Project #3 · Security & Governance
ClusterCollie AI Security & Compliance Tool
A read-only Nutanix cluster compliance scanner that translates raw audit findings into governance-friendly language mapped to CIS Benchmarks and NIST 800-53 control families.
What It Does
Most infrastructure engineers can run a security scan. Far fewer can translate the raw findings into language a compliance officer, auditor, or governance committee actually needs. This tool connects to a Nutanix Prism Central API in read-only mode (via direct REST calls or the Nutanix MCP server) and audits cluster configuration against a security checklist — then uses an LLM to turn the findings into a structured, human-readable compliance report.
Audit Checklist Coverage
Flow Virtual Networking
Checks whether Flow Virtual Networking micro-segmentation policies are defined and enforced across relevant VLANs/subnets.
Credential Hygiene
Flags default or unrotated admin credentials on Prism Central and Prism Element, and checks password policy configuration.
AHV Host Exposure
Reviews AHV host network configuration for unnecessary open ports and services relative to a defined baseline.
Access Control
Audits role-based access control (RBAC) assignments for overly broad admin privileges.
Encryption Status
Checks whether data-at-rest encryption is enabled where required by policy.
Audit Logging
Verifies that logging and alerting are enabled and retained per a defined retention window.
How the Scan Works
Authenticates to Prism Central using a read-only service account or the Nutanix MCP server — no write operations are performed against the cluster.
A Python engine pulls configuration data and evaluates it against the checklist above, producing a structured pass/fail/warning result set.
Findings are passed to an LLM that drafts plain-language explanations of each finding, its risk, and remediation guidance — loosely mapped to CIS Benchmark control language and NIST SP 800-53 control families (e.g., Access Control (AC), Audit and Accountability (AU), System and Communications Protection (SC)).
Produces a shareable compliance report suitable for governance review, audit prep, or leadership reporting.
Why This Pairing Is Rare
Most Nutanix-certified practitioners come from a pure infrastructure background. This project combines CompTIA Security+ security fundamentals with Nutanix NCA / NCP-MCI platform expertise — a pairing that lets it speak both languages: the technical language of AHV/Prism configuration and the governance language of CIS/NIST-aligned compliance reporting. That combination is the differentiator, not just the automation itself.
Status
This tool is in the planning/build phase. Once available, this page will include installation steps, sample report output, and configuration guidance for connecting to your Prism Central instance in read-only mode.