CloudGuard Lite Reviews & Product Details

See your AWS account the way an attacker would. CloudGuard Lite is an affordable, read-only AWS security and compliance scanner for founders, startups, and small teams who need enterprise-grade cloud security without an enterprise budget — especially when you're preparing for SOC 2 or answering a customer's security questionnaire. Connect an AWS account and scan across 12 core services — S3, IAM, EC2, VPC, RDS, CloudTrail, Lambda, ECS, EKS, Secrets Manager, GuardDuty, and KMS — across every enabled region to surface the misconfigurations attackers look for. Every scan gives a security score, prioritised findings, and the exact command to fix each one. It maps chained findings into real attack paths (like a public S3 bucket leading to data exposure), detects live threats from CloudTrail and GuardDuty, and builds your asset inventory automatically. Compliance is built in: each scan is mapped to the CIS AWS Foundations Benchmark, SOC 2, ISO 27001, and NIST 800-53, with framework pass rates and an exportable PDF report for auditors and customer security reviews. Access is least-privilege and read-only by design — no write access, no agents. You review a read-only IAM policy before pasting it, and credentials are encrypted at rest. It's cloud security posture management (CSPM) a solo builder can actually run. Every plan, including Free, scans all 12 services and shows every finding, with unlimited scans. You pay only for the workflow — scheduled scans, compliance evidence, attack paths, threat detection, and scan history. Paid plans start at $29/month, with a 14-day trial that falls back to Free.