What’s new in KloudLytics
The changes you would notice, month by month. Fixes and internal work are left out.
- Plans and billing: Free, Pro and Business, paid monthly or yearly through Stripe.
- Compliance evidence export for auditors, on Business.
- Create as many organisations as you need. Each owner gets the Free allowance once.
- This site now publishes every AWS permission KloudLytics requests, and why.
- Code security for GitHub repositories: vulnerable code, vulnerable dependencies and infrastructure-as-code issues, with findings scoped to pull requests.
- NIST 800-53, NIST CSF 2.0 and ISO 27001 join CIS, PCI-DSS, HIPAA and SOC 2 in compliance.
- Controls with nothing to assess show as not applicable instead of passing.
- Attack paths now include SageMaker notebooks, Bedrock agents and knowledge bases.
- Daily and weekly e-mail digests.
- Attack surface mapping: paths from an internet-exposed entry point to a sensitive resource.
- Secret detection in connected GitHub repositories, with AI explanations for code findings.
- New checks for Redshift, ECR, DMS, Lambda function URLs and Cognito.
- Sign in with Google or Amazon.
- Secrets exposure: credentials left in environment variables, user data and templates.
- AI and ML security checks for Amazon Bedrock and SageMaker, with an approved-models policy.
- Suppression rules for findings you have accepted.
- Filter findings and resources by region and tag.
- Teams: invite people by e-mail as Owner, Admin or Member.
- Scheduled scans, with alerts to Slack and Microsoft Teams.
- PCI-DSS compliance, and PDF export of reports.
- API keys for read-only access to your data.
- Scan history with a side-by-side comparison of any two scans.
- AI-written remediation steps on findings.
- Finding status: resolve or suppress, one at a time or in bulk.
- CIS AWS Foundations Benchmark compliance report.
- Public exposure detection for load balancers, RDS and Elasticsearch endpoints.
- Multiple AWS accounts, each through its own cross-account role and external ID.
- Organisations, with data kept separate per organisation.
- Drift detection: what is new since the last scan.
- First release: agentless AWS security checks and a 0–100 posture score.
- Guided onboarding that creates the read-only IAM role with you.
Find out what is actually exposed in your AWS environment.
Connect one AWS account and run your first security assessment.
No credit card · Agentless · Read-only