A fixed-price Cloud Security Baseline Audit for startups. You get a clear, prioritised report in 3 business days, and I can implement the fixes if you want.
customer-uploads allows public readExcerpt from the sample report
The most common ways startups get breached on AWS are misconfigurations, not clever hacks. This audit checks for them and tells you exactly what to change.
Root account use, MFA, unused access keys, and users or roles with far more permission than they need.
Public buckets, open bucket policies, missing encryption, and missing access logging.
If something goes wrong, can you see who did what? Logging coverage, retention, and integrity.
Security group rules that expose SSH, remote desktop, or databases to the whole internet.
This is a redacted report from an audit of my own test environment. Your report follows the same format.
Three steps, and you always know what happens next.
A free 30-minute call about your AWS setup and what worries you most. If the audit isn't a good fit, I'll say so.
You sign a short authorisation and create a temporary read-only user. I review your account against the CIS benchmark.
You get the report within 3 business days. If you want, I fix the Critical and High findings, then re-scan to prove they're resolved.
Giving someone access to your cloud account is a serious decision. These rules apply to every engagement, with no exceptions.
I'm Ishtiyak Mahmud, a cloud security consultant working with startups worldwide from Bangladesh. I help small teams find the AWS misconfigurations that lead to breaches, and I fix them instead of only reporting them.
I keep my scope narrow on purpose. I'd rather do one thing very well than promise everything.
No. The audit uses read-only access, so nothing in your account can be changed. If you want me to implement fixes, we agree on each change in writing first.
This audit is for AWS. If you use another provider, mention it on the scoping call and I'll tell you honestly whether I can help.
That's a good result, and the report documents it. A clean baseline is useful evidence for investors and enterprise customers.
50% before the audit starts and 50% on delivery. I accept international payments through Payoneer, Wise, and PayPal.
Book a free 30-minute scoping call. No obligation, no sales pitch.