Upload a read-only CloudTrail export. We'll investigate it and email your report within 1 business day.
📅 Export 30–90 days. The history is what lets us tell your normal activity from a real attack. How to export →
Drag your file here or click to choose .json / .json.gz / .zip · up to ~100 MB
What you'll get back — no surprises
A report by email, within 1 business day (usually much faster).
A focused short list — the notable actions we triaged against your account's history, each with the reasoning and a recommended fix. Not a line-by-line audit of every event.
Scope: AWS CloudTrail management events. It won't see what isn't in that export (other clouds, data you didn't include, tools like GuardDuty).
A real investigation, not a canned scan — each notable action gets a timeline, IP and history checks, and a verdict with the evidence behind it. It runs automatically end to end, so treat the recommended fixes as a well-reasoned starting point to confirm — we never touch your environment.
A one-time snapshot. Continuous monitoring is the paid product — there's no commitment or auto-billing here.
Read-only logs only — no agent, no access to your environment. We use your file solely to generate your report, then delete it within 7 days. Questions first? [email protected].
Export over ~100 MB? Email us and we'll send a large-file link.