#Israel #Tel Aviv #AMPHI #Act Security #Cloud Copilot

Act Security Launches Amphi

In a significant leap for cloud security, Act Security has unveiled Amphi, a comprehensive toolkit that aims to simplify and enhance the management of cloud access policies. This tool, which is entirely free and open-source, is engineered to eliminate the uncertainties that often accompany policy management in cloud environments.

Understanding Amphi

Launched on September 2, 2026, Amphi is built on the foundation of Cloud Copilot, an acclaimed open-source AWS IAM tool developed by David Kerber and now under the stewardship of Act Security. This new suite covers all aspects of cloud policy management— from reading and testing to simulating and optimizing policies. The goal is clear: to provide clarity and streamline the often complex and time-consuming task of managing access controls in the cloud.

Amphi empowers teams by facilitating a thorough understanding of policies at a glance, allowing users to simulate impacts prior to deployment, and compress policies to fit specific character limits without compromising access security. With the ability to export policies directly as infrastructure as code and map their reachability across the entire cloud environment, Amphi ensures that cloud access management is both efficient and reliable.

The Importance of Cloud Access Management

Effective management of cloud access policies is crucial for maintaining robust cloud security. Misconfigured permissions can create significant vulnerabilities, making it imperative for organizations to have reliable tools to manage access confidently. Act Security recognizes that while developers are eager to rectify access sprawl, the onus often falls on infrastructure and platform teams to manage these complexities. Amphi not only alleviates this burden but also promotes a community-driven approach to innovation in cloud security.

Jonathan Langer, the co-founder and CEO of Act Security, emphasizes the importance of this initiative: "Every CISO we talk to already wants to fix access sprawl, but it's their infrastructure and platform teams who actually have to manage the access behind that decision." By acquiring Cloud Copilot and building Amphi, Act Security is focused on supporting the engineers who are actively involved in managing cloud environments, ensuring they have the clarity and freedom to control access effectively.

Features Designed for Engineers

Amphi includes various tools designed to cater specifically to the needs of engineers:

• - Understand: Provides a clear overview of what each policy permits.
• - Simulate: Allows for safe testing of policy impacts before they are deployed.
• - Optimize: Helps compress policies to adhere to character limits while maintaining security.
• - Enforce: Facilitates the export of policies as infrastructure as code.
• - Query: Maps out reachability throughout the cloud infrastructure.

These tools come in three forms: a CLI that operates offline, a browser-based version powered entirely on client-side code, and full source code available on GitHub. Setting up Amphi is straightforward, requiring only one npm command, and it remains open to community contributions via issues and pull requests, continuing the collaborative spirit of Cloud Copilot.

In the words of David Kerber, Amphi's creator, "I built Cloud Copilot tools because I wanted straight answers the AWS docs couldn't give me. It helps engineers understand actual, effective permissions across principals, resources, and accounts." Amphi continues this mission, acting as a free, community-focused toolkit for engineers securing cloud environments daily.

A Commitment to Open-Source Innovation

Emerging from stealth mode in July 2026 with an impressive $60 million in funding, Act Security's mission is to eradicate access pathways leading to cloud breaches and AI-driven attacks. By meticulously constraining what applications, workloads, and AI agents can access, they reinforce security at the infrastructure level. Amphi is free for users and requires no account or email to access, making it readily available for all cloud teams.

For more information on Amphi and to access the full toolkit, visit Act Security's website. Their commitment to enhancing cloud security through open-source solutions positions them as a leader in the industry, paving the way for greater innovation in cloud access management.

About Act Security

Act Security is an action-centric cloud security organization that focuses not just on identifying security issues but on eliminating the factors that make them viable. With a unique perspective on operational needs and backed by established cloud-native controls, Act seeks to help organizations mitigate attack paths, scale AI responsibly, and maintain consistent compliance. They have secured investments from reputable firms such as Team8, Bessemer Venture Partners, and Notable Capital, continuing to grow their influence and offerings in the cloud security domain.

For further inquiries or assistance, reach out to the Act Security media team.