01
Identities and permissions
Over-privileged users and roles, access keys and multi-factor authentication.
Cloud Security Review
Most cloud breaches come from a setting, not a software flaw. We review your AWS, Azure and Google Cloud accounts with that in mind.
What it is
In the cloud the provider protects the infrastructure, but the settings inside your account are your responsibility. A storage bucket left public, a user with more rights than needed or a management port open to the internet can each cause a major data leak. In a cloud security review we go through identity, network, data and logging, rank the findings by priority and show how to fix each one.
What we cover
0602
Storage
Public or unencrypted storage and backups.
03
Network rules
Ports open to the internet, security groups and management access.
04
Logging and monitoring
Whether audit logs are on and retained, and alert rules.
05
Kubernetes and containers
Cluster access, image security and how secrets are stored.
06
Identity platforms
Roles and app permissions in identity systems such as Entra ID and Google Workspace.
How we work
- 01
Access
A read-only, time-limited access is set up for the review.
- 02
Automated checks
Accounts are checked automatically against the CIS Benchmarks.
- 03
Expert review
Architecture, permissions and data flows are reviewed by hand and false positives removed.
- 04
Report
Findings are ranked by priority, each with the steps to fix it.
- 05
Fixes
If you like, we fix the settings together and check again.
What you get
- A prioritised list of findings per account
- A summary of CIS Benchmark compliance
- Fix steps for every finding
- Optional: fixes applied and checked again
When you need it
- If your cloud account has grown and nobody is sure who can access what
- Before or after moving a project to the cloud
- When a customer or auditor asks for evidence of cloud security
- If several teams or suppliers share the same account
Methodologies & Standards
CIS BenchmarksAWS Well-ArchitectedMicrosoft Cloud Security BenchmarkCSA CCMISO/IEC 27017GDPR
Frequently Asked
A read-only, time-limited access is enough. We change nothing during the review; fixes are made separately with your approval.
We review AWS, Microsoft Azure and Google Cloud accounts. If you use more than one, they all go into a single report.
The provider protects the data centres and infrastructure. Users, permissions, storage and network settings are your responsibility; this is called the shared responsibility model. Most leaks come from that second part.
Related industries
More services in Cybersecurity
All ofCybersecurity- Penetration TestingWe find the gaps in your web, mobile, API and network before an attacker does.
- Source Code ReviewWe find vulnerabilities in the code itself, while it is still being written.
- Wireless (Wi-Fi) Security TestingWe test how exposed your office and guest Wi-Fi are to someone sitting in the car park.
- DDoS Resilience TestingWe measure, in a controlled way, whether your site and app stay up under heavy attack traffic.
- Phishing SimulationWe send your staff realistic fake e-mails, then raise awareness with short training.
- Active Directory and Internal Network TestingWe show how quickly an attacker inside your network could get from one laptop to the whole company.
