Valqore provides safety-first guardrails for AI-driven cloud and Kubernetes operations. It scans infrastructure configurations (Kubernetes, Terraform, cloud resources) against 1,370 rules covering security, cost, sustainability, compliance, and AI governance, delivering a unified score and verdict to proactively manage risk.

How It Works

Valqore analyzes infrastructure-as-code and live cloud resources using a deterministic engine. It applies 1,370 built-in rules across security, cost, GreenOps, compliance, and AI governance, outputting a 0-100 score and a PASS/WARN/BLOCK verdict. AI-powered features provide explanations and remediation advice, with a fine-tuned offline model.

Quick Start & Requirements

• Install: Docker image ghcr.io/valqore/engine:latest; Kubernetes via Helm (helm install valqore oci://ghcr.io/valqore/charts/valqore-stack).
• Run: docker run ... valqore evaluate manifest.yaml --score.
• Prerequisites: Docker. Cloud credentials (AWS/Azure) for cloud scanning. License required for AI features.
• Links: Website: valqore.io, Demo: calendly.com/tuncvalqore.

Highlighted Details

• GreenOps: Integrated CO2e emissions tracking, greener region suggestions, and carbon budget enforcement.
• AI Scan & Chat: One command for evaluation, drift detection, and AI-powered explanations; offline model powers interactive chat.
• AI Governance: Detects ungoverned AI/ML workloads and enforces EU AI Act compliance.
• AI Agent Fleet Governance: Audits AI agents, scores posture, provides fleet verdict (GOVERNED/PARTIAL/UNGOVERNED), exports OSCAL.
• Supply Chain Integrity: Public Docker images are cryptographically signed with SBOMs (SPDX).

Maintenance & Community

Contact: tunc@valqore.io. Demo booking link provided. No other community channels or contributor details are highlighted.

Licensing & Compatibility

Core deterministic engine is free and tokenless (public Docker image). AI features require a license. Operates read-only across multi-cloud (AWS, Azure, GCP) and Kubernetes.

Limitations & Caveats

AI features require a license. A web dashboard is "coming soon". The core engine is distributed as a compiled native binary (no readable source). Default policy is strict, requiring user configuration for risk tolerance.