|

Design AWS architectures. Bake in security. Export enforceable policies. Three steps, zero friction.

No account neededClient-side onlyFree forever
01

Design

Choose your path

Auto-DesignSRA-Aligned

Click a template. Watch it assemble. Start at 100% security alignment.

TEMPLATES
Serverless API
3-Tier Web
ETL Pipeline
click
canvas
Manual Drag & Drop

Build from scratch. Drag services from the palette, nest them in VPCs and subnets, connect relationships. Full creative control.

VPC
EC2
RDS
drag & drop
02

Secure

Present on both workflows

AWS Security Reference Architecture (SRA)

The SRA is your authoritative blueprint for how services should be deployed across your accounts in a secure way. Heimdall tracks your architecture against 12 SRA-aligned controls in real-time — remove a security service and the control goes amber. You must risk-accept with a written reason or re-add the service. No silent gaps.

CANVAS
API Gateway
Lambda
WAF
DynamoDB
SRA
IAM
Encrypt
WAF
Logging
100%
03

Export

One click, five files

Instant Download

Markdown for humans, JSON for CI/CD, OPA Rego for Terraform enforcement, an editable draw.io diagram, and a Terraform scaffold. All generated client-side — your architecture never leaves your browser.

MDsecurity-intent.md
JSONsecurity-intent.json
REGOpolicy.rego
DRAWIOarchitecture.drawio
TFmain.tf

That's it. Three steps.

No signup. No billing. No waiting. Open the designer and start building.