# Quickstart

Seamless infrastructure security starts with your IAC code — and Starchitect.ai makes it effortless to scan, fix, and ensure compliance right from your browser.<br>

{% embed url="<https://www.youtube.com/watch?v=3R7_t05HSVY>" %}

### Upload your IAC

Simply drag and drop your Terraform configuration files (`.tf` files) into the browser or click the **Upload** button.

Rest assured, your code stays on your machine—Starchitect runs all scans locally without sending any data to our servers.

<figure><img src="https://3969794784-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwkFlMpcIjA6BTz8XZI4X%2Fuploads%2FDYHiEsdJkgOJkudM7r1u%2FuploadIAC.gif?alt=media&amp;token=37f2167b-e035-4e22-b98c-5fc6fad513f7" alt=""><figcaption></figcaption></figure>

### Review the Scan Results

<figure><img src="https://3969794784-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwkFlMpcIjA6BTz8XZI4X%2Fuploads%2FdyQVyxsdJhI6r1gEjNL4%2Fgitbook-score.jpg?alt=media&amp;token=3b27ff60-b7f1-4dd7-a8a1-99ae43194bb2" alt=""><figcaption></figcaption></figure>

Starchitect.ai will immediately scan your Terraform files for security vulnerabilities and misconfigurations.

The results will show a **service-wise summary**, breaking down issues per service (like EC2, RDS, etc.), so you can focus on what's critical.

Each issue is tagged with the **specific line number** and a detailed explanation of what needs to be fixed.

### Fix Issues in AI

Starchitect not only points out the problems but also gives you automatic solutions using our fine-tuned model.

You can make fixes directly in your Terraform code, with Starchitect updating the results dynamically.

<figure><img src="https://3969794784-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwkFlMpcIjA6BTz8XZI4X%2Fuploads%2FEDUb69RnCQRSO0H7h6VP%2Ffix2.mov%20(1).gif?alt=media&amp;token=619fa8e2-36a1-4421-b74f-413d905f56bf" alt=""><figcaption></figcaption></figure>

### Generate  Reports

After resolving the issues, you'll be able to generate detailed reports that comply with widely-recognized standards like **CIS Benchmarks, SOC2.** and Starchitect's foundational best practices. We're also expanding to include more regional regulations, such as Singapore's **MAS Technology Risk Management Guidelines** and Malaysia's **Risk Management in Technology (RMiT)**. Stay tuned for updates on our updates [page](https://headwayapp.co/starchitect-updates)**.**

These reports will help you ensure that your infrastructure meets industry standards, making audits and security reviews a breeze.

<figure><img src="https://3969794784-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwkFlMpcIjA6BTz8XZI4X%2Fuploads%2FbuVTGeL4ZuiXehB82yun%2Freport.gif?alt=media&amp;token=bb5fd1fa-e98a-4d4d-817c-b7e994bf4c1b" alt=""><figcaption></figcaption></figure>


# Try Sample IAC

Don't have Terraform code to test? Use our sample to explore the full capabilities of the tool.\
\
<https://github.com/nonfx/example-three-tier-architecture.git>


# How Fix With AI Credits Works

"Fix with AI" lets you automatically improve and fix your Terraform configurations. You begin with a complimentary credit balance to test the feature. Once you’ve experienced its value, you can easily top up your credits to continue refining your infrastructure code.

### Free Credits

* **500 credits** are provided at no charge to all users.
* Use these initial credits to experiment with the AI-driven fix process and understand how it can help fix your Terraform code.

### Purchasing Additional Credits

* After using your free credits, you can buy more as needed.
* Each **$10 purchase** grants **1,000 credits**.
* Credits are consumed based on the size and complexity of the Terraform configuration being fixed.

### Tips for Effective Use

* Start small: Use your free 500 credits on a small Terraform snippet to see how it works.
* Budget accordingly: Plan your purchases and usage based on project scope.
* Monitor your balance: Keep an eye on your remaining credits so you know when it’s time to buy more.

### Getting Support

If you have questions about credits, billing, or how to get the most out of the “Fix with AI” feature, . Please reach out at ***<support@nonfx.com>.***


# What is Stance?

coming soon..


# Starchitect's Stance

coming soon..


# Center for Internet Security (CIS)

coming soon.

### Benchmarks

<table data-card-size="large" data-view="cards"><thead><tr><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th><th data-hidden data-card-cover data-type="files"></th><th data-hidden></th></tr></thead><tbody><tr><td><strong>CIS AWS Foundations Benchmark</strong></td><td>Technology Benchmark</td><td><a href="https://aws.amazon.com/what-is/cis-benchmarks/">https://aws.amazon.com/what-is/cis-benchmarks/</a></td><td><a href="https://content.gitbook.com/content/wkFlMpcIjA6BTz8XZI4X/blobs/QmwUL5On4pAnoz1lNPrW/2.png">2.png</a></td><td></td></tr><tr><td><strong>CIS AWS Database Services Benchmark</strong></td><td>Technology Benchmark</td><td><a href="https://aws.amazon.com/what-is/cis-benchmarks/">https://aws.amazon.com/what-is/cis-benchmarks/</a></td><td><a href="https://content.gitbook.com/content/wkFlMpcIjA6BTz8XZI4X/blobs/9XuHO6ojBfBe00xsZ506/3.png">3.png</a></td><td></td></tr><tr><td><strong>CIS AWS Compute Services Benchmark</strong></td><td>Technology Benchmark</td><td><a href="https://www.gitbook.com/integrations#interactive">https://www.gitbook.com/integrations#interactive</a></td><td><a href="https://content.gitbook.com/content/wkFlMpcIjA6BTz8XZI4X/blobs/8fE27cd7vlQIksSg7SoR/4.png">4.png</a></td><td></td></tr></tbody></table>


# MAS Technology Risk Management Guideline

coming soon.


# Service Organization Control Type 2 (SOC2)

coming soon.


# NIST Special Publication 800-53 Revision 5

coming soon.


# ISO/IEC 27001:2022(E)

coming soon.