How many of your AWS resources are publicly exposed?
82% of AWS accounts we scan have at least one public exposure. 22 resource types checked. Results in minutes.
Free. No credit card. Read-only access. 5 minutes to set up.
Set up in minutes. Read-only access.
Sign up
GitHub, Google, or Microsoft login. Takes seconds.
Deploy read-only access
One CloudFormation template. Creates a read-only IAM role. No write access, no credentials stored.
See what's exposed
Your scan runs automatically. Every publicly accessible resource, ranked by risk, with remediation guidance.
22 resource types scanned
We check every resource type that can be publicly exposed in your AWS account.
Read-only access only. We never modify your resources.
What we've found
Questions
What access does the scan need?
A read-only IAM role deployed via CloudFormation. No write access, no credentials stored. You can revoke access at any time by deleting the CloudFormation stack.
How long does the scan take?
Setup takes about 5 minutes. The scan runs in under 2 minutes and results appear automatically.
What happens if exposures are found?
You see every publicly accessible resource ranked by risk, with specific remediation steps. You can acknowledge intentional exposures (like public-facing load balancers) to focus on real issues.
Can I scan multiple accounts?
Yes. Add as many AWS accounts as you need. Each gets its own scan results and you can switch between them.
Who builds this?
Secure Compass is built by base2Services, an AWS Advanced Consulting Partner specialising in platform engineering and managed AWS operations.
Every day you don't scan is a day your resources might be exposed.
22 resource types. Read-only access. Results in minutes. Free.
Scan My Account