360° Analysis
CodeShield scans your full AWS cloud, including serverless functions, databases, EC2 instances, networks, API gateways, IAM policies, security groups, etc.
CodeShield supports your complete AWS technology stack, e.g.:
Deep cloud assessment
CodeShield unifies multiple security checks and merges all findings into a comprehensive graph
Detect common misconfigurations such as unencrypted S3 buckets, missing logging, over-privileged IAM policies
Check your lambdas and containers against the National Vulnerability Database (NVD), OVAL Repositories, and further vulnerability databases
Detect vulnerable container images, known vulnerable packages, insecure configurations, and open ports
Get a complete and up-to-date inventory of all services and assets, including packages and versions, running in your cloud
Detect API gateway routes without authentication, open S3 buckets, or open networks
CodeShield assesses the impact and risks of all findings and prioritizes them to show you the most critical issues in your cloud
Risk assessment & prioritization
CodeShield merges all alerts into a single graph which showcases all high-risk attack vectors and their impact on your assets.
CodeShield consolidates all findings and shows you the issues that - when combined - create a critical attack path.
Detailed graph-based cloud model
CodeShield generates easy to understand, intuitive AWS resource and
data-flow diagrams directly from your AWS cloud.
Interactively explore your entire infrastructure from a birds-eye perspective, spot issues, filter, and look deeper into your cloud resources.
