Cloud Firewall Configuration Checks and Cloud Security Checks

We provide customers with one-stop cloud security situation awareness and hardening services. The core covers three dimensions:

Cloud Firewall (Cloud FW) Strategy Baseline Inspection: In-depth analysis of the customer's current network traffic access control strategy, compared with Equal Assurance 2.0, CIS benchmarks and industry best practices, identify configuration risks such as redundant policies, excessive permissibility, and exposure of high-risk ports, and output implementable policy optimization suggestions to achieve “least privilege” compliance for network access control.

Cloud resource configuration security audit: Conduct continuous configuration scans on core assets such as computing, storage, and networks on cloud platforms (such as ECS, OSS, VPC, RDS, etc.) to detect “human negligence” hazards such as public buckets, unencrypted disks, privileged IAM roles, and unenabled logs to ensure the “initial security” state of the cloud infrastructure.

In-depth security inspection on the host side: covers the operating system layer, application layer and kernel layer of the customer's cloud server (virtual machine/physical machine), performs vulnerability scanning, weak password detection, abnormal login behavior analysis, malicious process and rootkit investigation, and combines the north-south traffic logs of the cloud FW to achieve a linked closed loop of “border protection+endpoint protection”, comprehensively improving the host's anti-intrusion capability.

Through the combined delivery of the above inspection services, we help customers move security to the left, proactively discover and fix risks before attackers take advantage of configuration flaws, and build a visual and measurable security baseline system from the boundary to the inside of the asset.