Bunkers Cyber Defense

Cloud

Cloud security

Cloud security protects your accounts, networks and workloads on AWS, Azure, Google Cloud and OpenStack: configuration, access, logs, encryption. Bunkers Cyber Defense audits the configuration, monitors with AI-enhanced tooling and responds to threats, end to end, for SMBs, MSPs and municipalities in Québec that have moved to the cloud.

What it includes

  • Securing your cloud environments: AWS, Azure, Google Cloud, OpenStack
  • Configuration auditing
  • Threat monitoring and response
Talk to us about your security
  • AWS, Azure, Google Cloud and OpenStack
  • Configuration auditing
  • Threat monitoring and response

Three layers · what we check

From the account to the workload

  1. 01Account

    • MFA and least-privilege roles
    • Audit logs enabled and retained

  2. 02Network

    • Security groups and exposed ports
    • Segmentation and private access to services

  3. 03Workload

    • Images and dependencies up to date
    • Secrets out of the code, encryption at rest

How it goes

  1. 01

    Assess

    Audit, compliance assessment or penetration test: we first measure where you stand.

  2. 02

    Protect

    Safeguard websites, cloud environments and corporate networks; tailored security strategies and compliance frameworks.

  3. 03

    Watch

    Proactive threat detection and incident response, 24/7.

Frequently asked questions

All the questions →

Does my cloud provider take care of my security?

Only partly. The provider secures the infrastructure; you remain responsible for configuration, identities, access, data and its backup. That is the shared responsibility model. Most cloud incidents come from a misconfiguration or a compromised account, therefore from your side of the line.

How do we secure Microsoft 365 or Google Workspace?

Multi-factor authentication for everyone, phishing-resistant for administrators; separate administrator accounts; legacy protocols blocked; conditional access rules; an audit of forwarding rules; link and attachment protection; audit logs enabled and retained. These settings already exist in your subscription; they mostly need to be applied and verified.

Should I back up my Microsoft 365 or Google Workspace data?

Yes. The provider guarantees the availability of its service, not the recovery of your data after a deletion, ransomware or human error beyond recycle bins and retention periods. An independent backup of your emails, files and collaboration sites, tested by restoration, is your responsibility, as it is for a local server.

What are the most common cloud misconfigurations?

Publicly accessible storage buckets, access keys in code or in repositories, root accounts used daily without multi-factor authentication, administration ports open to the whole Internet, audit logs disabled and overly broad roles. A configuration audit against the provider's recommendations finds them within hours.

Can I host personal information outside Québec?

Yes, provided you carry out a privacy impact assessment concluding that the information receives adequate protection, and frame the transfer by contract. This applies to common American cloud services. Document where the data is, who accesses it and under which law; the major providers offer Canadian regions.

Related services

All services →