Act Security Platform

Eliminating cyber threats across the kill chain by proactively applying access controls, across initial access, execution, discovery, lateral movement, and exfiltration. Act Security converges IAM and network access into a single converged cloud control plane, enabling both guardrail as well as least-privilege access policy enforcement through native AWS controls (e.g. Security Groups, nACLs, S/RCPs, IAM policy) without agents, sidecars, or third-party infrastructure.

Key Capabilities:

• Perimeter Discovery: Automatically cluster cloud resources into logical contextual perimeters by application, business unit, environment and data;
• Cloud Access Modeling: Map configured, observed, and intentional access across every perimeter. Act cross-analyzes IAM policies, Security Groups, VPC boundaries, SCPs, and RCPs to expose the gaps between what's permitted, what's used, and what was meant to be allowed.
• Access Hardening Campaigns: After modeling the cloud, Act generates the highest-ROI access-hardening policy enforcement action plans, called campaigns, on both the network and IAM layers, orchestrating existing cloud-native controls. Act's campaign engine addresses not only existing security gaps but, more importantly, prevents unintended access that does not yet exist.
• Policy Enforcement: Continuously roll out hardened policies through AWS-native controls you already own - Security Groups, SCPs, RCPs - orchestrated through Infrastructure-as-Code.