Home / Services / Cloud security
Cloud
Cloud security
Configuration reviews, hardening and continuous monitoring for AWS, Azure, GCP, Microsoft 365 and Google Workspace.
Most cloud incidents we respond to start with a configuration, not a vulnerability: a public bucket, an over-privileged role, a conditional access gap, a service principal nobody rotates. Cloud reviews check every account against CIS Benchmarks and our own checklist, fix the critical items with your team, and leave monitoring behind so the fixes stick.
from $3,900 fixed price
What is included
- Configuration review against CIS Benchmarks for AWS, Azure, GCP, Microsoft 365 and Google Workspace
- Identity and access review: roles, service principals, keys, conditional access, MFA coverage
- Hardening with your engineers, with changes staged and reversible
- Continuous posture monitoring on Professional and Enterprise plans
- Infrastructure-as-code review for Terraform and CloudFormation
- Landing-zone design for new accounts and subscriptions
What you receive
- Findings report ranked by exploitability, with the exact console path or CLI fix
- Hardening change log with before and after states
- Posture dashboard in the client portal
- Re-review after 90 days, included
How it runs
- 1
Connect
Read-only role or audit account; no credentials shared by email.
- 2
Review
Automated benchmark run, then manual review of identity, network and data paths.
- 3
Harden
Fixes applied with your engineers in priority order over one to three weeks.
- 4
Monitor
Posture monitoring stays on so a new public bucket pages someone the same day.
Questions about cloud security
Do you need write access?
Not for the review. Hardening changes are made by your engineers or by ours under a scoped role you grant for the work and remove after.
We are on Microsoft 365 only. Is this for us?
Yes. The Microsoft 365 security review is the most common engagement we run: conditional access, MFA, mail flow rules, Defender settings, sharing and guest access, and the audit log.
How often should a review run?
Annually, or after a major migration. Clients on monitoring plans get continuous checks between reviews.
Other services
Scope cloud security for your environment.
Thirty minutes with the people who will do the work, and a fixed price in writing the same day.