Overview
ADG's Cloud Security Posture Assessment gives security and IT leaders an independent, evidence-based view of how their AWS environment, and the Microsoft 365 / Entra ID tenant that usually governs identity around it, measures up against recognised security baselines. Delivered by Accelera Digital Group (ADG), a cybersecurity and cloud advisory firm with offices in Europe,Middle East and Africa. The engagement combines automated assessment with manual analysis by certified engineers. Every finding is validated, put in business context and ranked by risk, so you receive a remediation plan rather than a raw scan export. For AWS, ADG assesses individual accounts or a full AWS Organizations estate across services including AWS IAM, Amazon S3, Amazon EC2, Amazon VPC, AWS CloudTrail, AWS Config, Amazon GuardDuty, AWS Security Hub, AWS KMS, Amazon RDS, AWS Lambda and Amazon CloudWatch, and maps results to the CIS AWS Foundations Benchmark, AWS Foundational Security Best Practices, ISO/IEC 27001, SOC 2, NIST SP 800-53 and PCI DSS. Access is strictly read-only: you deploy an IAM role in your account from a supplied AWS CloudFormation template, using the AWS-managed SecurityAudit and ViewOnlyAccess policies, and ADG assumes it through AWS STS with an external ID. No agents are installed and no configuration is changed. Full documentation of the role, its policy statements and how it is used is provided at kick-off. For Microsoft 365, Maester runs over 400 automated tests across Entra ID Conditional Access, MFA, privileged roles, Exchange Online, Microsoft Teams and Purview, aligned to CISA SCuBA, CIS Microsoft 365 and Microsoft's recommended settings. Each engagement follows four phases: scoping and read-only access setup; automated scanning with coverage checks; expert analysis; and a findings walkthrough with your team. You receive a report with an executive summary, severity-ranked findings, compliance framework scores and step-by-step remediation guidance; an interactive HTML findings explorer your engineers can filter by account, service, severity and framework; and a prioritised remediation roadmap. Any coverage gaps (for example disabled APIs or regions) are reported explicitly. An optional retest re-runs the same baseline after remediation and reports progress like-for-like. Where relevant, findings are also mapped to East African regulatory obligations such as Kenya's Data Protection Act 2019 and Central Bank of Kenya cybersecurity guidance. This professional service relates to AWS IAM, AWS Organizations, AWS Security Hub, AWS Config, AWS CloudTrail and Amazon GuardDuty, and to Prowler Cloud on AWS Marketplace. The customer is responsible for any additional AWS infrastructure charges (such as AWS Config, AWS CloudTrail or AWS Security Hub usage, or API request charges) incurred separately from the AWS Marketplace transaction.
Highlights
- Infrastructure and identity in one assessment: The services evaluates your AWS accounts and AWS Organization against CIS AWS Foundations, AWS Foundational Security Best Practices, ISO 27001, SOC 2, NIST and PCI DSS, and tests the Microsoft 365 and Entra ID controls that govern who can reach them. One team, one consolidated cloud security posture view.
- Read-only and non-intrusive: access is through an IAM role you deploy from our CloudFormation template (AWS-managed SecurityAudit and ViewOnlyAccess policies), assumed via AWS STS with an external ID. No agents, no configuration changes, per-client credential isolation, and access revoked at engagement close.
- Actionable deliverables, not raw scan output: a validated, severity-ranked report with remediation steps, an interactive findings explorer, a prioritised remediation roadmap, a walkthrough with your engineers, and an optional retest that measures progress against your original baseline.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Pricing
Custom pricing options
How can we make this page better?
Legal
Content disclaimer
Support
Vendor support
Accelera Digital Group (ADG), Cybersecurity.
Email: cyber@adg.io
Phone: +254748333444
Web: <www.adg.io >
Pre-purchase: ADG responds to scoping, pricing and private offer enquiries within one business day. A short scoping call confirms accounts, regions, cloud tenant and compliance frameworks in scope.
Post-purchase: a named ADG engagement lead contacts you within two business days of purchase with next steps, the read-only IAM role CloudFormation template and its documentation, and a kick-off date.
During the engagement, support is by email and Microsoft Teams, Monday to Friday, 08:00 to 17:00 EAT (UTC+3). After delivery, 30 days of clarification support on findings and remediation guidance is included. Remediation implementation and retests are available as separate options.