Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
58
Curated Reports
1705+
Controls Checked
3
Cloud Providers
5 min
To First Results
Resiliency
37 controls
28 services covered
Validates that workloads can withstand failures — multi-AZ placement, EC2 Auto Scaling, load balancer and Route 53 health checks, high availability for RDS, DocumentDB, Neptune, ElastiCache, and OpenSearch, deletion protection, CloudFormation rollback, backup recovery points, and CodeDeploy safe deployments.
What we check
Auto Scaling Groups3
- Auto Scaling Multiple Availability Zones Check
- Auto Scaling Capacity Rebalancing Check
- Auto Scaling Groups Used When EC2 Instances Exist
EC2 Instances2
- Delete Protection
- EC2 Minimum Healthy Hosts Configuration for CodeDeploy
RDS DB Instances2
- Delete Protection
- Multi AZ
Neptune Clusters2
- Multi AZ
- Delete Protection
Network Firewall Firewalls2
- Delete Protection
- Network Firewall Multi-AZ Deployment Check
Route 53 Domains2
- Route 53 domains auto renew should be enabled
- Route 53 domains should have transfer lock enabled
ElastiCache Replication Groups2
- ElastiCache (Redis) Multi-AZ is Enabled
- Ensure ElastiCache Replication Groups Have Auto Failover Enabled
OpenSearch Domains2
- OpenSearch Data Node Fault Tolerance Check
- OpenSearch Primary Node Fault Tolerance
VPC Subnets1
- Subnets in Multiple AZs
VPCs1
- VPCs Exist in More Than One Region
CloudFormation Stacks1
- Delete Protection
Application Load Balancers1
- Delete Protection
Classic Load Balancers1
- Cross AZ Load Balancing Enabled
Load Balancers1
- ELBv2 Multiple Availability Zones Check
Network Load Balancers1
- Network Load Balancer Cross-Zone Load Balancing Enabled Check
DocumentDB Clusters1
- Delete Protection
FSx File Systems1
- Multi AZ
Route 53 DNS Firewall1
- Delete Protection
Backup Recovery Points1
- Recovery Point Manual Deletion Disabled
CloudFront Origins1
- CloudFront Origin Failover Check
CodeDeploy Deployment Groups1
- CodeDeploy Auto Rollback Check
CodeDeploy Lambda Deployments1
- CodeDeploy Lambda Deployment Group Traffic Shift Check
EventBridge Global Endpoints1
- EventBridge Global Endpoint Event Replication Enabled Check
Lambda Networking1
- Lambda Multi-AZ Availability Check
Amazon MQ Brokers1
- Amazon MQ RabbitMQ No Single-Instance Deployment Mode
DMS Replication Instances1
- DMS replication instances should be configured to use multiple Availability Zones
Redshift Clusters1
- Redshift clusters should have Multi-AZ deployments enabled
Cognito User Pools1
- Cognito user pools should have deletion protection enabled
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.