Cloud
Cloud security posture assessment
We analyze the configuration of your cloud accounts and subscriptions to find exposures, excessive permissions and public resources, and deliver a remediation plan ordered by risk.
What's included
Resource inventory
Survey of accounts, regions and services in use, including forgotten resources.
CIS Benchmarks review
Comparison of your current configuration against CIS controls for your provider.
Public exposure
Detection of buckets, databases, snapshots and endpoints reachable from the internet.
Logging and auditing
Verification of CloudTrail, Activity Log or Cloud Audit Logs and their retention.
Encryption and keys
Review of encryption at rest and in transit and of key management (KMS).
Deliverables
Everything is documented and handed over to your team.
- Executive report for leadership
- Technical report with every finding and its fix
- Prioritized 90-day remediation plan
- Results presentation session
How we do it
- 1
Assessment
Interviews with the team and review of cloud accounts, repositories and pipelines.
- 2
Prioritized plan
Findings ranked by impact and effort, with owners and deadlines.
- 3
Implementation
We work alongside your team on infrastructure and pipeline changes.
- 4
Handover
Documentation, training and follow-up support.
Technologies and frameworks: AWS, Microsoft Azure, Google Cloud, Prowler, ScoutSuite, AWS Security Hub, Microsoft Defender for Cloud
Other services
Take the next step
Interested in Cloud security posture assessment? Let's talk
Tell us about your stack and priorities. We'll reply with a proposal for next steps.