FAQ
Do you need write access to our AWS account?
No. You deploy a read-only IAM role from a CloudFormation template you can inspect first. It uses an external ID, cannot modify resources, is explicitly denied from reading S3 objects, database items and secrets, and you delete it when the review is done.
Do you guarantee savings?
No. Savings depend on how the account is built, and we won't promise a number before looking. Accounts that have never been reviewed usually have something to find, but if yours is already lean, the report will say so.
Is this a full security audit or a compliance certification?
No. It is a quick check of essential security configuration, such as root account protection, MFA, public exposure and logging. It does not replace a penetration test or a SOC 2, ISO 27001 or NIS2 assessment.
Will you make the changes for us?
Only if you ask. The report is written so your own team can act on it. Implementation is available as a separate, fixed-scope engagement, and nothing is changed without written approval.
How do you handle our data?
We only access billing data, resource metadata and configuration through the read-only role. Findings are shared only with you, and we're happy to sign your NDA before access.
Who is behind VaultForge?
VaultForge S.R.L. is an EU company registered in Romania (company ID 55078449, trade register J2026042297008). The reviews are done by a working DevOps engineer with hands-on AWS, Terraform and cloud security experience.