Abstract: Technology for detecting and remediating security vulnerabilities in view of one or more computing policies. An example method may involve receiving environment data of a computing environment, the environment data comprising a configuration value of a computing device in the computing environment; accessing an index data structure derived from a computing policy, wherein the index data structure associates an entry of the computing policy with one or more computing features of the computing environment; determining, by a processing device, whether a security vulnerability exists based on the environment data and the index data structure; and providing feedback regarding the security vulnerability and the computing policy.