# Brookill

*/Startups/Brookill*

## Startup Overview

This autonomous remediation engine fixes cloud infrastructure misconfigurations at the source. It connects directly to version control repositories and executes targeted Terraform pull requests to resolve security vulnerabilities directly in the code.

Cloud security and DevOps teams face an endless queue of configuration alerts from posture management tools. Relying on manual Jira routing creates massive remediation bottlenecks, leaving unpatched infrastructure exposed while security teams wait for developers to write, test, and merge the necessary fixes.

Unlike Prisma Cloud's alert generation or Wiz Auto-Remediate's supervised workflows, this system operates completely autonomously without requiring human intervention. By utilizing an outcome-priced model, it charges strictly for successful remediations, aligning costs directly with resolved vulnerabilities rather than scanned assets.

## Startup Founding Hypothesis

**Approach**: that executes targeted Terraform pull requests to remediate misconfigurations
**Competitors**:
- [Prisma Cloud](/Competitors/Prisma_Cloud)
- [Manual Jira Routing](/Competitors/Manual_Jira_Routing)
- [Wiz Auto-Remediate](/Competitors/Wiz_Auto-Remediate)
**Differentiator2x2**: outcome-priced and completely autonomous without requiring human intervention

## Startup Solution Coordinate

**Solution**: [Infrastructure Remediation Agent](/Agents/Infrastructure_Remediation_Agent)

## Startup Position2x2

```mermaid
quadrantChart
title Remediation Autonomy vs Pricing Model
x-axis "Subscription SaaS" --> "Outcome-Priced"
y-axis "Human Intervention Required" --> "Completely Autonomous"
quadrant-1 "Outcome-Driven Automation"
quadrant-2 "Commoditized Automation"
quadrant-3 "Legacy Workflows"
quadrant-4 "Manual Services"
"Prisma Cloud": [0.25, 0.40]
"Manual Jira Routing": [0.10, 0.10]
"Wiz Auto-Remediate": [0.20, 0.75]
"Brookill": [0.85, 0.85]
```

## Startup Offer

**Proof**:
- Targeting a 95% reduction in manual Jira ticket routing for infrastructure alerts
- Aiming to achieve sub-10-minute mean time to remediation from alert to pull request
- Designed to autonomously resolve the 50 most common cloud posture misconfigurations without human intervention
**Tiers**:
- Name: Metered Remediation · Price: ~$35–$65 per merged PR · Inclusions: Automated generation of Terraform pull requests for standard cloud security misconfigurations, designed to integrate directly with your existing Git provider.
- Name: Enterprise Volume · Price: ~$4,000–$8,000/mo · Inclusions: Up to 300 successful automated remediations per month, including intended support for custom internal Terraform modules and dedicated policy mapping.
**Guarantee**: If an automated pull request fails to pass your continuous integration checks or fails to clear the original security alert upon merge, that remediation is completely unbilled.
**Business Function**: ProvideService
**Objection Handlers**:
- Objection: We cannot let an automated system merge infrastructure code directly. Rebuttal: Brookill only opens pull requests; your engineering team retains absolute control over branch protections and final merge approvals.
- Objection: Our Terraform relies heavily on heavily abstracted internal modules. Rebuttal: The engine is designed to parse your specific module variables and map standard security fixes to your internal schemas.
- Objection: What if the generated fix breaks a downstream dependency? Rebuttal: Because pricing is purely outcome-based, you are never billed for pull requests that fail your CI pipeline tests or get rejected by reviewers.
**Pricing Architecture**: UsageMeter
**Agent Checkout Support**:
- agentic-commerce-protocol

## Startup Brand

**Voice**: Clinical and developer-centric, delivering blunt infrastructure facts with engineering precision.
**Tagline**: Autonomous Terraform pull requests that remediate infrastructure misconfigurations.
**Icon Concept**: bracket
**Palette Intent**: electric-signal
**Visual Identity**: High-contrast neon green against obsidian black dominates the palette, utilizing stark monospace typography that evokes an active command-line interface repairing faulty infrastructure states.
**Archetype Reference**: the-magician

## Startup Buyer Chain

**Chain**: Brookill → Platform Engineering Lead → Cloud Security Team
**Gtm Motion**: Acquires initial usage by offering read-only infrastructure scans that identify specific Terraform misconfigurations without executing changes. Expands revenue through an outcome-based pricing model that charges per successfully merged remediation pull request, scaling naturally as the tool is granted write access to additional cloud environments.
**Agent Channel**: Designed to list in the LangChain Tools registry and OpenAI API schema directories as a structured Terraform remediation endpoint, allowing overarching autonomous security agents to discover and invoke the infrastructure fix capability.
**Primary Channel**: GitHub Marketplace and Terraform Registry directories, targeting DevSecOps engineers searching for native CI/CD security integrations and Infrastructure-as-Code automation plugins.

## Startup Customer Journey

```mermaid
flowchart LR; A[GitHub Marketplace] --> B[Read-Only Scan]; B --> C[Terraform Misconfiguration]; C --> D[Remediation Pull Request]; D --> E[Continuous Integration Check]; E --> F[Production Cloud Environment]; F --> G[Internal Terraform Module];
```

## Startup Proof Points

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**Pilot Goals**:
- A 14-day restricted-environment pilot aiming to successfully open and merge 20 automated Terraform pull requests without breaking continuous integration checks.
- A 30-day custom-module proof of concept targeting a sub-10-minute mean time to remediation for simulated cloud posture misconfigurations.
**Target Metrics**:
- Target: 95% reduction in manual Jira ticket routing for cloud infrastructure alerts
- Target: Sub-10-minute mean time to remediation from alert trigger to open pull request
- Target: Autonomous resolution of the 50 most common cloud posture misconfigurations
- Aim: 100% cost avoidance for pull requests that fail continuous integration tests
**Target Case Studies**:
- Targeting a Mid-Market Fintech Cloud Security Lead: Brookill automatically opens Terraform pull requests for AWS S3 and IAM alerts, eliminating manual Jira ticketing.
- Targeting an Enterprise DevOps Director: Brookill maps security fixes to custom internal Terraform modules, clearing the compliance alert backlog without bypassing existing branch protections.
- Targeting a Series C SaaS Infrastructure Manager: Brookill applies metered remediation during compliance audits, resolving common posture misconfigurations and ensuring zero billing for rejected code.
**Testimonial Targets**:
- Cloud Security Engineer: Expresses relief that Brookill parses internal Terraform schemas accurately, saving hours of writing boilerplate infrastructure code.
- VP of Engineering: Validates that Brookill strictly adheres to branch protections by only opening pull requests, maintaining total human control over merge approvals.
- DevSecOps Lead: Highlights the risk-free nature of the usage-metered pricing, confirming they only pay when a merged pull request successfully clears the original alert.

## Startup Top Risks

**Risks**:
- Severity: existential · Description: Autonomous Terraform pull requests inadvertently break customer production infrastructure, causing severe downtime and immediate churn. · Mitigation Status: in-progress
- Severity: high · Description: Enterprise security teams refuse to grant the repository write access necessary for fully autonomous remediation. · Mitigation Status: unmitigated
- Severity: high · Description: Outcome-based pricing models fail to generate sustainable revenue if customers produce a high volume of complex misconfigurations that require costly compute to analyze. · Mitigation Status: in-progress
- Severity: moderate · Description: Incumbents like Wiz and Prisma Cloud upgrade their native auto-remediation features to execute infrastructure-as-code pull requests directly. · Mitigation Status: unmitigated

## Startup Competitors

- [Prisma Cloud](/Competitors/Prisma_Cloud) — Incumbent
- [Manual Jira Routing](/Competitors/Manual_Jira_Routing) — Status Quo
- [Wiz Auto-Remediate](/Competitors/Wiz_Auto-Remediate) — Incumbent Feature
- [Orca Security](/Competitors/Orca_Security) — Incumbent
- [Tenable Cloud Security](/Competitors/Tenable_Cloud_Security) — Incumbent

## Startup Story Brand

**Hero**:
- **Need**: to be the architect of secure systems, not the janitor of alerts
- **Want**: to fix cloud misconfigurations without spending all day routing Jira tickets
- **Identity**: the Cloud Security Engineer at a growing SaaS company
**Plan**:
- Step: Submit · Detail: Provide read access to your cloud security alerts and your Terraform repositories.
- Step: Verify · Detail: Review the pull requests generated in GitHub or GitLab to ensure they meet your internal standards.
- Step: Approve · Detail: Merge the fix into your main branch and watch the security alert clear automatically.
**Guide**:
- **Empathy**: Does your remediation process still stall because developers ignore the Jira tickets you send?
**Problem**:
- **Villain**: alert fatigue
- **External**: Sifting through hundreds of Wiz or Prisma Cloud alerts results in a backlog of manual Jira tickets that engineers ignore.
- **Internal**: You feel like a glorified traffic controller instead of a high-value security architect.
- **Philosophical**: Cloud infrastructure was built for automation, not manual ticket routing.
**Success**: Security alerts resolve in minutes through code, not tickets, with your engineering team maintaining total control over the merge.
**One Liner**: What if cloud security alerts fixed themselves? Brookill executes targeted Terraform pull requests, eliminating the manual Jira backlog.
**Positioning**:
- **So That**: alerts are resolved via code instead of manual coordination
- **Unlike**: Manual Jira Routing
- **For Whom**: Cloud Security Engineers managing Terraform
- **Category**: Autonomous Infrastructure Remediation
**Call To Action**:
- **Direct**: Submit a PR
- **Transitional**: Remediation Logic Schema
**Failure Stakes**:
- Unpatched misconfigurations leave high-risk vulnerabilities exposed
- Security engineers burn out on repetitive manual ticket routing
- Mean time to remediation stretches into weeks or months
**Transformation**:
- **To**: the infrastructure's silent guardian
- **From**: the security engineer buried in Jira ticket backlogs
**Controlling Idea**: Cloud security should be a pull request, not a ticket.

## Startup Token Hero

**Genre**: founding-hypothesis
**Rendered**: What if cloud security alerts fixed themselves? Brookill executes targeted Terraform pull requests, eliminating the manual Jira backlog.
**Mechanism**: spine-derived-v1
**Template Id**: spine-founding-hypothesis
**Vocab Fingerprint**: b456e8b1cd91fdcd

## Startup Token Positioning

**Genre**: moore-positioning
**Rendered**: Autonomous Infrastructure Remediation for Cloud Security Engineers managing Terraform. Unlike Manual Jira Routing — alerts are resolved via code instead of manual coordination.
**Mechanism**: spine-derived-v1
**Template Id**: spine-moore-positioning
**Vocab Fingerprint**: a24c3570622f7d13

## Startup Token Pitch Deck

**Genre**: pitch-deck
**Rendered**: Problem: Sifting through hundreds of Wiz or Prisma Cloud alerts results in a backlog of manual Jira tickets that engineers ignore.
Solution: What if cloud security alerts fixed themselves? Brookill executes targeted Terraform pull requests, eliminating the manual Jira backlog.
Customer: Cloud Security Engineers managing Terraform
Unlike: Manual Jira Routing
**Mechanism**: spine-derived-v1
**Template Id**: spine-pitch-deck
**Vocab Fingerprint**: 50fa1d5a793de558

## Startup Token M E D D P I C C

**Pain**: Sifting through hundreds of Wiz or Prisma Cloud alerts results in a backlog of manual Jira tickets that engineers ignore.
**Metrics**: Target: Security alerts resolve in minutes through code, not tickets, with your engineering team maintaining total control over the merge.
**Rendered**: Pain: Sifting through hundreds of Wiz or Prisma Cloud alerts results in a backlog of manual Jira tickets that engineers ignore.
Economic buyer: Platform Engineering Lead
Metrics: Target: Security alerts resolve in minutes through code, not tickets, with your engineering team maintaining total control over the merge.
Competition: Manual Jira Routing
**Mechanism**: spine-derived-v1
**Competition**: Manual Jira Routing
**Economic Buyer**: Platform Engineering Lead
**Vocab Fingerprint**: ac402786c95939d7

## Startup Token Cold Email

**Genre**: cold-email
**Rendered**: Subject: Autonomous Infrastructure Remediation for Cloud Security Engineers managing Terraform

Cloud Security Engineers managing Terraform — Sifting through hundreds of Wiz or Prisma Cloud alerts results in a backlog of manual Jira tickets that engineers ignore. What if cloud security alerts fixed themselves? Brookill executes targeted Terraform pull requests, eliminating the manual Jira backlog.
**Mechanism**: spine-derived-v1
**Template Id**: spine-cold-email
**Vocab Fingerprint**: ac09727afad700e6

## Startup Token Agent Spec

**Genre**: ai-agent-spec
**Rendered**: Autonomous Infrastructure Remediation. What if cloud security alerts fixed themselves? Brookill executes targeted Terraform pull requests, eliminating the manual Jira backlog. Serves Cloud Security Engineers managing Terraform.
**Mechanism**: spine-derived-v1
**Template Id**: spine-ai-agent-spec
**Vocab Fingerprint**: bfeaf31093cc80d2

## Neighborhood

### Candidate solutions

- [Source Heavy Plate Welders](/Problems/Source_Heavy_Plate_Welders) — candidate solution for · Problems

### What it offers

- [Weld Bead Vision](/Software/Weld_Bead_Vision) — offers · Software
- [Infrastructure Remediation Agent](/Agents/Infrastructure_Remediation_Agent) — offers · Agents
- [Calibrate Forge](/Agents/Calibrate_Forge) — offers · Agents

### Competitors

- [Manual Jira Routing](/Competitors/Manual_Jira_Routing) — competes with · Competitors
- [Prisma Cloud](/Competitors/Prisma_Cloud) — competes with · Competitors
- [Tenable Cloud Security](/Competitors/Tenable_Cloud_Security) — competes with · Competitors
- [Orca Security](/Competitors/Orca_Security) — competes with · Competitors
- [Wiz Auto-Remediate](/Competitors/Wiz_Auto-Remediate) — competes with · Competitors
- [LinkedIn Recruiter](/Competitors/LinkedIn_Recruiter) — competes with · Competitors
- [onsite coupon testing](/Competitors/onsite_coupon_testing) — competes with · Competitors
- [Indeed Sponsored Jobs](/Competitors/Indeed_Sponsored_Jobs) — competes with · Competitors
- [Specialized Trade Recruiters](/Competitors/Specialized_Trade_Recruiters) — competes with · Competitors
- [Workday Recruiting](/Competitors/Workday_Recruiting) — competes with · Competitors
- [Onsite Coupon Tests](/Competitors/Onsite_Coupon_Tests) — competes with · Competitors
- [onsite physical coupon tests](/Competitors/onsite_physical_coupon_tests) — competes with · Competitors
- [Tradesmen International](/Competitors/Tradesmen_International) — competes with · Competitors
- [onsite physical testing](/Competitors/onsite_physical_testing) — competes with · Competitors
- [physical coupon tests](/Competitors/physical_coupon_tests) — competes with · Competitors
- [Physical Coupon Testing](/Competitors/Physical_Coupon_Testing) — competes with · Competitors
- [Trade Recruiters](/Competitors/Trade_Recruiters) — competes with · Competitors

### Embodies

- [Agent](/Theses/Agent) — embodies · Theses
- [Software](/Theses/Software) — embodies · Theses

### Composed of

- [Coupon Pre-Screening Service](/Services/Coupon_Pre-Screening_Service) — composes · Services
- [Weld Integrity Inspector Agent](/Agents/Weld_Integrity_Inspector_Agent) — composes · Agents
- [Structural Tolerance Worker](/Agents/Structural_Tolerance_Worker) — composes · Agents
- [Bead Profile Vision Engine](/Agents/Bead_Profile_Vision_Engine) — composes · Agents
- [Torch Angle Calibration API](/Agents/Torch_Angle_Calibration_API) — composes · Agents
- [Video Geometry Engine](/Agents/Video_Geometry_Engine) — composes · Agents
- [Structural Skill Verification Service](/Services/Structural_Skill_Verification_Service) — composes · Services
- [Bead Profile Scoring Agent](/Agents/Bead_Profile_Scoring_Agent) — composes · Agents
- [Code Compliance Worker](/Agents/Code_Compliance_Worker) — composes · Agents
- [Weld Telemetry Extraction API](/Agents/Weld_Telemetry_Extraction_API) — composes · Agents

### Who it serves

- [Bulk Material Handling & Conveyance OEMs](/CompanyTypes/Bulk_Material_Handling_&_Conveyance_OEMs) — serves · CompanyTypes

### Similar Startups

- [Wavoblem](/Startups/Wavoblem) — similar · Startups
- [Aurossom](/Startups/Aurossom) — similar · Startups
- [Auroraleap](/Startups/Auroraleap) — similar · Startups
- [Zenentinel](/Startups/Zenentinel) — similar · Startups
- [Autellar](/Startups/Autellar) — similar · Startups
- [Agentsarc](/Startups/Agentsarc) — similar · Startups
- [Aspenmere](/Startups/Aspenmere) — similar · Startups
- [Cloudop](/Startups/Cloudop) — similar · Startups
- [Radock](/Startups/Radock) — similar · Startups
- [Pylonrange](/Startups/Pylonrange) — similar · Startups
- [Domill](/Startups/Domill) — similar · Startups
- [Accirm](/Startups/Accirm) — similar · Startups
- [Security](/Startups/Security) — similar · Startups
- [Spot Strike Labs](/Startups/Spot_Strike_Labs) — similar · Startups
- [Abirritative](/Startups/Abirritative) — similar · Startups
- [Architecturepace](/Startups/Architecturepace) — similar · Startups
- [Beadfield](/Startups/Beadfield) — similar · Startups
- [Verton](/Startups/Verton) — similar · Startups
- [Lumechanic](/Startups/Lumechanic) — similar · Startups
- [Engineharbor](/Startups/Engineharbor) — similar · Startups