Cloud Security Engineering
We test, fix and verify your cloud security.
Tricognita is a cloud security engineering company for AWS and Microsoft Azure, with Google Cloud in active development. We find what is wrong and fix it with your team. ARIA checks every fix and keeps checking, so security does not end with a report.
Serving India and the United Arab Emirates · Read-only access to check · Every change approved by your team
Services
Engineering that does the work
Assessment, testing, remediation, hardening and an ongoing retainer, delivered hands-on: we read the findings and change the configuration with you.
Our servicesProduct
ARIA
Cloud control remediation and verification. Checks your controls, applies approved bounded fixes for supported controls, verifies every fix and records the result.
The platformWhy Tricognita
Security should not stop at a report.
Most cloud reviews end with a list of findings. The hard part comes after: deciding what to fix first, changing production safely, proving the fix worked, and noticing when it quietly breaks again.
Tricognita stays for that part. We do the work with your team, and the platform checks the result, so you can show a customer or an auditor what was fixed and that it is still fixed.
How we work
Test → Fix → Verify → Keep secure
People lead every stage. The platform evaluates, applies approved bounded fixes, verifies and records. You approve every change.
01
Test
People · services
We assess your cloud, scope penetration tests and explain what matters for your business.
Software · ARIA
The platform checks your controls resource by resource from read-only access.
02
Fix
People · services
We plan each fix with your engineers and help apply it safely, with a rollback plan.
Software · ARIA
For supported controls, the platform applies a bounded fix to the one resource that failed, only after a named person in your team approves it. Other changes are tracked as your team makes them.
03
Verify
People · services
We confirm the fix did what it should and retest where testing found the issue.
Software · ARIA
The same check that found the problem runs again. Only a passing check counts as fixed.
04
Keep secure
People · services
A retainer keeps us reviewing changes, drift and new risks with you.
Software · ARIA
Scheduled re-checks flag a control that passed and now fails, with the record of what changed.
Services
Cloud security engineering services
Every engagement starts with a scoping call and a written scope. Each service shows its current state.
- Available
- Delivering now
- Launching
- Being prepared for launch — register interest
- Planned
- On the roadmap
- Available
Cloud Security Assessment
A structured review of your cloud environment: what fails, why it matters, and what to fix first.
- Launching
Penetration Testing (VAPT)
Web, API, external and cloud penetration testing, with a retest after fixes.
- Available
Remediation & Hardening
We plan every fix and work with your engineers to apply it safely: identity, network, logging, encryption, storage and backups.
- Available
Security Retainer
Recurring review, re-checks, drift fixes and periodic testing, so controls stay in place between audits.
- Available
DevSecOps & CI/CD Security
Security built into your pipelines and infrastructure code, not added after release.
- Available
Certification Technical Readiness
The technical controls your ISO 27001 or SOC 2 auditor will test, implemented and evidenced alongside your compliance consultant. Certification is issued by independent auditors.
- Available
Secure Cloud Engineering
Secure cloud architecture, platforms and applications, designed with security from the start.
Specialist services
- Available
Resilience Review
Backups, restore paths and availability-zone versus region design, reviewed and fixed.
- Available
Cost & Security Review
Cloud cost savings and the most important security findings, in one short review.
- Launching
Kubernetes Security
Managed Kubernetes cluster hardening and review.
- Planned
AI / LLM Application Security Testing
Security testing for applications built on large language models.
- Planned
PCI DSS Technical Support
Technical PCI DSS controls and remediation, alongside your qualified security assessor.
- Planned
ISO 42001 Technical Security
Technical security work for AI management systems.
Product
ARIA
Cloud control remediation and verification.
A cloud security automation platform that checks your cloud security controls, applies bounded fixes for supported controls once your team approves them, tracks the changes your engineers make, re-runs the same check to verify each fix, and keeps a signed record of each step. Nothing changes without your authorization.
The platform will be included with the Security Retainer; for standalone access, talk to us.
ARIA
Cloud control remediation and verification
- Status
- LaunchingIn development
ARIA is being developed as Tricognita's cloud control remediation and verification product. Its final capabilities will be introduced as they are validated and launched.
See ARIA- CheckedFailing
- Fix approved and appliedFixed
- Scheduled re-checkDrifted
- Fixed again and verifiedPassing
Each step is saved as a signed record in the control's history.
Services + Product
Engineering work that becomes repeatable
Every engagement teaches us which fixes are safe and repeatable. We build those into the platform, so your team and ours spend less time repeating checks and more time on the problems that need judgement.
01
Engagements
We assess, test and fix real environments with customers.
02
Patterns
Fixes that are safe and repeatable are written down and reviewed.
03
Platform
Reviewed patterns become checks and approved fixes in the platform.
04
Focus
Repetitive work shrinks; engineering time goes where judgement is needed.
Deliverables
What you receive
- Findings: what fails, on which resource, and why it matters.
- Remediation guidance: the exact change, its effect and how to roll it back.
- Verification: the fix re-checked by the same test that found the problem.
- Signed, linked records: each check saved as a signed record linked to the one before, with integrity checked when viewed.
- A closure record: what failed, what changed, who approved it, whether it worked and whether it stayed fixed.
Clouds
AWS, Microsoft Azure and Google Cloud
Google Cloud support is in active development and is being expanded rapidly.
AWS
- Services
- Available
- Platform
- Launching
A read-only IAM role you create in your account and can remove at any time.
AWS detailsMicrosoft Azure
- Services
- Available
- Platform
- Launching
A service principal with the built-in Reader role.
Microsoft Azure detailsGoogle Cloud
- Services
- Launching
- Platform
- Launching
A least-privilege service account. In active development.
Google Cloud details
Where we work
India and the United Arab Emirates
India
Cloud security engineering for Indian SaaS, fintech and technology teams preparing for enterprise customer reviews, ISO 27001 or SOC 2 audits and regulator expectations.United Arab Emirates
The same engineering, scoping and approval model for UAE companies running on AWS and Microsoft Azure. Engagements are scoped and delivered remotely, with on-site work agreed per engagement.
Trust
How we handle access, change and your data
The rules below apply to every engagement and to the platform.
You approve every change
Nothing in your cloud changes without approval from a named person in your team. Every proposal, approval and change is recorded with who made it.
Access boundaries
Checking uses read-only access. Changing needs a separate, narrow permission that you grant explicitly and can remove at any time.
Your data
- The platform evaluates cloud configuration and control results.
- Access uses read-only roles you create and can revoke at any time.
- Where data is stored and processed is set out in writing for each engagement.
Who you work with
Founder & Security Engineer — Tricognita
- AWS Certified Solutions Architect – Professional
- AWS Certified Security – Specialty
- Quick Heal Digital Forensics & Incident Response (DFIR)
- CompTIA Network+
- Red Hat System Administration I (RH124)
Tell us what you need to fix.
A scoping call covers your cloud, what your customers or auditors are asking for, and what a first engagement would include. You receive a written scope before any work starts.