Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
58
Curated Reports
1705+
Controls Checked
3
Cloud Providers
5 min
To First Results
DevOps Best Practices
27 controls
17 services covered
Reviews pipelines and infrastructure-as-code — CodeBuild and source integrations, CodeDeploy rollback, EC2 deployment targets, ECR, EventBridge, CloudFormation drift and protections, and Service Catalog — covering artifacts, credentials, logging, and monitoring.
What we check
CloudFormation Stacks4
- CloudFormation Delete Protection Enabled
- CloudFormation Stack Notification Check
- CloudFormation stacks should have associated service roles
- CloudFormation Stack Outputs Do Not Contain Secrets
ECR Repositories3
- ECR Repositories KMS Encrypted
- No Public ECR Repositories
- ECR Lifecycle Policies Enabled
CodeBuild Project Environments2
- CodeBuild Environment Variables Do Not Contain Secrets
- CodeBuild Project Environment Privileged Mode Check
CodeBuild Logs2
- CodeBuild Project Logging Enabled Check
- CodeBuild S3 Logs Encryption is Enabled
CodeDeploy Deployment Groups2
- CodeDeploy Auto Rollback Check
- CodeDeploy Monitoring Configuration Check
ECR Registry2
- ECR Registry Cross-Account Replication Enabled
- ECR Registry Cross-Region Replication Enabled
CloudFormation Drift Detection2
- CloudFormation Stack Drift Detection Recent Check (7 Days)
- CloudFormation Stack Drift Detected
CodeBuild Source Integrations1
- CodeBuild Project Source Repository URL Credential Check
CodeBuild Artifacts1
- AWS CodeBuild Project Artifact Encryption Check
CodeBuild Report Groups1
- CodeBuild Report Group Encryption Check
Source Repository Integrations1
- CodeBuild GitHub or Bitbucket Use OAuth
CodeDeploy Lambda Deployments1
- CodeDeploy Lambda Deployment Group Traffic Shift Check
EC2 Instances1
- EC2 Minimum Healthy Hosts Configuration for CodeDeploy
EventBridge Event Buses1
- Custom EventBridge Event Bus Policy Attachment Check
EventBridge Schema Registries1
- Custom Schema Registry Policy Attachment Check
EventBridge Global Endpoints1
- EventBridge Global Endpoint Event Replication Enabled Check
Service Catalog Portfolios1
- Service Catalog portfolios should be shared within an AWS organization only
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.