01
Identity & Access
IAM least-privilege, roles, keys and MFA.
cloud security
Cloud Security,
Cloud Security,
Lock down your cloud.
Posture and configuration review across AWS and Azure, without ever touching your credentials.
what it is
Most cloud breaches are not clever, they are misconfigurations: an over-permissioned role, a public bucket, a missing log. I review your cloud against those failure modes and give you a prioritised path to a hardened posture.
Aligned to CIS Benchmarks and cloud posture (CSPM) best practice.
what is included
Scope of the engagement.
02
Exposure
Public services, storage and internet-facing assets.
03
Logging
Centralised logging, monitoring and audit trails.
04
Secrets
Key, secret and credential handling.
what you receive
Clear deliverables.
01
Executive summaryRisk in business terms your leadership can read in five minutes.
02
Technical detailFindings with evidence and clear severity, where applicable.
03
Remediation roadmapPrioritised, actionable next steps your team can run with.
04
Follow-upRetest or review to confirm the work landed.
// providers covered
AWS, Azure & Google Cloud
AWS
IAM, S3, EC2, VPC, CloudTrail, GuardDuty — configuration review against CIS Benchmarks.
Azure
Entra ID, Defender, Sentinel, Key Vault, network security groups and storage exposure.
Google Cloud
IAM, Security Command Center, Cloud Armor, service accounts and bucket permissions.
Ready to start?
Send a short request, and I will help shape the right scope on the first call.