Cloud Security Posture & Misconfiguration Risk

NovaTerrain Systems • 94,000+ resources • 34 AWS + 12 Azure + 8 GCP accounts

Last scan
2 hours ago
Age-Weighted Critical Backlog
638
+63% vs 10w ago
Remediation SLA Compliance
64%
-8% vs last month
IaC Drift Rate (Prod)
22%
vpc-security-groups
Internet-Exposed PII
7
>21 days exposure
MTTD Critical Findings
4.2h
-1.8h vs target
Cross-Account Blast Radius
8.4
avg accounts at risk

Critical Finding Backlog Trend with Age Buckets (90 days)

Compliance Score Trend by Framework

Remediation SLA Compliance by Team

Cross-Account Blast Radius by Critical Finding Type

Internet-Exposed by Sensitivity

Secrets Exposure Incidents

Exemption Debt Index

142
active exemptions >90 days

IAM Least-Privilege Gap by Cloud Provider

IaC Drift Rate by Top 8 Modules

Open Critical & High Findings (Last 10)

Finding ID Severity Cloud Resource Type Finding Age Owner SLA Status
CSP-47821 Critical AWS S3 Bucket Public read access enabled 24d data-platform Overdue
CSP-47809 Critical Azure SQL Database TDE disabled, PII detected 18d customer-insights Overdue
CSP-47756 High AWS IAM Role Admin policy attached, unused 90d 32d infra-core Overdue
CSP-47698 Critical GCP VM Instance SSH exposed 0.0.0.0/0, no MFA 11d ml-training In SLA
CSP-47621 High AWS Security Group Ingress 3306/tcp from 0.0.0.0/0 6d app-backend In SLA
CSP-47604 Critical Azure Key Vault Soft delete disabled 29d security-ops Overdue
CSP-47582 High AWS Lambda Function Env vars contain secrets 14d payments Overdue
CSP-47510 Critical GCP Storage Bucket Public allUsers write access 8d analytics In SLA

Exemption Debt vs Remediation Rate (90d)

MTTD New Critical Misconfigurations (90d)