AWS
Root and console MFA, S3 public access and CloudTrail logging, with the SecurityAudit policy.
Integrations
Every connection is optional: you can start by answering in your own words. Connected, DoveSure observes your systems with read-only access, tests them on a schedule, and names the exact users, buckets, repositories or devices that fail.
Using Microsoft 365 or Google Workspace? Connect it with read-only access when you want some answers observed automatically. It is optional.
Root and console MFA, S3 public access and CloudTrail logging, with the SecurityAudit policy.
Two-factor enforcement, branch review rules and ageing Dependabot alerts, read-only.
MFA on every active user and dormant accounts, with a read-only token.
2-Step Verification for every user and administrator, and dormant accounts, through read-only domain-wide delegation.
MFA registration, whether Security Defaults or Conditional Access actually require MFA, administrators and dormant accounts.
Storage public access and TLS, Activity Log export and Defender for Cloud, with the Reader roles.
Bucket public access prevention, uniform access and project IAM, with read-only roles.
Security issues past their remediation window, and whether production changes are ticketed.
Leavers with their termination dates, and employees without a manager, for joiner and leaver controls.
Disk encryption, compliance and check-ins for every managed device, named device by device.
Management, FileVault and check-ins for every Mac, with a read-only API client.
Open critical and high issues and how long each has been open, judged against your remediation window.
Sensor health, prevention policy and reduced functionality for every host, with a read-only API client.
Security awareness training completion for every active user, with expired and past-due courses named, and recent phishing simulations.
A read-only REST API for your own reporting, and signed webhooks that tell your systems when something changes.
What each result proves, and how evidence is kept: Compliance Management and Security.
Know what you are responsible for, control whether it works, and prove it to anyone who asks.