Cloud Imports

netbobr can import native cloud firewall configurations from 6 platforms, extracting flows and analyzing them against all 6 compliance frameworks. Both the browser app (drag-and-drop) and the CLI support cloud format imports with automatic format detection.

Format Comparison

Match rates are measured against a 400-rule CSV baseline covering wide-open rules, risky ports, container ports, database ports, ICMP, port ranges, protocol variety, CIDR ranges, and edge cases.

How It Works

1. Export your firewall configuration from your cloud provider using the provider's CLI or console
2. Upload the exported file by dragging it onto the browser import area, or pipe it to the CLI
3. Analyze -- netbobr automatically detects the format, extracts individual flows, and evaluates each flow against all 6 compliance frameworks (PCI-DSS, CIS Controls, NIST 800-53, NIS2, DORA, MITRE ATT&CK)

Each parsed flow receives a risk score (0-100), compliance findings, and zone assignments just like manually entered flows.

Browser vs CLI

Both the browser and CLI use automatic format detection -- you do not need to specify the format manually (though the CLI accepts --cloud-format for explicit selection).

The browser includes a Terraform HCL parser that handles basic .tf files. The CLI does not support HCL -- use terraform show -json to convert HCL to plan JSON first.

When flows match between CLI and browser, risk scores, risk levels, and verdicts are identical (100% field accuracy).

Platform Pages

• AWS Security Groups -- aws ec2 describe-security-groups output
• Azure NSG -- az network nsg show / az network nsg list output
• GCP Firewall Rules -- gcloud compute firewall-rules list output
• Terraform Plan JSON -- terraform show -json output
• Terraform HCL -- .tf files (browser only)
• Kubernetes NetworkPolicy -- kubectl get networkpolicy -o yaml output

See Also

• CSV Import -- bulk-validate up to 500 firewall rules from a CSV file
• GitHub Actions -- integrate cloud format analysis into CI/CD pipelines