Services · Security
Cloud security review, and a free secure-infrastructure plan
Logins, networks, backups and logs: what to fix first, on one page, for free.
A secure infrastructure is mostly boring: tight logins, nothing exposed that need not be, backups that work, and logs you can trust. The free one-page plan tells you which of these to do first for your setup.
A paid review checks the real settings, with read-only access you grant.
What the plan covers
- Identity: no shared root login, two-factor everywhere, least access, and old accounts removed.
- Network: databases and admin ports private, one way in, and nothing open "for now".
- Data: encrypted, backed up, with a restore that has actually been tried.
- Secrets: out of code and into a secret store, rotated when someone leaves.
- Logs: kept somewhere an attacker cannot delete them, with alerts on the few things that matter.
- Patching: who does it, how often, and what happens to internet-facing systems first.
- Cost and sprawl: forgotten servers are both a bill and a risk.
How a paid review runs
- Agree scope, and you grant read-only access.
- Check settings against CIS Benchmarks.
- Report what is exposed and what to change, by priority.
- You remove our access.
What this is not
Said plainly
- The Nivasik Team is not a CERT-In empanelled auditor and holds no security certification. If a regulator or customer asks for a report from an empanelled auditor, or for a certificate, that comes from them, not from us.
- No test proves a system is safe. It shows what was found, in the time and scope agreed.
- Nothing is guaranteed: not a pass, not a certificate, not a result.
Questions people ask
Is the secure-infrastructure plan really free?
Yes: one call and a one-page plan, one per company. It tells you what to fix first. Doing the work is separate, and you can do it yourself.
What is an AWS security review?
A check of your cloud account's settings against known good practice (we use CIS Benchmarks): who can do what, what is exposed, and what is not logged.
Do you need access to my cloud?
Not for the free one-page plan; we ask and you answer. A paid review uses read-only access that you grant and remove.
Which clouds do you cover?
AWS, Azure and Google Cloud, and simple setups on a single server.
Ask for it
We reply within a day. Your details go to the Nivasik Team and nowhere else.