Free AWS Security Assessment & Compliance Report
Find your cloud waste. Reinvest it in security.
As an AWS Advanced Services Partner, we've helped numerous SMB customers turn AWS inefficiencies into measurable security wins across CIS, SOC 2, HIPAA, PCI, NIST, ISO 27001, and GDPR frameworks. No complex onboarding, no cost, and no net cloud spend increase. Our process:
1. Find Cloud Waste
2. Get Compliance Scores
3. Recommendations & Prioritized Plan
What you get from a free analysis
CLOUD WASTE IDENTIFIED
SECURITY CHECKS
COMPLIANCE FRAMEWORKS
CONSULTING PARTNER
The Security & Compliance Analysis is a combination of joint technical session(s), security scans, and off-line analysis, intended to gain a deeper understanding of your application, infrastructure, the AWS services being used, how the application and infrastructure are managed and deployed, and how security is currently managed across all of your AWS accounts and applications.
Using our AI-powered platform, Kalos, along with human analysis from our AWS certified engineers, we identify quantifiable cloud savings opportunities, top security risks impacting compliance, and present a recommended action plan for how to best reinvest savings into security controls.
Process:
- Stratus10 performs a thorough review and analysis of all infrastructure and services running on your AWS accounts in order to:
- Assess the configuration of the current environment from a security perspective and compare it against best practices.
- Measure security compliance against common industry frameworks, such as PCI, ISO 27001, SOC 2, HIPAA, GDPR, NIST, and CIS.
- Identify any misconfigurations that could be exploited to compromise your environments.
- Identify a prioritized list of remediation steps to improve your security posture.
- Identify areas of Shared Security Responsibility that need to be addressed.
- Identify data or data storage resources that could be better protected via encryption or other security methods.
- Stratus10 compiles a thorough report on the current state of your AWS accounts and infrastructure with a focus on cloud savings, security, and list of recommended actions.
- Requirements Gathering
Stratus10 works with your team to identify and understand the current state of your AWS accounts, infrastructure, delivery process, and compliance requirements.
- Cost and Security Scans
After connecting your accounts to Kalos (takes 15 minutes), we run billing and security analysis scans.
- Reporting and Analysis
Stratus10 compiles all the data gathered from the cost and security scans, as well as the engineering analysis, and finalizes detailed reports for the overall assessment.
- Analysis Review
Stratus10 compiles the waste report, committment strategy, and risk analysis, and explain the results and recommendations.
- Action Plan
Stratus10 delivers the detailed cost savings and security plan proposal based on the performed analysis and customer objectives.
Security and Compliance Context
An overview of your AWS accounts, infrastructure configurations, security policies, compliance requirements, and any audits or contractual obligations on the horizon.
Current Infrastructure, Accounts, and Access Management
Roughly 1-1.5 hours total of engineering and leadership time across initial requirements gathering, scan setup, and findings walk-through.
Read-Only AWS Account Access
Temporary access to your AWS accounts to run the cost and security scans.
- Total cost savings analysis covering:
- Waste report with total projected savings
- Right-sizing recommendations
- Ideal distribution of Savings Plans and Reserved Instances
- Security reports for selected frameworks
- Security team analysis of existing AWS accounts, infrastructure, deployment process, user access, and other artifacts as applicable
- All source code, scripts, templates, and technical artifacts
- Session to review the analysis and make sure your team understands the results
- Proposal and recommended action plan from Stratus10
Trusted by
AWS Partner
AWS Partner
We’re an AWS Advanced Consulting Partner helping companies migrate to the cloud and implement best practices. We specialize in security, migration services, cost optimization, and DevOps automation to help our clients take advantage of the latest cloud technologies.
FAQs
Most engagements wrap in 1-2 weeks. Timing also depends on our agreed upon schedule for kickoff and final presentation of findings.
Included free in your analysis:
- AWS Well-Architected
- CIS 1.5
- CIS 2.0
- CIS 3.0
- FedRamp Low r4
- FedRamp Moderate r4
- GDPR
- HIPAA
- ISO 27001
- NIST 800-171 r2
- NIST 800-53 r5
- NIST CSF 1.1
- PCI DSS 3.2.1
- SOC 2
FinSec is a leadership strategy that aligns cloud finance+security with the goal of converting cloud infrastructure inefficiences into capital for security.
We can absolutely help. As an AWS Consulting Partner, we specialize in hands-on-keyboard implementation. Additionally, our Kalos platform automates much of the time-intensive labor involved in analyzing billing, resources, committments, and risks. We're happy to discuss the options for your team based on your needs.
Book a Free Security & Compliance Analysis
Completely free and the final report is yours to keep, including:
- Total cost savings analysis covering:
- Waste report with total projected savings
- Right-sizing recommendations
- Ideal distribution of Savings Plans and Reserved Instances
- Security findings and recommended remediations for selected frameworks
- Expert analysis of your AWS accounts, infrastructure, deployment process, user access, and other artifacts as applicable
- Proposal and recommended action plan from Stratus10
Tell us a little about your AWS environment and we'll set up a 20-minute kickoff call.
Prefer to grab time directly?
Book with Conor Lynch →
VP of Cloud Solutions, Stratus10