Strike Cloud: visibility and security across your cloud attack surface

Strike Cloud is the layer of the Strike platform focused on your organization's cloud attack surface. It lets you connect your cloud accounts to the platform, automatically map every deployed resource, and detect insecure configurations across your infrastructure.

Once a cloud account is connected, its assets and vulnerabilities are integrated into the platform's usual security management flow — with no need to maintain external tools or add another vendor to your stack.

Why cloud?

Most modern infrastructure now lives with cloud providers, where a single misconfiguration can expose data, leave doors open, or create attack paths that go unnoticed. Strike Cloud makes that surface visible and brings it under the same control as the rest of your organization's security information.

What Strike Cloud gives you

• Automatic inventory of your cloud infrastructure: the platform discovers and lists every deployed resource (compute instances, storage, databases, roles, functions, etc.) with no manual loading required.

• Full visibility into your surface: Strike shows every resource in your cloud account so you get a real picture of what you have deployed.

• Detection of insecure configurations: it identifies misconfigured resources that pose a security risk, such as publicly open storage, excessive permissions, unencrypted configurations, unnecessary exposure, or visible secrets, among others.

• Unified vulnerability management: cloud findings appear both in each resource's detail view and in Strike's Vulnerability Manager, alongside the rest of your vulnerabilities and with filters available.

• Exportable per-asset report: download a PDF for each cloud asset with its detail and associated vulnerabilities, ready to share with auditors or compliance teams.

How it works

Strike Cloud connects to your cloud account using read-only permissions: Strike can read your resource configurations but never modifies anything or accesses the content of your data. The connection is established through an industry-standard authorization mechanism, with no need to share passwords, access keys, or rotating credentials.

Once the account is connected, Strike runs a first automatic scan across your entire infrastructure and then re-scans it monthly, keeping your inventory and findings always up to date.

ℹ Supported cloud providers Strike Cloud currently supports Amazon Web Services (AWS). Coverage for other cloud providers is planned for future releases.

For the step-by-step detail on how to connect a cloud account, see the article How to set up the AWS connection.

Who is Strike Cloud for?

Strike Cloud is designed as a visibility and detection layer integrated into the Strike platform. It's especially useful for organizations that:

• Have infrastructure deployed in the cloud and need visibility into their real surface.

• Want to detect insecure configurations without having to evaluate, implement, and maintain a dedicated cloud security tool.

• Want to consolidate the management of their attack surface into a single platform.

• Have audit or compliance requirements that call for periodic cloud inventories and reports.

For cases that require complete compliance frameworks, deep remediation workflows, or full-stack coverage of the cloud environment, dedicated CSPM tools can be an additional complement.

Frequently asked questions

Can I connect more than one cloud account?

Yes. With the add-on active, you can connect as many accounts as your organization needs — with no limit.

How often is the cloud account scanned?

Strike runs an automatic monthly scan on each connected account, keeping your inventory and findings up to date.

How do I revoke Strike's access to my cloud account?

You can disconnect an account at any time from the Cloud section in Strike, or remove the permissions directly from your cloud provider's console. Both actions cut off access immediately.

Does it replace other cloud security tools?

Strike Cloud delivers visibility and misconfiguration detection from an attacker's perspective, integrated into the Strike platform. It's built for organizations that value consolidation and simplicity in their security stack. For cases that require complete compliance frameworks, deep remediation workflows, or full-stack coverage of the cloud environment, dedicated CSPM tools can be an additional complement.

Getting started

If your organization already has the Cloud add-on active, you can start using it from the Cloud section in Strike's sidebar. For the step-by-step detail on how to connect your first cloud account, see the corresponding setup article.

If you don't have the add-on yet, contact your account manager to activate it.