robots.txt
# CDK Insights - robots.txt
#
# A single `User-agent: *` group governs ALL crawlers, including AI / LLM
# crawlers (GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot,
# Claude-User, PerplexityBot, Google-Extended, CCBot, Bytespider). They are
# intentionally ALLOWED on public pages and blocked from the app/auth routes
# below. We deliberately avoid separate per-bot groups so the Disallow list
# can't drift out of sync - a more specific group would override these rules.
User-agent: *
Allow: /
# Sitemap
Sitemap: https://cdkinsights.dev/sitemap.xml
# Disallow admin and private areas
Disallow: /api/
Disallow: /_next/
Disallow: /dashboard/
Disallow: /account/
Disallow: /billing/
Disallow: /admin/
Disallow: /login
Disallow: /reset-password
Disallow: /success
Disallow: /upgrade-success
Disallow: /trial
Disallow: /beta
Disallow: /team/
# Allow important public pages
Allow: /pricing
Allow: /feedback
Allow: /integrations
Allow: /use-cases
Allow: /alternatives
Allow: /aws-cdk-security-scanner
Allow: /cdk-static-analysis
# Allow all documentation pages
Allow: /docs
Allow: /docs/*
# Allow legal pages
Allow: /privacy
Allow: /terms
Allow: /security
Allow: /refund
Allow: /sla
Allow: /cookies
# Crawl delay (ignored by Google; respected by some other crawlers)
Crawl-delay: 1
llms.txt
# CDK Insights
> CDK Insights is a CDK-native AWS security, cost, reliability, and operational analysis tool. It synthesises AWS CDK applications, runs 145 deterministic static rules across 36 AWS services, maps findings back to CDK source locations, and can add optional AI-powered explanations and fixes.
CDK Insights is a TypeScript CLI distributed as the `cdk-insights` npm package. Static analysis is free and local, requires no account, and does not upload source code. Install or run it with Node.js 22 or later: `npx cdk-insights scan`.
Canonical website: https://cdkinsights.dev
Package: https://www.npmjs.com/package/cdk-insights
Source and issues: https://github.com/instancelabs/cdk-insights
Publisher: Instance Labs Ltd, UK company number 17053174
Contact: support@cdkinsights.dev
Product facts last reviewed: 2026-07-28
## Start here
- [CDK Insights homepage](https://cdkinsights.dev): Product overview, workflow, terminal demonstration, trust information, and free installation path.
- [Documentation](https://cdkinsights.dev/docs): Complete CLI and product documentation.
- [Quick start](https://cdkinsights.dev/docs/getting-started/quick-start): Install CDK Insights and run the first scan.
- [AWS CDK security scanner](https://cdkinsights.dev/aws-cdk-security-scanner): How CDK-native scanning, construct mapping, and source attribution work.
- [Rule library](https://cdkinsights.dev/rules): Browse all 145 static rules and their remediations.
- [Complete LLM reference](https://cdkinsights.dev/llms-full.txt): Self-contained product, CLI, model, privacy, and integration reference.
## Core capabilities
- [Static analysis](https://cdkinsights.dev/docs/features/static-analysis): Deterministic security, cost, reliability, performance, and operational checks across 36 AWS services.
- [AI recommendations](https://cdkinsights.dev/docs/features/ai-recommendations): Optional Bedrock analysis of privacy-safe, user-authored resources with explanations and concrete CDK fixes.
- [AI models and credit rates](https://cdkinsights.dev/docs/features/ai-models): Available models, quality guidance, and transparent per-resource credit multipliers.
- [Deployment preview](https://cdkinsights.dev/docs/features/infrastructure-intelligence): Baselines, architecture graphs, attack paths, resilience simulation, live CloudFormation comparison, and project policy gates.
- [Plan advisor](https://cdkinsights.dev/docs/features/plan-advisor): Estimate monthly credits from estate size and infrastructure Git history without spending credits.
- [Architecture documentation](https://cdkinsights.dev/docs/features/architecture-documentation): Generate version-controlled Markdown and Mermaid documentation from `cdk.out`.
- [Incident learning](https://cdkinsights.dev/docs/features/incident-learning): Convert a structured incident into a deterministic local rule and postmortem.
- [MCP integration](https://cdkinsights.dev/docs/features/mcp-integration): Read-only local tools for compatible editors and AI assistants.
- [Output formats](https://cdkinsights.dev/docs/features/output-formats): Table, JSON, Markdown, summary, SARIF, and GitHub Actions output.
## CI and integrations
- [GitHub Action](https://cdkinsights.dev/docs/features/github-action): Pull-request comments, SARIF upload, severity gates, and Well-Architected pillar gates.
- [CI/CD integration](https://cdkinsights.dev/docs/advanced/ci-cd-integration): Run the CLI in GitHub Actions, GitLab CI, Jenkins, CircleCI, or another Node.js pipeline.
- [Official GitHub Action repository](https://github.com/instancelabs/cdk-insights-action): Action source, inputs, outputs, examples, and release history.
- [Integrations](https://cdkinsights.dev/integrations): Supported developer workflows and reporting integrations.
## Evaluation and trust
- [CDK Insights alternatives](https://cdkinsights.dev/alternatives): Factual comparison with CDK Nag, Checkov, cfn-lint, cfn_nag, and AWS Config.
- [Use cases](https://cdkinsights.dev/use-cases): Security, cost, compliance, platform engineering, and CI use cases.
- [Security and privacy](https://cdkinsights.dev/security): Data handling, infrastructure, disclosure, and security controls.
- [Pricing and estate calculator](https://cdkinsights.dev/pricing): Free, Pro, and Team allowances, model rates, add-on credits, and usage estimator.
## Optional
- [Installation reference](https://cdkinsights.dev/docs/getting-started/installation): Installation methods and environment requirements.
- [Configuration](https://cdkinsights.dev/docs/configuration/basic-setup): Project configuration and CLI defaults.
- [Suppressing findings](https://cdkinsights.dev/docs/configuration/suppressing-findings): Auditable, narrowly scoped suppressions.
- [Troubleshooting](https://cdkinsights.dev/docs/troubleshooting/common-issues): Common setup and runtime issues.
