Services · Core service
Remediation & Hardening
We plan every fix and work with your engineers to apply it safely: identity, network, logging, encryption, storage and backups.
- State
- Available
- Pricing
- Fixed price after scoping
Fit
Who it is for, and when
Who it is for
Teams with findings from an assessment, a test or an audit, and not enough hands to close them safely.
When to use it
- You already have a findings list
- An audit or customer review found gaps
- You need to harden an environment before a launch
Services · what our people do
What we do
We plan each fix with your engineers, apply it with your approval and a rollback plan, and re-check it. Complex and sensitive changes stay engineering-led.
Scope
- Identity and access management
- Network
- Logging
- Encryption
- Storage
- Backup and resilience
- Cloud configuration
Working together
What we need, and what you receive
What we need from you
- The findings to work from, from our assessment or another source
- A named person in your organisation who approves each change
- Permission to make changes, only where agreed and granted by you
- Engineers to work with where the change is theirs to make
What you receive
- A remediation plan in priority order
- Engineering changes where scoped and approved
- Verification of each fix
- A closure record of what changed and whether it held
Boundaries
What this service does not include
- Nothing changes without approval from a named person in your organisation.
- Not every control has an automated fix. Complex and sensitive changes are planned and led by engineers.
ARIA
ARIA and this service
ARIA is being developed to support repeatable cloud-control remediation and verification within this workflow. It does not replace the engineering work.
Where the relevant capability is available, ARIA applies bounded, approved fixes for supported controls and verifies each one. Everything else is tracked and verified the same way.
ARIA
Cloud control remediation and verification
- Status
- LaunchingIn development
ARIA is being developed as Tricognita's cloud control remediation and verification product. Its final capabilities will be introduced as they are validated and launched.
Evaluate → Fix → Verify → Keep secure → Evidence
Coverage
Clouds and pricing
Clouds
- AWS
- Available
- Microsoft Azure
- Available
- Google Cloud
- Launching
Pricing
Fixed price after scoping
Every engagement is scoped and priced in writing before work starts.
How pricing worksTalk to us about Remediation & Hardening.
Tell us about your environment and what you need. You receive a written scope before any work starts.