Assure · Offensive Security & Assurance · Fixed-scope assessment
Cloud Attack-Path Testing
An attacker with one foothold, a leaked access key, a compromised developer laptop or a poisoned build dependency, rarely stops there. We start from that foothold, under your written authorisation and an agreed scope, and map how far it leads: privilege escalation, movement between accounts, and paths to your data and production.
Talk to us about this
Who it is for
Engineering-led organisations on AWS that want to know what an attacker could actually reach, not just a list of misconfigurations.
What is included
- Assumed-breach testing from an agreed starting point
- Privilege-escalation and cross-account path analysis
- CI/CD pipeline and software supply-chain attack review
- Secrets exposure in code, pipelines and infrastructure
- Detection check: which steps your monitoring saw, and which it missed
What you get
- An attack-path report showing each route from foothold to impact
- Findings ranked by real exploitability
- Fixes written as infrastructure-as-code changes your engineers can merge
- A debrief with your engineering and security leads
Every engagement runs under written authorisation, a signed scope and agreed rules of engagement, and within AWS's policy for penetration testing.
Why Cipherer
- Principal-led. The person who scopes the work does the work, with no hand-off to a junior team.
- SC-cleared principal consultant (National Security Vetting), and a Cyber Essentials certified company.
- Seventeen years of delivery across government, healthcare, banking and Web3, including an organisation-wide cyber security programme for the Scottish Government.
- Security by design in everything we build and run, from a community website to a bank's data platform.
- One partner from advice to operation, based in Scotland and working across the UK.
Every engagement starts with a short call to agree scope, then a written proposal setting out deliverables, timeline and price.