support the community that actually operates the cloud, because that’s where the real access decisions happen.”

Also Read: IT Tech Pulse Exclusive Interview with Ken Claffey Chief Executive Officer and President of VDURA

With Amphi, teams can:

• Understand: See what every policy actually permits, at a glance.
• Simulate: Test policy impact safely before deployment.
• Optimize: Compress policies to fit character limits without widening access.
• Enforce: Export directly as infrastructure as code.
• Query: Map reachability across your entire cloud environment.

Every tool in Amphi ships three ways: a CLI that runs fully offline, a browser version that runs entirely on client-side code, and full source on GitHub. Installation takes one npm command, and each project takes issues and pull requests straight from the community, the same way Cloud Copilot operated before the acquisition.

“I built Cloud Copilot tools because I wanted straight answers the AWS docs couldn’t give me. It helps engineers understand actual, effective permissions across principals, resources, and accounts,” said David Kerber, Cloud Software Architect at Act and the creator of Cloud Copilot. “As part of Act Security, Amphi carries that same practitioner-facing discipline forward as a free, open-source toolkit for the engineers who secure cloud environments every day.”

Act Security emerged from stealth in July 2026 with $60 million in funding. The company eliminates the access paths that make cloud breaches and AI-driven attacks possible, scoping down what every application, workload, and AI agent can reach and enforcing those limits at the infrastructure layer.

Write to us [⁠wasim.a@demandmediaagency.com] to learn more about our exclusive editorial packages and programmes.