- IAM policies
- S3 buckets
- Security groups
- Public endpoints
Coming soon · Early access
agentred/cloud
Small mistakes. Big blast radius.
Posture and misconfiguration assessment across AWS, Google Cloud, and the hosts behind them, before an attacker maps them for you.
- IAM bindings
- Cloud Storage
- Firewall rules
- Service accounts
- sshd config
- Exposed services
- Packages
- File permissions
What we look for
Misconfigurations, mapped.
The misconfigurations that quietly turn one exposed resource into an incident.
AR / POSTURE · scan preview8 check groups
- [ CHECK ]storage
Publicly readable buckets and objects
- [ CHECK ]identity
Wildcard and over-privileged IAM policies
- [ CHECK ]identity
Long-lived keys and unused service accounts
- [ CHECK ]network
Management ports open to 0.0.0.0/0
- [ CHECK ]network
Internal services reachable from the internet
- [ CHECK ]host
Password and root login over SSH
- [ CHECK ]host
Outdated packages with known exploits
- [ CHECK ]logging
Audit logging disabled or unmonitored
Early access
Be in the first cloud cohort.
- 01Request
Tell us which providers and how many accounts, projects, or hosts you run.
- 02Scope
We agree access, exclusions, and testing windows with your security team.
- 03Assess first
Early-access teams get the first cloud assessments and shape what ships.
Questions
Cloud, answered.
When will cloud assessment be available?
Cloud assessment is in development. Request early access and we’ll contact you when it opens.
What access will Agent Red need?
Access is agreed during scoping and limited to the accounts, projects, and hosts you authorize.
Which providers are planned?
AWS, Google Cloud, and hosts reachable over SSH are the first supported environments.
One platform
Explore every surface.
01</>
Web & APIs
Application and API penetration testing across the paths attackers actually use.
02{}
Source code
AI-assisted security review that follows risk across code, dependencies, and CI/CD.
03CL
Cloud
Cloud posture and misconfiguration assessment across AWS, Google Cloud, and hosts reached over SSH.
- AWS
- Google Cloud
- SSH
04MB
Mobile
Static and dynamic mobile security analysis aligned to real application behavior.