Expert service
Your cloud, reviewed by experts.
A read-only review of your cloud accounts, mapped to CIS benchmarks and written for the people who run them.
Why teams book this test
- You moved fast in the cloud.Accounts, roles and buckets added in a hurry. Find what is exposed.
- One leaked key.See how far a single stolen credential reaches across your accounts.
- An audit is coming.Reports your ISO 27001 or SOC 2 auditor can use as evidence.
What we test
- Identity, roles and privilege escalation paths
- Publicly exposed storage, databases and services
- Logging, monitoring and alerting
- Encryption and key management
- Network design and segmentation
- Infrastructure-as-code review on request
How an engagement runs
- ScopeA free 30-minute call. Targets, rules, dates.
- TestHands-on, to the agreed method.
- VerifyEvery finding confirmed with evidence.
- ReportImpact and a clear fix for each one.
- RetestWe check what you fixed.
Repeat every release or quarter, starting again from scope.
Why experts
What you receive
A human tests intent, chains attacks and signs the report as an independent third party. That is what the platform alone cannot give you.
- An executive summary written for leadership and customers
- Every finding with evidence, CVSS 3.1 score, impact and a fix your team can follow
- An independent third-party report. Reports your ISO 27001 or SOC 2 auditor can use as evidence.
- Retesting of fixed findings, agreed in the quote
- A walkthrough call with your team
The usual pentest, minus the usual pain.
Typical pentest firm
- PriceDay rates that grow with the job
- FindingsScanner output with your logo on it
- Follow-upBilled as a new engagement
- HandoverA PDF in your inbox
- Next yearStart again from zero
Cerberon experts
- PriceA fixed quote after a 30-minute call
- FindingsEvery finding backed by evidence, with what to fix
- Follow-upRetest or follow-up agreed in your quote
- HandoverA walkthrough call with your team
- Next yearKeep testing on your own server with the Cerberon platform
Questions about this service
What access do you need?
Read-only access to the accounts in scope. We never change your environment.
Which clouds do you assess?
AWS, Microsoft Azure, Google Cloud and Oracle Cloud Infrastructure.
Tell us what you need tested.
A 30-minute scoping call, then a fixed quote.