We help SaaS companies, independent software vendors (ISVs) and eCommerce businesses assess and improve the security of their AWS environments – from permissions and network to logging and monitoring.
Starting pointFreeConsultation and discovery
- AWS security posture assessment
- List of risks ranked by severity
- Prioritised remediation plan
Challenges
Problems companies bring to us
Permissions that have grown
Accounts and roles have broader access than the work requires, and nobody has a full picture.
Unclear network configuration
Access rules and connections between environments are hard to verify and maintain.
No visibility of events
Logs are incomplete or nobody analyses them, so suspicious activity goes unnoticed.
Customer and auditor questions
Customers ask about security practices, and preparing answers takes too long.
What we deliver
A secure AWS environment – and ongoing care for it
We assess the security of your AWS environment against best practices, rank risks by severity and help you remove them. After remediation we can look after security and architecture on an ongoing basis through Architecture Care. Welastic is an AWS Advanced Tier Services Partner.
- A clear picture of risks and priorities
- Tidy permissions and network
- Visibility of events in your environment
- Continuous improvement instead of a one-off audit
Starting point
Consultation and discovery
We start with a conversation and gather information about your AWS accounts, architecture, access and customer requirements. Based on that, we agree the scope of the security assessment.
What you get
- AWS security posture assessment
- List of risks ranked by severity
- Prioritised remediation plan
Service scope
What the service covers
AWS security posture assessment
A review of accounts, services and configuration against security best practices.
IAM and access management
Least-privilege permissions, roles, policies and federated access.
Infrastructure security
Securing compute resources, data and managed services.
Network security
Segmentation, access rules, connections between environments and internet exposure.
Logging and monitoring
Event logging, log centralisation and alerts on anomalies.
Cloud security best practices
Recommendations based on the security pillar of the AWS Well-Architected Framework.
Security configuration review
Verifying security settings of services and accounts.
Security remediation
Removing identified risks and implementing protection mechanisms.
How we work
How the engagement works
-
Initial consultation
We learn about your environment, customer requirements and main concerns.
-
Discovery
We gather information about accounts, architecture, access and processes.
-
Security assessment
We analyse the configuration and prepare a report with risks and recommendations.
-
Remediation and implementation
We remove identified risks and implement safeguards – on our own or with your team.
-
Architecture Care
We continuously review and improve the security and architecture of your environment.
Outcomes
What you get
- You know which risks exist in your environment and which matter most
- Permissions limited to what is necessary
- Logging and monitoring that let you detect anomalies
- Documentation that makes customer and auditor questions easier to answer
- Ongoing care instead of a one-off audit
FAQ
Frequently asked questions
No. The service focuses on the configuration and architecture of your AWS environment. Penetration testing is not part of it.
No. The service covers AWS environment security: accounts, access, network, configuration and logging.
It is an ongoing engagement after remediation: regular reviews, recommendations and evolution of your architecture and safeguards as your environment changes.
Start with: Consultation and discovery
Tell us what your project is about – we will get back to you to agree the scope and timing. The assessment is free of charge.
