# CDK Insights

> CDK Insights is a CDK-native AWS security, cost, reliability, and operational analysis tool. It synthesises AWS CDK applications, runs 145 deterministic static rules across 36 AWS services, maps findings back to CDK source locations, and can add optional AI-powered explanations and fixes.

CDK Insights is a TypeScript CLI distributed as the `cdk-insights` npm package. Static analysis is free and local, requires no account, and does not upload source code. Install or run it with Node.js 22 or later: `npx cdk-insights scan`.

Canonical website: https://cdkinsights.dev
Package: https://www.npmjs.com/package/cdk-insights
Source and issues: https://github.com/instancelabs/cdk-insights
Publisher: Instance Labs Ltd, UK company number 17053174
Contact: support@cdkinsights.dev
Product facts last reviewed: 2026-07-28

## Start here

- [CDK Insights homepage](https://cdkinsights.dev): Product overview, workflow, terminal demonstration, trust information, and free installation path.
- [Documentation](https://cdkinsights.dev/docs): Complete CLI and product documentation.
- [Quick start](https://cdkinsights.dev/docs/getting-started/quick-start): Install CDK Insights and run the first scan.
- [AWS CDK security scanner](https://cdkinsights.dev/aws-cdk-security-scanner): How CDK-native scanning, construct mapping, and source attribution work.
- [Rule library](https://cdkinsights.dev/rules): Browse all 145 static rules and their remediations.
- [Complete LLM reference](https://cdkinsights.dev/llms-full.txt): Self-contained product, CLI, model, privacy, and integration reference.

## Core capabilities

- [Static analysis](https://cdkinsights.dev/docs/features/static-analysis): Deterministic security, cost, reliability, performance, and operational checks across 36 AWS services.
- [AI recommendations](https://cdkinsights.dev/docs/features/ai-recommendations): Optional Bedrock analysis of privacy-safe, user-authored resources with explanations and concrete CDK fixes.
- [AI models and credit rates](https://cdkinsights.dev/docs/features/ai-models): Available models, quality guidance, and transparent per-resource credit multipliers.
- [Deployment preview](https://cdkinsights.dev/docs/features/infrastructure-intelligence): Baselines, architecture graphs, attack paths, resilience simulation, live CloudFormation comparison, and project policy gates.
- [Plan advisor](https://cdkinsights.dev/docs/features/plan-advisor): Estimate monthly credits from estate size and infrastructure Git history without spending credits.
- [Architecture documentation](https://cdkinsights.dev/docs/features/architecture-documentation): Generate version-controlled Markdown and Mermaid documentation from `cdk.out`.
- [Incident learning](https://cdkinsights.dev/docs/features/incident-learning): Convert a structured incident into a deterministic local rule and postmortem.
- [MCP integration](https://cdkinsights.dev/docs/features/mcp-integration): Read-only local tools for compatible editors and AI assistants.
- [Output formats](https://cdkinsights.dev/docs/features/output-formats): Table, JSON, Markdown, summary, SARIF, and GitHub Actions output.

## CI and integrations

- [GitHub Action](https://cdkinsights.dev/docs/features/github-action): Pull-request comments, SARIF upload, severity gates, and Well-Architected pillar gates.
- [CI/CD integration](https://cdkinsights.dev/docs/advanced/ci-cd-integration): Run the CLI in GitHub Actions, GitLab CI, Jenkins, CircleCI, or another Node.js pipeline.
- [Official GitHub Action repository](https://github.com/instancelabs/cdk-insights-action): Action source, inputs, outputs, examples, and release history.
- [Integrations](https://cdkinsights.dev/integrations): Supported developer workflows and reporting integrations.

## Evaluation and trust

- [CDK Insights alternatives](https://cdkinsights.dev/alternatives): Factual comparison with CDK Nag, Checkov, cfn-lint, cfn_nag, and AWS Config.
- [Use cases](https://cdkinsights.dev/use-cases): Security, cost, compliance, platform engineering, and CI use cases.
- [Security and privacy](https://cdkinsights.dev/security): Data handling, infrastructure, disclosure, and security controls.
- [Pricing and estate calculator](https://cdkinsights.dev/pricing): Free, Pro, and Team allowances, model rates, add-on credits, and usage estimator.

## Optional

- [Installation reference](https://cdkinsights.dev/docs/getting-started/installation): Installation methods and environment requirements.
- [Configuration](https://cdkinsights.dev/docs/configuration/basic-setup): Project configuration and CLI defaults.
- [Suppressing findings](https://cdkinsights.dev/docs/configuration/suppressing-findings): Auditable, narrowly scoped suppressions.
- [Troubleshooting](https://cdkinsights.dev/docs/troubleshooting/common-issues): Common setup and runtime issues.