Strike Cloud: visibility and security across your cloud attack surface

Strike Cloud is the layer of the Strike platform focused on your organization's cloud surface. It lets you connect your cloud accounts, automatically map the deployed resources and detect insecure configurations in your infrastructure.

Once an account is connected, its assets and vulnerabilities are integrated into the platform's usual flow, with no need to maintain external tools or add another vendor to your stack.

Why cloud

Most modern infrastructure lives with cloud providers, where a misconfigured change can expose data, leave doors open or create attack paths that go unnoticed. Strike Cloud makes that surface visible and puts it under the same control as the rest of your security information.

What Strike Cloud provides

• Automatic inventory of your cloud infrastructure: the platform discovers and lists the deployed resources (compute instances, storage, databases, roles, functions, etc.) without you having to add them manually.

• Full visibility of your surface: you see all the resources in your cloud account to get the real picture of what you have deployed.

• Detection of insecure configurations: it identifies misconfigured resources that pose a risk, such as publicly open storage, excessive permissions, unencrypted configurations, unnecessary exposure or visible secrets, among others.

• Unified vulnerability management: cloud findings appear in the detail of each resource and in the Vulnerabilities section, together with the rest of your vulnerabilities.

• Exportable report per asset: download a PDF for each cloud asset with its detail and vulnerabilities, ready to share with auditors or compliance teams.

How it works

Strike Cloud connects to your cloud account with read-only permissions: Strike can read the configuration of resources, but never modifies anything or accesses the content of your data. The connection uses an industry-standard authorization mechanism, with no need to share passwords, access keys or permanent credentials.

Once the account is connected, Strike performs a first automatic scan of the entire infrastructure and then scans it again every month, to keep the inventory and findings up to date.

Supported providers: Strike Cloud currently supports Amazon Web Services (AWS). Coverage for other providers is planned for future versions.

For the step-by-step connection guide, see How to set up the AWS connection.

How it is activated and how much it consumes

Strike Cloud consumes your organization's credits, like the rest of the platform: when it is activated, an amount of credits is deducted once per year. Your CSM or account manager activates it. If you want to start using it, contact them. For more detail, see Credits: what they are and how they are consumed.

Once activated, you can find it in the Cloud section of the sidebar.

Who Strike Cloud is for

Strike Cloud is designed as a visibility and detection layer integrated into the platform. It is especially useful if your organization:

• Has cloud infrastructure and needs visibility of its real surface.

• Wants to detect insecure configurations without evaluating, implementing and maintaining a dedicated cloud security tool.

• Wants to consolidate the management of its attack surface in a single platform.

• Has audit or compliance requirements that demand periodic inventories and reports on its cloud posture.

Frequently asked questions

Can I connect more than one cloud account?

Yes. Once Strike Cloud is activated, you can connect as many accounts as your organization needs. Each account is added as a separate connector.

How often is the cloud account scanned?

Strike runs an automatic monthly scan on each connected account.

How do I revoke Strike's access to my cloud account?

You can disconnect the account from the Cloud section in Strike, or remove the permissions directly from the cloud provider's console. Both actions cut off access immediately.

Does it replace other cloud security tools?

Strike Cloud gives you visibility and detection of misconfigurations from the attacker's perspective, integrated into the Strike platform. It is designed for organizations that value consolidation and simplicity. If you need complete compliance frameworks, in-depth remediation workflows or full-stack coverage of your cloud environment, a dedicated CSPM tool can be a complement.