Australian-owned · Northern Rivers NSW · Authorised testing only
Cloud security review
A configuration and identity review of your cloud environment to find exposed services, excessive permissions and misconfigurations before they are exploited.
What we cover
Identity and permissions
Administrative roles, excessive privileges, legacy authentication and non-person identities.
Configuration and exposure
Publicly exposed storage and services, insecure defaults and gaps against vendor hardening guidance.
Logging and detection
Whether audit logging is enabled at the right level and reaching a place you can act on it.
Shared responsibility
What your provider covers, what you must configure and operate, and where assurance is missing.
What you receive
- Risk-rated findings with evidence
- Prioritised configuration fixes
- A shared-responsibility summary
- A retest of fixed findings
How an engagement works
- 1Scoping call
A confidential conversation about your environment, goals, constraints and timing. You get a tailored quote with a defined scope.
- 2Signed authorisation
Nothing is tested until your authorised representative signs the rules of engagement, naming every in-scope target, the techniques allowed and anything excluded.
- 3Authorised testing
Testing stays inside the signed scope. Out-of-scope addresses are refused by the platform itself, and every action is recorded in a tamper-evident log.
- 4Reviewed findings
Each finding is risk-rated with evidence and practical remediation steps, and reviewed before it is released to you.
- 5Fix and retest
We help your team prioritise, then retest fixed findings so you have evidence for auditors, insurers and clients.
Common questions
Which platforms do you review?
Talk to us about your environment on the scoping call and we will confirm exactly what is in scope.