Cloud Security Engineering
Across AWS, Microsoft Azure and Google Cloud.
Tricognita combines cloud security services with ARIA to evaluate, remediate and verify cloud security controls on the clouds we support. Each cloud shows its current state, because capabilities differ by cloud.
Serving India and the United Arab Emirates
Clouds
Three clouds, one approach
AWS
- Services
- Available
- ARIA
- Launching
Assessment, remediation, retainers and engineering for AWS accounts.
ARIA: Control evaluation, approved bounded fixes where supported, verification and records.
AWSMicrosoft Azure
- Services
- Available
- ARIA
- Launching
Assessment, remediation, retainers and engineering for Azure subscriptions.
ARIA: Control evaluation, bounded fixes for individually validated actions, verification and records.
Microsoft AzureGoogle Cloud
- Services
- Launching
- ARIA
- Launching
Assessment, remediation and retainers are being extended to Google Cloud.
ARIA: Evaluation of the same controls first, then the same approval, verification and evidence model.
Google Cloud
Services × cloud
Which services apply on each cloud
A service is never shown as more ready on a cloud than that cloud allows.
| Service | AWS | Microsoft Azure | Google Cloud |
|---|---|---|---|
| Cloud Security Assessment | Available | Available | Launching |
| Remediation & Hardening | Available | Available | Launching |
| Security Retainer | Available | Available | Launching |
| DevSecOps & CI/CD Security | Available | Available | Not offered |
| Certification Technical Readiness | Available | Available | Not offered |
| Secure Cloud Engineering | Available | Available | Not offered |
| Resilience Review | Available | Available | Not offered |
| Cost & Security Review | Available | Available | Not offered |
| Kubernetes Security | Launching | Launching | Not offered |
Cloud Security Assessment
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Launching
Remediation & Hardening
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Launching
Security Retainer
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Launching
DevSecOps & CI/CD Security
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Not offered
Certification Technical Readiness
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Not offered
Secure Cloud Engineering
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Not offered
Resilience Review
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Not offered
Cost & Security Review
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Not offered
Kubernetes Security
- AWS
- Launching
- Microsoft Azure
- Launching
- Google Cloud
- Not offered
ARIA × cloud
One product model, different maturity per cloud
ARIA, our product for cloud control remediation and verification, follows the same model on every cloud it supports. How far each step has reached differs by cloud.
01
Evaluate
Check each control on each resource from read-only access.
02
Fix
Approved, bounded remediation where the cloud's fix capability supports it.
03
Verify
Re-run the same check; only a passing check counts.
04
Keep secure
Re-check on a schedule and flag drift.
05
Evidence
Signed, linked records and a closure record.
ARIA
Cloud control remediation and verification
- Status
- LaunchingIn development
ARIA is being developed as Tricognita's cloud control remediation and verification product. Its final capabilities will be introduced as they are validated and launched.
ARIA's state on each cloud is shown above. Capabilities by cloud are on the product page.
Differences
Why each cloud has its own state
Capabilities differ by cloud
Each cloud exposes controls differently. A control is checked the way that cloud actually works, and where a control has no equivalent we say so.Remediation differs by cloud
Automated fixes are validated action by action, per cloud. Where no validated action exists, fixes are made by people and verified the same way.Rollout is gated by validation
Nothing is offered on a cloud until it has been validated there. Until then, its state on this page says so.
Where we work
India and the United Arab Emirates
India
Cloud security engineering for Indian SaaS, fintech and technology teams preparing for enterprise customer reviews, ISO 27001 or SOC 2 audits and regulator expectations.United Arab Emirates
The same engineering, scoping and approval model for UAE companies running on AWS and Microsoft Azure. Engagements are scoped and delivered remotely, with on-site work agreed per engagement.
Start with a scoping call.
Tell us which clouds you run and what you need to fix or prove. You receive a written scope before any work starts.