NEXORA CSPM
Paste your cloud config, get real findings back. The same class of check a live-connected scanner runs — public buckets, open security groups, over-permissive policies — on a resource description you provide.
Describe. Scan. Fix.
01
Describe
List your resources as JSON — buckets, security groups, IAM policies.
02
Scan
A real rule set checks each resource against known misconfiguration patterns.
03
Fix
Get back concrete findings, ranked by severity, with what to change.
What’s real today
- →S3 buckets: public read access, missing encryption
- →Security groups: ingress open to 0.0.0.0/0, sensitive ports flagged separately
- →IAM policies: wildcard actions and resources
- →Databases: public accessibility, missing encryption
- →Usage logged to your organisation's Console → Usage view
Rule-based checks on data you provide today; connecting a live cloud account is on the roadmap — see Concepts.