Inside the app
A closer look.
About this app
Made for a clear purpose.
Grantmesh is a focused Kubernetes authorization workbench for platform and security teams that need to answer who can do what without uploading cluster policy.
Turn local Kubernetes RBAC YAML evidence into a prioritized, editable review with explicit assumptions, ownership, and exportable decisions.
KEY FEATURES - Native Kubernetes RBAC YAML import and normalization - Interactive effective access map - Editable subjects & bindings with owners and evidence - Deterministic privilege paths scoring - Current-versus-proposed state comparison - Decision log with accountable disposition - Portable rbac evidence packet export - Private offline workspace with no account - Native structured-file or CSV import - Local PDF, workspace JSON, and domain-artifact export - 48 original offline technical reference plates - No account, ads, analytics, tracking, IAP, or subscription
Grantmesh evaluates imported RBAC declarations and recorded assumptions. It does not query a cluster or reproduce admission, aggregated roles, impersonation, webhook authorization, or every version-specific behavior. Verify important findings with the authoritative cluster.
