SALUS DIGITAL SECURITY LIMITED

Cloud Penetration Testing

Cloud Penetration testing is used to identify vulnerabilities within Cloud infrastructure, services and, applications. The potential risks presented to the organisation as a result of using this service inform security policy and remediation priorities.

Features

• Amazon Web Services (AWS) Penetration Testing
• Google Cloud (GCP)Penetration Testing
• Microsoft Azure Penetration Testing
• Cloud Security Assessments
• Cloud Threat Profiling
• Cloud Security Architectural Design
• Cloud Best Practice Compliance

Benefits

• Accurate reporting on application security posture
• Adherence to CHECK standards
• Evidence to support prioritisation of remediation work
• Information to support risk management planning
• Adherence to HMG Cloud Standards
• Adherence to Best Practice
• Identify Security Risks
• Identify Misconfigurations
• Secure Public Facing Infrastructure and Services

£650 to £1,200 a user a day

• Education pricing available

Service documents

• Pricing document

  ODP

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at greg.king@saluscyber.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

467286686407996

Contact

Greg King
(+44) 01242 374087
greg.king@saluscyber.com

Planning

• Planning service: Yes
• How the planning service works: Salus uses its extensive experience in assurance testing, design advice and supplier assurance audits to support clients in migrating to cloud, enhancing features of existing cloud services or developing bespoke private cloud capabilities. ; ; Planning takes into account current Mitre Common Vulnerability Exploits, Cloud Security Alliance guidance, and Tactics, Techniques and Procedures (TTPs) of offensive actors captured in the Mitre Att&ck frameworks.
• Planning service works with specific services: No

Training

• Training service provided: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: Salus uses its extensive experience in assurance testing, design advice and supplier assurance audits to support clients in migrating to cloud, enhancing features of existing cloud services or developing bespoke private cloud capabilities. Planning takes into account current Mitre Common Vulnerability Exploits, Cloud Security Alliance guidance, and Tactics, Techniques and Procedures (TTPs) of offensive actors captured in the Mitre Att&ck frameworks.
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: Salus uses well defined assurance testing standards in line with the National Cyber Security Centre (NCSC) CHECK ITHC standard.; ; This is a Nationally approved standard governed by the National Technical Authority on Cyber Security. ; ; Performance testing of vendor service and security claims can be planned via a detailed scoping exercise and agreement on the quality Standards/outcomes expected.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
  • Other
• Other security services:
  • Virtual CISO
  • Cloud Security Management
  • Exercising of Incident Response Plans
• Certified security testers: Yes
• Security testing certifications:
  • CHECK
  • CREST
  • Cyber Scheme
  • Other
• Other security testing certifications: Offensive Security Certified Professional

Ongoing support

• Ongoing support service: No

Service scope

• Service constraints: Salus works both remotely and onsite as required by the client. ; ; The only constraints that may exist in any testing work are those presented by the the vendor/3rd Party service supplier. ; ; Salus works with all parties to resolve any constraints that it identifies.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Monday to Friday - 09:00 to 17:30 ; Monday to Friday - Out of hours by arrangement ; Saturday/Sunday/public holidays - support by arrangement
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Support levels: Monday to Friday - 09:00 to 17:30; Monday to Friday - Out of hours by arrangement; Saturday/Sunday/public holidays - support by arrangement; ; Pricing included in the rate card ; ; An account manager is allocated to each job or group of jobs for any specific client.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • CHECK Team Member (CTM)
  • CHECK Team Leader Web Applications (CTL WEB)
  • CHECK Team Leader Infrastructure (CTL INF)
  • Offensive Security Certified Professional

Social Value

• Social Value:

  Social Value

  Wellbeing

  Wellbeing

  In 2021 Salus introduced our Sustainable Travel Plan, Positive Working Environment and Wellbeing Plans. These aimed to provide all employees with a healthy working environment and opportunities for enhanced personal wellbeing through our cycle to work, private medical, buddy and volunteering schemes. ; The above plans are linked to in-person and online review meetings where the entire business can feedback on if the support is working and what additional support is require. This includes an anonymous form where employees can provide feedback without being identified. This is alongside a quarterly strategy day for the entire business which focuses on better understanding each other through behavioural and physical activities with a section of each day focusing on mental health including how to support and identify it in your professional and personal life.; Salus volunteers with several local charities including The Nelson Trust where Salus offer employees the chance to volunteer as a break from working to reset, recharge and meet new local people. Each employee is offered a minimum of 1 day per year of volunteering, this is not mandatory however they are recommended. Due to Salus employing a diverse workforce include neuro-diverse and disabled employees, volunteering is not mandatory as each employee has the right to decide.

Pricing

• Price: £650 to £1,200 a user a day
• Discount for educational organisations: Yes

Service documents

• Pricing document

  ODP

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at greg.king@saluscyber.com. Tell them what format you need. It will help if you say what assistive technology you use.