SecureGraph uses only the keys you grant, and nothing wider
Cloud posture is an access problem before it is a scanning problem. SecureGraph works inside the credentials and scope you grant. It uses no standing access and no wider reach. Every finding lands in your security database.
What ships
- Cloud and container packs, enabled when credentials and scope allow
- Network exposure: reachable hosts, ports, and services with first-seen and last-seen timelines
- TLS posture on public endpoints: legacy protocols, weak ciphers, and certificate issues
- CIS-style host targets for the workloads behind the perimeter
- Docker-isolated execution with a per-organization concurrency lock
Cloud and container packs are an add-on. What runs depends on the credentials and scope you grant. Ask us what is live for your provider today.
Targets are SSRF-guarded: only http and https. SecureGraph blocks private ranges and cloud metadata endpoints. DNS-rebinding defense is active.
Every surface, one Command Centre
See how SecureGraph tests cloud on your own stack
Walk through the product yourself, or talk to the team about a scoped assessment.