Sold by: MarketOps Cloud
Deployed on AWS
FTR-ready AWS governance audit in 2 minutes. Identifies drift and waste across 34 regions with SHA-384 sealed reports for CFOs and auditors. Read-only IAM deployment.
Overview
Sovereign 28: Automated AWS Governance Audit and FTR Readiness
Sovereign 28 is a governance audit engine engineered for organizations requiring deterministic proof of cloud integrity. While native tools provide broad monitoring, Sovereign 28 acts as a surgical governance layer that evaluates AWS infrastructure and translates its findings into board ready, cryptographically sealed audit artifacts.
The Sovereign Approach
Complements Native Tools: Sovereign 28 does not replace AWS Security Hub, AWS Config, or AWS Trusted Advisor. It complements these native services by providing an independent governance assessment and consolidated evidence artifact mapped to FTR, SOC 2, Well-Architected Framework, PCI DSS, and HIPAA requirements.
FTR Acceleration: Audit logic is mapped specifically to AWS Foundational Technical Review (FTR) requirements, helping reduce manual evidence collection and documentation effort for AWS Technical Account Managers (TAMs), CTOs, and engineering teams preparing for FTR.
Deterministic Integrity: Every report is dual sealed with a SHA 384 cryptographic signature across both the evidence envelope and artifact manifest, providing cryptographic integrity evidence that allows subsequent verification of whether the artifact or evidence manifest has changed.
Read-Only Security: Sovereign 28 uses a restricted, read only IAM role provisioned via CloudFormation. The assessment requires no write permissions and performs no infrastructure mutation.
28 Audit Vectors Across 12 Control Domains
- Compute Core (F1-F4): EC2 resource drift, Lambda hygiene, and ECS cluster maturity.
- Storage Vault (F5-F8): Unattached EBS leakage and ECR image storage exposure.
- Database Layer (F9-F12): Publicly accessible RDS instances and unencrypted storage.
- Vault and Secret (F13-F16): KMS key rotation gaps and Secrets Manager credential governance.
- Network Path (F17-F20): Idle EIP waste and Transit Gateway drift.
- Identity and Edge (F21-F24): IAM MFA drift, unrestricted security groups, and WAF-less ALB exposure.
- Audit and Cert (F25-F28): Config Recorder gaps, CloudTrail coverage, and SHA-384 seal verification.
Every artifact includes a machine-readable JSON GRC manifest for direct ingestion into ServiceNow, Splunk, and enterprise GRC pipelines.
Who Should Use Sovereign 28?
- Organizations preparing for AWS FTR that need to automate evidence collection and identify governance gaps.
- Finance Teams and CFOs requiring audit-grade reports for EBITDA recovery and capital leakage identification.
- Compliance Officers requiring cryptographically verifiable evidence trails for PCI DSS, HIPAA, SOC 2, and related assessment activities.
- CTOs and Engineering Leaders needing evidence and control observations that support assessment and readiness activities for FTR, SOC 2, Well-Architected Framework, PCI DSS, and HIPAA requirements.
What Sovereign 28 Is NOT
- Not a policy enforcement engine, use AWS Organizations and Service Control Policies (SCPs) for preventive controls.
- Not a continuous compliance platform, use AWS Security Hub, AWS Config, and other native AWS services for ongoing posture management.
- Not a compliance certification, Sovereign 28 provides assessment evidence and readiness information; it does not certify an organization as compliant.
How It Works
Highlights
- FTR Readiness and Audit Aggregation: Sovereign-28 evaluates 28 governance audit vectors across up to 34 supported AWS Regions and consolidates assessment results into a single SHA-384 integrity-sealed audit artifact mapped to FTR readiness requirements. Provides structured evidence for AWS Technical Account Managers, auditors, and compliance teams, with a machine-readable JSON manifest for GRC pipeline integration.
- <strong>Deterministic SHA-384 Audit Reports:</strong> Move beyond operational dashboards that can make historical assessment difficult to verify. Every audit result is hashed and dual-sealed with SHA-384 cryptographic hashes across both the evidence envelope and artifact manifest. The resulting integrity-verifiable reports provide a deterministic evidence record for CFOs, board members, technical teams, and external auditors.
- <strong>14-Day EBITDA Recovery Guarantee:</strong> Sovereign-28 identifies actionable cloud waste, capital leakage, and architectural governance gaps that operational dashboards may not surface. If Sovereign-28 does not identify actionable capital leakage or architectural drift within 14 days of the initial forensic scan, we provide a full, unconditional refund of the applicable audit fees and usage charges.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Sovereign-28 Institutional Access: Monitoring and Dashboard | Provides 24/7 continuous drift surveillance and access to the Sovereign-28 Governance Dashboard. Includes real-time visibility into control domain status, review indicators, regional coverage, and SHA-384 artifact integrity verification. Audit artifact generation and download are billed separately per forensic unit. Includes the 14-day EBITDA recovery guarantee. | $100.00 |
Dimension | Description | Cost/unit |
|---|---|---|
Sovereign-28 Forensic Audit Artifact: SHA-384 Report and Remediation CLI | SHA-384 sealed audit artifact. 28 governance vectors. CLI remediation per finding. | $200.00 |
Dimensions summary
This listing splits pricing into two related parts. The Sovereign-28 Institutional Access dimension is a subscription that provides 24/7 monitoring, dashboard access, and the interface used to prepare AWS Foundational Technical Reviews. It does not include generating or downloading forensic artifacts. Those come from the Apex Forensic Artifact dimension, which you buy per unit. Each artifact unit delivers a hashed SHA-256 report with a 20-vector audit and F17 remediation code. So you pay for ongoing access separately from each artifact you generate. Artifact costs scale with how many units you produce.
Top-of-mind questions for buyers
Each unit is one hashed SHA-256 forensic report sealed via a ledger. It includes a 20-vector audit and F17 CLI remediation code. You buy artifacts individually, so cost rises with the number of units you generate and download.
No. The subscription covers 24/7 forensic monitoring, dashboard access, architectural drift surveillance, and the interface for AWS Foundational Technical Reviews. Artifact generation and download are excluded. You must buy each artifact separately through the Apex Forensic Artifact dimension.
The two dimensions bill independently. The Sovereign-28 subscription is an ongoing access charge for monitoring and the artifact-generation interface. Apex Forensic Artifact charges apply per unit you produce. Your total is the recurring access fee plus the count of artifacts generated.
app.marketopscloud.com
Helpful?
Vendor refund policy
Sovereign-28 stands behind the precision of our 28-vector forensic methodology. In accordance with our 14-day compliance guarantee, if the Sovereign engine fails to identify actionable capital leakage or architectural drift within 14 days of the initial forensic scan, buyers are entitled to a full, unconditional refund of the contract and usage fees. To request a refund, please contact our Forensic Support team at support@marketopscloud.com with your AWS Customer ID.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
Sovereign-28 provides institutional-grade support to ensure seamless forensic integration. Our Global Operations Center (GOC) monitors all forensic handshakes 24/7 to maintain the integrity of our SHA-256 cryptographic seals.
Support Channels:
Forensic Engineering: Direct access to our senior team via support@marketopscloud.com or admin@marketopscloud.com .
Response SLA: We provide a 5-hour initial response time for all technical inquiries and a 4-hour priority response for forensic artifact verification.
Service Level Commitment: Our support team specializes in AWS Foundational Technical Review (FTR) compliance and can assist Alliance Leads in interpreting forensic artifacts for Modernization Funding justifications. Every engagement is protected by our 14-day Sovereign Compliance Guarantee
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Sovereign-28 by MarketOps Cloud delivers expert AWS governance assessments with cost recovery analysis and SHA-384 sealed compliance artifacts for enterprise environments.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.