Useful references
Resources
Practical help for UK businesses securing their cloud estate: our AWS, Azure and GCP assessment checklist on request, a plain-English CSPM explainer, published pricing, and the recognised references an assessment draws on from CIS, the NCSC and the Cloud Security Alliance. Then speak to us about the cloud estate you want assessed.
Cloud security assessment checklist
A practical checklist covering the areas an assessment examines across AWS, Azure and GCP: identity and access, secure configuration, exposed storage, network controls, encryption, and logging and monitoring. Available on request, so you can see where your estate stands before you call. Get in touch and we will send it across.
CSPM: tool or assessment?
A plain-English explainer on Cloud Security Posture Management: what the tools do, where they stop, and when a hands-on assessment finds what a ruleset misses. Read it before deciding whether you need a tool, an assessment, or both.
Indicative pricing
Published fixed-fee 'from' prices by cloud estate size, in a market where almost everyone is quote-only and vendor tools are priced by subscription. Useful for budgeting the assessment before you call.
CIS Benchmarks
The Center for Internet Security's consensus configuration baselines for AWS, Azure, GCP and the services that run on them. Freely published, and one of the recognised standards an assessment measures your estate against.
NCSC cloud security guidance
The National Cyber Security Centre's cloud security collection: the UK government's own guidance on choosing, configuring and using cloud services securely. An authoritative reference behind the assessment approach.
Cloud Security Alliance
The industry body behind the Cloud Controls Matrix and a body of research on securing cloud environments. A well-regarded, vendor-neutral source for the principles that underpin a cloud security assessment.
See what your cloud is exposing
Find out what a cloud security assessment would surface
The scoping call is free, lasts 45 minutes and is taken by a consultant, not a salesperson. It covers your AWS, Azure or GCP estate, what an assessment checks, and the fixed fee to get a prioritised fix plan.