CodeShield

CodeShield is a cloud security tool that identifies over-privileged IAM policies and attack paths in AWS, helping organizations find and fix insecure permissions before attackers exploit them. It targets cloud developers, security teams, and IT operations in companies of various sizes, particularly those using AWS. The platform uses a white-box approach to reveal hidden connections between misconfigurations and vulnerabilities, and classifies findings according to MITRE ATT&CK. It also offers pre-deployment checks for infrastructure-as-code changes to prevent privilege escalations.

Key features

• Identifies IAM privilege escalation vulnerabilities
• Reveals attack paths and hidden connections
• Classifies findings by MITRE ATT&CK
• Shows impact on cloud resources
• Pre-deployment checks for infrastructure-as-code
• Understands effective IAM permissions in code and cloud