Cloud Configuration Review

We review your cloud settings, permissions and architecture against good practice and real attacker behavior.

All services

// Overview

What this service is.

A cloud configuration review checks identity, networking, storage, logging and platform settings for the mistakes that lead to breaches. It is broader and faster than a penetration test, and a good place to start.

Recommendations are practical and prioritized for your team.

// Scope

Scope and coverage.

  • Identity and permission configuration
  • Storage and data exposure settings
  • Network and perimeter configuration
  • Logging, monitoring and alerting
  • Secrets and key management
// Deliverables

What you get.

  • Prioritized findings and fixes
  • Architecture improvement guidance
  • Executive and technical reporting
  • A debrief with your cloud team
// Questions

Frequently asked questions.

Which clouds do you review?

The major providers, scoped to your environment.

Is this the same as a cloud pentest?

No. A review checks settings. A pentest attempts to exploit them.

Do you need write access?

No. Read-only access is typical.

// Get started

Ready to scope this engagement?

Tell us what you want to learn and we will help you scope the right engagement.