What happens without a tool
The records of processing say where the data should be. Reality is in backup buckets, shared snapshots and test exports. A compromised key stays valid for months.
Use case
Know where sensitive data and secrets are
Backups in a forgotten bucket, an API key in a function variable, and no certainty about what they contain.
What Ctadel does
The Data scanner samples buckets and reads databases on a temporary copy inside your account, then classifies what it finds by category, masked excerpts. The Secrets scanner finds API keys, tokens, passwords and private keys in buckets, disks, functions and repositories, and checks whether they still work. Every piece of data found joins the attack path graph.
- Personal, banking, health data per resource
- Secrets with validity verified by a harmless read call
- Attack paths to the resources that hold the data
How to start
Grant bucket content read permissions and, if you wish, database copy permissions. The Data scanner runs on the next scan; results are on the Data page.
See it on your accounts
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.