I will audit and secure your cloud infrastructure
Penetration Testing, VAPT, Web, API, Cloud and AI App Security
About this Gig
Is your AWS, Azure, or Google Cloud actually secure or just working?
Most cloud breaches aren't hacks they're misconfigurations: open storage, over-permissive access, exposed databases, disabled logging. Silent, until it's too late.
I audit your cloud, find these risks, and secure it.
WHAT I CHECK:
- IAM & access permissions
- Public storage & exposed endpoints
- Databases & network security
- Encryption & logging
- CIS Benchmark compliance
- Misconfigurations across services
WHAT YOU GET:
Security report with risk ratings
Clear, prioritized fixes
Applied hardening & re-test (Premium)
Compliance mapping GDPR, HIPAA (Premium)
Works with AWS, Azure & Google Cloud, using ScoutSuite, Prowler & manual review.
AUTHORIZED ACCESS ONLY within your agreed scope.
Message me your cloud setup before ordering to confirm scope.
Cloud provider:
Amazon Web Services
Expertise:
Backup
•
Migration
•
Debugging
•
Configuration
•
Performance
My Portfolio
FAQ
Why does my cloud need a security audit?
Cloud is only secure if configured correctly. Most breaches happen through simple misconfigurations — open storage, weak access controls, disabled logging. An audit catches these before attackers do.
Which cloud platforms do you work with?
AWS, Azure, and Google Cloud. If you use another provider (Oracle, DigitalOcean, etc.), message me first and I'll confirm.
What access do you need?
Read-only access is enough for the audit. For hardening (Premium), I'll need permission to apply fixes — always within a scope we agree on first. Access can be revoked after delivery.
Will the audit disrupt my live environment?
No. The audit is read-only and non-intrusive. Any hardening changes are confirmed with you before they're applied.
What standards do you check against?
CIS Benchmarks for AWS/Azure/GCP, plus compliance mapping to GDPR and HIPAA on Premium. Have a specific requirement? Message me first.
Do you just report issues or fix them too?
Basic and Standard deliver a full audit with remediation guidance. Premium includes applying the hardening fixes and a re-test to confirm you're secure.
Is my data and access kept confidential?
Yes. All findings and access are handled with strict confidentiality, and I can sign an NDA on request.

