Secure CompassYour AWS accounts have security gaps you don't know about
Assess your AWS accounts against the Well-Architected Security Pillar, find publicly exposed resources, and map compliance gaps. Results in minutes.
AWS Advanced Consulting Partner82% of AWS accounts we assess have at least one publicly exposed resource.
Based on assessments across hundreds of AWS accounts. Check your exposure →
Security Pillar Assessment
228 controls assessed against the AWS Well-Architected Security Pillar. See which design principles pass, which fail, and track improvement over time.
10 security design principles evaluated
Period-over-period comparison
Per-service compliance breakdown
Public Exposure Scanner
Find every publicly accessible resource in your AWS account. S3 buckets, EC2 instances, RDS databases, API endpoints, and 18 more resource types.
22 resource types scanned
Risk-ranked findings with remediation guidance
Acknowledge intentional exposures
Compliance Mapping
See exactly where you stand against SOC 2, ISO 27001, PCI-DSS, HIPAA, and NIST. Specific controls that are failing, not just a percentage. Gap analysis with audit evidence you can share.
Executive Reports
One-click PDF reports designed for board presentations. Compliance score, trend comparison, priority findings, and specific recommendations. Prioritised action items with resource details.
Built by AWS specialists
Secure Compass is built and operated by base2Services, an AWS Advanced Consulting Partner. We specialise in platform engineering on AWS and DevOps, providing an infrastructure lens backed by real engineers. You get clarity on risk, architecture guidance, and action beyond your report. This tool is part of how we assess every new customer.
Need more than an assessment? That's where the real work starts. Security remediation, compliance support, and ongoing AWS operations.
FAQ
Is the assessment really free?
Yes. The full Security Pillar assessment (228 controls) and Public Exposure scanner are free with no credit card required. You get a complete report on your first scan.
What access does it need to my AWS account?
A read-only IAM role deployed via CloudFormation. No write access, no credentials stored. You can review the CloudFormation template before deploying.
What compliance frameworks do you support?
SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST CSF, and FedRAMP. Each framework shows your compliance rate and the specific controls that are failing.
How long does setup take?
About 5 minutes. Sign up, add your AWS account ID, deploy the CloudFormation stack (one click), and your first assessment runs automatically.
What's the relationship with base2Services?
Secure Compass is built and operated by base2Services, an AWS Advanced Consulting Partner. If your assessment reveals gaps you need help fixing, base2 provides managed AWS services and security remediation.
Can I share my report with my team or board?
Yes. The Executive Report is designed for non-technical stakeholders and can be exported as a PDF for board presentations or audit evidence.
Still have questions? Talk to us — or just run the free assessment and see for yourself.