CloudShield - AWS Security & Compliance Scanner

Continuous, read-only AWS security scanning aligned with CIS, with SOC 2 & PCI-DSS control mappings and drift alerts.

CloudShield is a fast, read-only security and compliance scanner for your AWS account. Connect in two minutes — no agents, no software to install, and no write access to your AWS resources. WHAT IT CHECKS • IAM — root MFA, root access keys, console users without MFA, access-key rotation, password policy • S3 — public buckets, Block Public Access, default encryption, versioning • EC2 — security groups exposing risky ports to the internet (IPv4 & IPv6), unencrypted EBS volumes • RDS — publicly accessible databases, storage encryption • CloudTrail — multi-region audit logging • GuardDuty — threat detection enabled …across every enabled AWS region. WHAT YOU GET • A clear posture score (0–100) and letter grade • Findings ranked by severity, each with step-by-step remediation • Board-ready reports you can download or print to PDF • Posture trend over time and a "what changed since last scan" view • Continuous monitoring: automated daily scans with email alerts when new risks appear COMPLIANCE Every finding is mapped to the CIS AWS Foundations Benchmark, with SOC 2 Trust Services Criteria and PCI-DSS v4.0 control references to support your audit evidence. (CloudShield assists with evidence gathering; it is not a certification.) SECURE BY DESIGN CloudShield uses a read-only cross-account IAM role you create and control. It can never modify your AWS resources. You can revoke access at any time. PRICING 7-day free trial — no credit card required. Then $9.95 per user / month. Cancel anytime.