Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
60
Curated Reports
2077+
Controls Checked
3
Cloud Providers
5 min
To First Results
Resiliency
50 controls
36 services covered
Validates that workloads can withstand failures — multi-AZ placement, EC2 Auto Scaling, load balancer and Route 53 health checks, high availability for RDS, DocumentDB, Neptune, ElastiCache, and OpenSearch, deletion protection, CloudFormation rollback, backup recovery points, and CodeDeploy safe deployments.
What we check
Auto Scaling Groups3
- Auto Scaling Multiple Availability Zones Check
- Auto Scaling Capacity Rebalancing Check
- Auto Scaling Groups Used When EC2 Instances Exist
Resilience Hub Applications3
- Resilience Hub App Resiliency Policy Assigned
- Resilience Hub App Scheduled Assessment Enabled
- Resilience Hub App Drift Notifications Enabled
EC2 Instances2
- Delete Protection
- EC2 Minimum Healthy Hosts Configuration for CodeDeploy
RDS DB Instances2
- Delete Protection
- Multi AZ
Neptune Clusters2
- Multi AZ
- Delete Protection
Network Firewall Firewalls2
- Delete Protection
- Network Firewall Multi-AZ Deployment Check
Route 53 Domains2
- Route 53 domains auto renew should be enabled
- Route 53 domains should have transfer lock enabled
ElastiCache Replication Groups2
- ElastiCache (Redis) Multi-AZ is Enabled
- Ensure ElastiCache Replication Groups Have Auto Failover Enabled
OpenSearch Domains2
- OpenSearch Data Node Fault Tolerance Check
- OpenSearch Primary Node Fault Tolerance
Redshift Clusters2
- Redshift clusters should have Multi-AZ deployments enabled
- RA3 Redshift Clusters Have Relocation Enabled
Shield Advanced2
- Shield Advanced Internet Facing Resources Protected
- Shield Advanced Subscription Auto Renew Enabled
Elastic Disaster Recovery2
- DRS source servers replicate continuously
- DRS replication servers use private connectivity
VPC Subnets1
- Subnets in Multiple AZs
VPCs1
- VPCs Exist in More Than One Region
CloudFormation Stacks1
- Delete Protection
Application Load Balancers1
- Delete Protection
Classic Load Balancers1
- Cross AZ Load Balancing Enabled
Load Balancers1
- ELBv2 Multiple Availability Zones Check
Network Load Balancers1
- Network Load Balancer Cross-Zone Load Balancing Enabled Check
DocumentDB Clusters1
- Delete Protection
FSx File Systems1
- Multi AZ
Route 53 DNS Firewall1
- Delete Protection
Backup Recovery Points1
- Recovery Point Manual Deletion Disabled
CloudFront Origins1
- CloudFront Origin Failover Check
CodeDeploy Deployment Groups1
- CodeDeploy Auto Rollback Check
CodeDeploy Lambda Deployments1
- CodeDeploy Lambda Deployment Group Traffic Shift Check
EventBridge Global Endpoints1
- EventBridge Global Endpoint Event Replication Enabled Check
Lambda Networking1
- Lambda Multi-AZ Availability Check
Amazon MQ Brokers1
- Amazon MQ RabbitMQ No Single-Instance Deployment Mode
DMS Replication Instances1
- DMS replication instances should be configured to use multiple Availability Zones
Cognito User Pools1
- Cognito user pools should have deletion protection enabled
EC2 Dedicated Hosts1
- EC2 Mac Dedicated Hosts Use Automatic Recovery
Route 53 Hosted Zones1
- Public Route 53 Hosted Zones Have Accelerated Recovery
RTB Fabric Responder Gateways1
- RTB Fabric Responder Gateways Have Health Checks
Verified Permissions Policy Stores1
- Verified Permissions Policy Stores Have Deletion Protection
AWS Health Alerts1
- Real-Time Alerts Configured for AWS Health Events
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.