What happens with a list
A findings list sorted by severity puts a public test bucket at the same level as a production database reachable from the internet. The team fixes in list order, or stops fixing.
Use case
Fix what really leads to your data
Thousands of configuration findings, all “high”, and no way to know which ones actually open an access.
What Ctadel does
Toxic combinations connect exposure, vulnerability, permissions and data in the graph, with a score out of 100 computed from severity, chain length and resources involved, then adjusted by real exposure. The Remediation tab says which link to break. The Sapper, an assistant, searches for paths no rule describes yet and proposes them to you, with evidence.
- Risk score per chain, visible method
- Remediation per method: console, command line, Terraform
- Sapper proposals to accept as a rule or reject
How to start
From the first inventory, the Toxic combinations page lists the chains found. Open the first one, read the path, create a ticket from the panel or ask the Mason to prepare the fix.
See it on your accounts
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.