Batfish Review: Catch Config Bugs Before They Leak Data
Most breaches start with a config mistake, not a clever attacker. An ACL rule one line out of order, a firewall permit a few subnets wider than intended, a route that silently changes paths during a maintenance window — none of these produce an alert. And they just quietly widen the surface until someone’s data walks out. Batfish is the pre-deployment check that finds those bugs before traffic ever moves. ...