Services · Core service
Cloud Security Assessment
A structured review of your cloud environment: what fails, why it matters, and what to fix first.
- State
- Available
- Pricing
- Fixed price after scoping
Fit
Who it is for, and when
Who it is for
Engineering and security leads at companies running on AWS or Microsoft Azure.
When to use it
- You want an independent review of your cloud security
- An architecture change or incident raised concerns
- A customer security review or questionnaire is coming
- You are preparing for an ISO 27001 or SOC 2 audit
- You need a security baseline to plan against
Services · what our people do
What we do
We review your environment from read-only access, confirm what fails and why it matters, and agree the order in which to fix it.
Scope
- Identity and access management
- Network controls
- Logging and monitoring
- Storage
- Encryption
- Account configuration
- Resilience-related controls
Working together
What we need, and what you receive
What we need from you
- Read-only access to the cloud accounts or subscriptions in scope, in roles you create
- Context on your environment and what your customers or auditors are asking for
- A contact who can answer questions about the environment
What you receive
- Findings with the affected resources
- Prioritised remediation guidance
- How each fix will be verified
- Signed records of the checks where the product is used
Boundaries
What this service does not include
- An assessment establishes what fails and what to fix first. Fixing is a separate, scoped step.
- Findings describe control results, not a compliance verdict.
ARIA
ARIA and this service
ARIA is being developed to support repeatable cloud-control remediation and verification within this workflow. It does not replace the engineering work.
Control evaluation checks each control on each resource, so findings are consistent and can be re-checked later.
ARIA
Cloud control remediation and verification
- Status
- LaunchingIn development
ARIA is being developed as Tricognita's cloud control remediation and verification product. Its final capabilities will be introduced as they are validated and launched.
Evaluate → Fix → Verify → Keep secure → Evidence
Coverage
Clouds and pricing
Clouds
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Launching
Pricing
Fixed price after scoping
Every engagement is scoped and priced in writing before work starts.
How pricing worksTalk to us about Cloud Security Assessment.
Tell us about your environment and what you need. You receive a written scope before any work starts.