GCP IAM Policy Analyzer

Paste a GCP IAM allow policy (get-iam-policy --format=json) or a custom role (iam roles describe --format=json). Bindings & permissions are scored for GCP-specific risks — allUsers/allAuthenticatedUsers, primitive owner/editor, service-account impersonation & key creation, setIamPolicy, wildcard custom-role permissions. Nothing leaves your browser.