Our approach
The Health Check consists of four steps. The first three follow the pillars, and the fourth translates the findings into a plan.
Let us know which platforms you use. We'll tailor the scope and schedule the Health Check.
Cloud Security Health Check
SUE’s Cloud Security Health Check is an independent assessment of the security of your cloud environment—from code and pipelines to runtime and infrastructure. You’ll receive a report, a likelihood and impact matrix, and a roadmap that starts with the risks that have the greatest impact and the quick wins.
Health Check
Validate Your Cloud Security
Misconfigurations and overly broad permissions can occur even in well-managed environments, because things change every day. A fresh perspective from the outside can spot what your own team no longer notices.
We assess your environment based on three pillars: Data & Software Security, Application Runtime Security, and Infrastructure Security. The Health Check works for public, private, and hybrid clouds.
SUE specializes in cloud security for regulated industries. Buckaroo, a payment service provider required to comply with PCI DSS, used Wiz to gain a centralized view of the risks in its AWS environment. Huisman Within a few hours, Huisman had a complete picture of the risk profile of its Azure environment.
Why Conduct a Cloud Security Health Check?
Security tools quickly generate more alerts than a team can handle. The Health Check shows which ones matter: we combine findings from the tools with how your environment is actually used, and weigh them based on likelihood and impact.
The Health Check is a snapshot. If you want ongoing insights afterward, Managed Cloud Security can provide them.
01
Code and Pipelines
We assess how well your code, pipelines, and infrastructure code are protected—from secrets management and dependency scanning to access to your repositories.
02
Applications in Production
We'll take a look at how your production environment is secured: workloads and containers, network segmentation, and zero-trust access principles.
03
Infrastructure
We assess identities and permissions, networking, encryption, and logging against best practices, …against best practices such as the CIS Benchmarks, using CSPM tooling and SASE principles.
04
Likelihood and Impact Matrix
We map each risk onto an opportunity-and-impact matrix and use that to create a roadmap, with quick wins at the top and a security framework for the longer term.
Submission
What do you deliver, and how long does it take?
SUE doesn't change anything in your environment. We just need read access and a few hours of your team's time.
1 week from the initial consultation to the review of the security report
Two consultants from SUE are conducting the assessment
The Health Check is free —it won't cost you a thing
What you provide
-
Read access to your cloud accounts AWS Azure Google Cloud
-
Read access to the repositories and pipelines we test
-
An intake session and a review of the report with your platform or security team, totaling about 4 hours
-
The standards you must comply with, such as ISO 27001, NIS2, or PCI-DSS
Completion
What You'll Get: The Security Report
At the end of the week, we'll go over the Security Report with your team: what we found, how significant each risk is, and what you should address first.
The report is yours. You can implement the improvements with your own team, with SUE via Managed Cloud Security, or with another provider.
To learn how to set up and maintain a secure cloud environment, read the cloud security guide. For more information on what SUE does to enhance your security, visit the Cloud Security page.
Security Report
-
Findings by pillar: code and pipelines, applications in production, and infrastructure
-
Risk and Impact Matrix: Which Risks to Address First
-
Roadmap with quick wins and the next steps
-
How to Align Your Environment with CIS Controls, ISO 27001, and NIS2
Cloud Security in Regulated Environments
Buckaroo
Buckaroo Enhances Cloud Security and Simplifies PCI DSS Compliance with Wiz
For a payment service provider, security is not a secondary consideration. It is an integral part of the service...
Huisman
Huisman enhances cloud security and compliance with Wiz
By implementing Wiz, Huisman gained full visibility into its Azure environment. This allows...
About SUE
Modernize the code. Optimize the cloud. Run the platform.
SUE is a Dutch cloud native solutions partner that modernizes mission-critical applications, reduces cloud costs, and manages your platform. Specialists in Linux, Kubernetes, and the cloud.
29+
Years Experience
150+
Engineers and consultants
1.150+
Certifications
ISO
9001 & 27001
500+
Projects
75+
Research papersFrequently asked questions
All frequently asked questions
SUE checks three areas: the security of your code and pipelines, the security of your applications in production, and the configuration of your cloud infrastructure, such as identities, permissions, networking, encryption, and logging. Each finding is assigned a score based on likelihood and impact, so you know where to start.
Yes. The Health Check works for public, private, and hybrid clouds: AWS, Azure, and Google Cloud, as well as Kubernetes clusters in your own data center. The three pillars remain the same. We adapt the tools and checks to the platform.
A penetration test attempts to gain access through vulnerabilities in an application or network. The Cloud Security Health Check assesses the setup of your entire cloud environment: configurations, permissions, pipelines, and runtime. They complement each other. Many cloud risks—such as overly broad permissions or a publicly accessible storage bucket—are identified more quickly through a configuration review than through a penetration test.
The Cloud Security Health Check is a one-time, one-week assessment conducted by two consultants. You’ll receive a roadmap outlining the most urgent areas for improvement. Managed Cloud Security is an ongoing service: SUE monitors your environment and follows up on findings. The Health Check is therefore a logical first step.
One week, with two consultants from SUE. Your team will spend about 4 hours on this, mainly on the intake and reviewing the report.
Nothing. The Cloud Security Health Check is free. The Security Report is yours: you can implement the improvements with your own team, with SUE, or with another provider.
Schedule Your Health Check
Schedule Your Health Check
Let us know which platforms you use. We'll tailor the scope and schedule the Health Check.
* required