One misconfigured role can open the whole account.
We review your AWS, Azure or Google Cloud configuration against established benchmarks, then attack the paths that matter: from a leaked key or a compromised workload to your data and your administrators.
- Price
- Set in your written proposal
- You receive
- Findings ranked by exploitability, the attack paths drawn out, and fixes for each environment.
Scope, timeline and price in writing before any work starts.
What we test. Across the account.
- 01
Identity and access
Users, roles, policies and keys, and the privilege escalation paths between them.
- 02
Storage and data
Buckets, databases, snapshots and backups exposed or shared more widely than intended.
- 03
Networks
Security groups, firewall rules, peering and private endpoints that let traffic in or between environments.
- 04
Workloads
Virtual machines, containers, Kubernetes and serverless functions, and what an attacker could do from inside one.
- 05
Logging and detection
Whether the attacks we run show up in your logs and alerts.
Questions, answered.
01Do we need permission from the cloud provider?
For most services, no. AWS, Azure and Google publish policies that allow customers to test their own resources. We check the current policy for everything in scope.
02Configuration review or penetration test?
Both. The review finds weaknesses across the account quickly. The test proves which of them an attacker can chain together.
Know where you stand before an attacker does.
Tell us what you want tested. We will come back with a scope, a timeline and a price.