CloudShield - AWS Security & Compliance Scanner

About

CloudShield is a fast, read-only security and compliance scanner for your AWS account. Connect in two minutes — no agents, no software to install, and no write access to your AWS resources.
WHAT IT CHECKS
• IAM — root MFA, root access keys, console users without MFA, access-key rotation, password policy
• S3 — public buckets, Block Public Access, default encryption, versioning
• EC2 — security groups exposing risky ports to the internet (IPv4 & IPv6), unencrypted EBS volumes
• RDS — publicly accessible databases, storage encryption
• CloudTrail — multi-region audit logging
• GuardDuty — threat detection enabled
…across every enabled AWS region.
WHAT YOU GET
• A clear posture score (0–100) and letter grade
• Findings ranked by severity, each with step-by-step remediation
• Board-ready reports you can download or print to PDF
• Posture trend over time and a "what changed since last scan" view
• Continuous monitoring: automated daily scans with email alerts when new risks appear
COMPLIANCE
Every finding is mapped to the CIS AWS Foundations Benchmark, with SOC 2 Trust Services Criteria and PCI-DSS v4.0 control references to support your audit evidence. (CloudShield assists with evidence gathering; it is not a certification.)
SECURE BY DESIGN
CloudShield uses a read-only cross-account IAM role you create and control. It can never modify your AWS resources. You can revoke access at any time.
PRICING
7-day free trial — no credit card required. Then $9.95 per user / month. Cancel anytime.