Cloud Security Plus

Monitor and analyse public cloud activity and configurations

Public cloud platforms generate diverse logs and change events. That dispersal makes it hard for IT teams to maintain visibility, spot suspicious access, or verify configuration changes.

Where Cloud Security Plus is used

Monitor user activity and resource changes across AWS, Azure, GCP and Salesforce to detect anomalies and potential security events. Use indexed logs and predefined reports to support investigations and provide evidence for internal or regulatory review.

Fits within these solutions

Compliance Reporting

Identity Threat Detection & Response

Delivery & Deployment

SaaS / Cloud

Suitable environments

Fits organisations running public cloud infrastructure or multi-cloud estates with an internal IT or security operations team. Useful for mid-market and enterprise environments that need consolidated visibility across AWS, Azure, Google Cloud and Salesforce while meeting regulatory reporting needs.

Benefits

Improved cloud visibility

Unified view of activity and configurations across AWS, Azure, GCP and Salesforce.

Faster detection

Alerts and detection reduce time to spot anomalous or risky activity.

Quicker investigations

Searchable logs and predefined reports speed root-cause analysis.

Configuration audit trail

Recorded configuration changes provide an audit trail for review.

Support for remediation

Actionable alerts and reports give IT teams the context needed to remediate issues.

Compliance reporting

Predefined reports help generate evidence for regulatory or internal review.

Capabilities

Collect cloud logs

Ingests activity and configuration logs from AWS, Azure, Google Cloud and Salesforce.

Normalise and index

Normalises disparate cloud log formats and indexes them for search and correlation.

Monitor activity and configs

Continuously monitors user activity and resource configuration across supported clouds.

Detect security events

Identifies security-relevant events and anomalies in cloud activity.

Detect configuration changes

Detects and records changes to cloud configurations and resources.

Detect unusual activity

Flags atypical user behaviour such as unusual logons or access patterns.

Alerts and notifications

Sends configurable alerts for detected events to support timely investigation.

Reports and searchable logs

Provides predefined reports and a search engine for investigations and audits.

Applications

Multi-cloud monitoring

Centralise activity and configuration monitoring across AWS, Azure and GCP.

Salesforce user auditing

Track user actions and unusual access within Salesforce for incident triage.

Configuration audits

Audit configuration changes on cloud resources to detect misconfigurations.

Event alerting

Notify security teams of real-time events and anomalies for investigation.

Investigation and forensics

Use indexed logs and reports to investigate incidents and determine scope.

Compliance evidence

Produce predefined reports and logs as evidence for audits and reviews.