FREE 30 DAY TRIAL. A second pair of eyes on your AWS security: an AWS SHIP assessment, ranked findings and a remediation roadmap that updates daily. Zero config, 15 min setup.
Your AWS changes faster than anyone can review it.
New accounts, new Regions, new services, new AI workloads, new people. Security posture drifts between reviews, and the moments that matter most are when you need another look: before an audit, after an incident, after a change in ownership or team, or when your environment simply grew faster than your security team.
SHIP gives you the roadmap. AlertD runs the assessment behind it.
The AWS Security Health Improvement Program (SHIP) is a no-cost engagement led by AWS Solutions Architects and AWS Partners. It starts with the SATv2 and Security Reference Architecture (SRA) Verify assessments and ends with a prioritized roadmap. AlertD agentic teammates run all 319 checks inside your VPC, rank every finding by blast radius, and produce the SHIP report your Solutions Architect or partner reviews with you. Then they rerun the checks every day.
What a second pair of eyes finds
Critical issues on day one. In every AWS environment AlertD has assessed, the first run surfaced at least 20 critical findings and resources reachable from the internet.
The usual drift. Databases and caches open to the internet, public EBS snapshots, DNS records left pointing at released IP addresses, and accounts without S3 Block Public Access.
Security services never turned on. See which of Security Hub, GuardDuty, Inspector, AWS Config, IAM Access Analyzer, WAF, Network Firewall, KMS and Secrets Manager are on in each Region, how many SHIP checks each gap blocks, and a link to turn it on.
AI workloads. Amazon Bedrock agents without guardrails, missing prompt-attack and sensitive-information filters, and over-privileged Bedrock API keys.
What you get from SHIP with AlertD
An engagement that starts with your data. Your Solutions Architect or partner arrives with ranked findings from your own accounts, so the time goes to priorities, not data collection.
A roadmap your team can work. Findings are grouped by SHIP use case, such as network protection, permissions, configuration monitoring and application firewall. Each one comes with a fix in console steps, AWS CLI, CloudFormation or Terraform.
Progress you can show. The SHIP report updates daily and shows what closed since the last engagement, for your team, your leadership and your auditors.
Answers where you work. Ask the teammates in Slack, or from Claude Code over MCP, what changed since the last review.
Who uses AlertD for SHIP
Platform, SRE and security teams preparing for a SHIP engagement or following up on one.
Teams that want a second pair of eyes before a SOC 2, PCI or other audit, after a security incident, or after a change in ownership, team or architecture.
Fast-growing teams adding accounts, Regions and AI workloads faster than they can review them.
AWS Solutions Architects, AWS Partners, MSSPs and SIs delivering SHIP to their customers.
How it runs
Zero configuration. One CloudFormation stack on Amazon ECS in your VPC, installed in about 15 minutes, with first findings in under an hour.
Read only, with no write permissions in your AWS accounts. Your data stays in your VPC.
Uses Amazon Bedrock by default, or bring your own model. SOC 2 Type II.
Beyond SHIP
The same agentic teammates cover cost, compliance, performance and Amazon Bedrock workloads. See the AlertD Agentic Teammates for AWS and Bedrock listing.
Start a free 30 day trial. Billed on your AWS bill, with no annual commitment. To set up a SHIP engagement, ask your AlertD representative to engage your AWS account team.
Highlights
AWS SHIP ASSESSMENT AND ROADMAP. AlertD runs all 319 SATv2 and SRA Verify checks across your AWS accounts and Regions, ranks findings by blast radius and produces a printable SHIP report your Solutions Architect or partner reviews with you. You leave with a prioritized roadmap, not a one-time scan.
A SECOND PAIR OF EYES WHEN IT MATTERS. Before an audit, after an incident, after a team or ownership change, or when you grew faster than you could review. In every AWS environment AlertD has assessed, the first run found at least 20 critical issues and resources reachable from the internet. Checks rerun daily, so drift shows up before the next review.
FREE 30 DAY TRIAL. ZERO CONFIGURATION, 15 MINUTE SETUP. One CloudFormation stack on Amazon ECS in your VPC. Read only. SOC 2 Type II. Billed on your AWS bill with no annual commitment.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This listing uses a single usage-based dimension: AlertD Charge Units. You pay based on consumption rather than a fixed subscription. Charges accrue from two activities: resource ingestion and AI processing. As you ingest more AWS resources or run more AI-driven work, you consume more units. Billing flows through your existing AWS bill under standard Marketplace terms. There are no separate tiers or instance sizes to choose from. Your cost scales directly with how much you use the service.
Top-of-mind questions for buyers
What counts as one AlertD Charge Unit?
A Charge Unit meters two activities. The first is resource ingestion, where AlertD reads the AWS resources in your environment. The second is AI processing, where the agents analyze that data. Both activities consume units, so your count rises with the number of resources read and the volume of AI work run.
Which activity drives most of my Charge Unit consumption?
Both resource ingestion and AI processing draw from the same unit pool and appear on one bill. Ingestion units scale with how many AWS resources AlertD reads. AI units scale with how much agent-driven analysis you run. Environments with large resource footprints and heavy AI workloads consume units from both activities at once.
Am I charged when AlertD is not actively running assessments?
Charges accrue from actual resource ingestion and AI processing. When the agents are not reading resources or running AI work, those activities do not consume units. Because the agents run continuously to do operational tasks, consumption tends to track ongoing activity in your environment rather than a fixed rate.
www.alertd.ai
Helpful?
Vendor refund policy
AlertD is billed by usage only: no subscriptions, seats, or prepaid balances. You're charged only for completed, metered activity, and failed requests are never billed. Because nothing is prepaid, all charges are final and non-refundable. If you believe a charge is a billing error, email support@alertd.ai within 30 days with your AWS account ID and the charge in question, and we'll investigate and correct any verified error.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Default Model Profile: "bedrock" needs no key. For "claude", "openai" or "gemini", enter the matching API key.
Custom Domain and Certificate ARN (optional): the certificate must be in ACM in us-east-1.
VPC ID and Subnets (optional): leave blank to create a new VPC.
Keep the defaults for everything else.
Accept the IAM acknowledgement and choose Create stack (about 15 minutes).
When the stack shows CREATE_COMPLETE, open AlertDApplicationURL from the Outputs tab.
Support
Vendor support
AlertD provides email-based support for all subscribers. For assistance with deployment, agent configuration, troubleshooting, or general product questions, contact the support team at support@alertd.ai. AlertD deploys as a container on Amazon ECS within your VPC, and the support team can assist with initial setup and ongoing configuration questions. The product includes 319 built-in SHIP checks (SATv2 and SRA Verify), and support covers questions related to interpreting findings, understanding blast radius context, and applying the recommended fix guidance included with each finding. For issues related to AWS Marketplace subscriptions, billing, or refund requests, you may also contact AWS Marketplace Customer Support directly through the AWS Management Console.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Phoenix Security is an Application Security Posture Management (ASPM) platform that cuts vulnerability noise by up to 98% through code-to-cloud reachability analysis, contextual deduplication, and automated ownership attribution. The platform correlates findings across SAST, SCA, container, and cloud scanners into a single prioritized backlog scored by the 4D Risk Model: exploitability, exposure, reachability, and business impact. PYRUS metadata routes every finding to the accountable team using AWS tags, Kubernetes labels, CODEOWNERS, Backstage, and ServiceNow.Three AI agents Researcher (Intelligence), Analyzer (attack paths), and Remediator (patches, fix bundles, code fixes) accelerate remediation 10x without removing human control.Built for AWS-native workloads on EKS, ECS, Fargate, and Lambda. Named a Major Player in the IDC MarketScape: Worldwide ASPM 2025.
Protect your AWS environment with our expert-led Cloud Security Assessment and Penetration Testing services.
We identify vulnerabilities, simulate real-world attack scenarios, and provide actionable remediation plans to strengthen your security posture and ensure compliance.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.