Service 03
Cloud security & DevSecOps
We secure the cloud environments you run on and build security into the way you ship software. Releasing often shouldn't mean opening new holes each time.
What it covers
01
Cloud security
Reviewing and hardening AWS, Azure and GCP environments: identity, network, storage and logging.
02
DevSecOps
Security checks built into your CI/CD pipelines, so problems are caught each time the code changes.
03
Infrastructure as code
Repeatable, reviewable infrastructure with Terraform and similar tools, so secure configuration is the default.
04
Zero trust
Designing access around identity and least privilege, so one compromised account can't reach everything.
Frameworks & platforms we work with
Standards and platforms we work to and on. Not certifications or partner statuses.
- AWS
- Azure
- GCP
- Terraform
How an engagement runs
01
Scoping
We agree which accounts, subscriptions or projects are in scope, and you give us read-only access to them.
02
Review
We check identity and access, network exposure, storage, encryption and logging against benchmarks such as the CIS Benchmarks for your provider. Then we look at how the environment is put together, which automated tools tend to miss.
03
Findings
Each risk is ranked, with the exact configuration change that fixes it.
04
Fix & build in
We make the changes with your team or guide you through them. We also add checks to your pipelines and infrastructure code, so the same misconfiguration gets caught before it's deployed.
What you receive
- A prioritised list of configuration risks, with the fix for each
- Configuration changes, made by us or alongside your team
- Security checks in your build pipeline and infrastructure code
Start a conversation
Talk to us about cloud security.
A penetration test, a compliance deadline, a system to build. Tell us where you are and we'll come back to you with how we'd approach it.