Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
58
Curated Reports
1705+
Controls Checked
3
Cloud Providers
5 min
To First Results
Multi-Account Best Practices
27 controls
17 services covered
Checks centralized governance across accounts — AWS Organizations, delegated administration and aggregation for GuardDuty, Security Hub, Inspector, and Macie, organization CloudTrail, RAM sharing, and cross-account backup and replication.
What we check
Security Hub Organization Settings4
- Security Hub Findings Aggregated to Dedicated Security Account
- Security Hub Finding Cross-Region Aggregation is Configured
- Security Hub Auto-Enroll Accounts in the Organization
- Security Hub Management is Delegated in the Organization
Organizations Delegated Administration3
- Access Analyzer Management is Delegated in the Organization
- AWS Organizations delegated administrators should be reviewed
- Security service delegated administrators should be configured in AWS Organizations
EC2 Transit Gateways2
- EC2 Transit Gateway Auto Cross-Account Attachment Disabled
- EC2 Transit Gateway Auto VPC Attach is Disabled
GuardDuty Organization Settings2
- GuardDuty Security Findings are Aggregated to a Dedicated Account
- GuardDuty Management is Delegated in the Organization
Inspector Organization Settings2
- Inspector Findings Aggregated to a Dedicated Security Account
- Inspector Management is Delegated in the Organization
Macie Organization Settings2
- Macie Findings are Aggregated to a Dedicated Account
- Macie Management is Delegated in the Organization
CloudTrail Trails2
- Ensure that a Multi-Region CloudTrail Trail is Configured
- CloudTrail Global Services Enabled
Organization CloudTrail Trails1
- Organizations CloudTrail Trail is Enabled
Organizations Backup Policies1
- AWS Organizations Backup Policies Configured
Organizations Tag Policies1
- AWS Organizations Tag Policies Enabled
AWS Organizations Settings1
- Ensure All Features are Enabled for the Organization
Organizations Service Control Policies1
- AWS Organizations service control policies should be configured
Resource Access Manager Shares1
- Resource Shares Shared Inside Organization Only
Backup Replication1
- Backup Cross-Account Replication
S3 Replication1
- S3 Bucket Cross-Account Replication
ECR Registry1
- ECR Registry Cross-Account Replication Enabled
Service Catalog Portfolios1
- Service Catalog portfolios should be shared within an AWS organization only
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.