Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
58
Curated Reports
1705+
Controls Checked
3
Cloud Providers
5 min
To First Results
Encryption at Rest
10 controls
7 services covered
Checks that stored data uses customer-managed encryption keys (CMEK/CSEK) across BigQuery, Cloud Storage, Compute disks, AlloyDB, Pub/Sub, GKE and Dataflow.
What we check
BigQuery2
- Ensure BigQuery Datasets use default Customer Managed Key (CMK)
- Ensure that BigQuery Datasets Tables are Encrypted with Customer Managed Keys (CMK)
Compute2
- Ensure that compute instances have encrypted boot disks
- Ensure Compute Disks are encrypted with Customer-Supplied Keys
GKE2
- Ensure that GKE Clusters have Database Encryption Enabled
- Ensure that GKE Clusters Node Pool(s) have Encryption Enabled
AlloyDB1
- Ensure AlloyDB Clusters are Encrypted with Customer-Managed Keys
Storage1
- Ensure that Storage Buckets Use Customer Managed Encryption Keys (CMEK)
Pub/Sub1
- Ensure that Pub/Sub Topics use Customer Managed Encryption Keys (CMEK)
Dataflow1
- Ensure Dataflow Jobs Use Customer-Managed KMS Keys
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.