Security
how OpsOne reads your cloud.
OpsOne connects to AWS and Azure with read-only access. It recommends; your team decides. OpsOne never changes your environment on its own. Your team makes any fix.
Access
permissions we request.
Access is read-only. We ask for the least privilege needed to read billing, configuration and audit data across your AWS and Azure accounts.
OpsOne can
- Read billing, configuration and audit data
- Rank findings by severity
- Assign every finding an owner
- Recommend a fix, with owner and status tracked in OpsOne
OpsOne cannot
- Change or delete your resources
- Install anything in your environment
- Act without your team's approval
Data handling
how your data is handled.
What we read
OpsOne reads billing, configuration and audit data so it can attribute spend, find risk and check controls. It reads only what findings need.
How we handle it
Data is encrypted in transit and at rest. Nothing is installed in your environment, and every finding gets a severity and an owner.
Access and audit logging
OpsOne activity is logged, so who did what, and when, can be answered.
Security pack
what is in the pack.
Running a vendor security review? Request the pack and send us your questionnaire. We respond directly.
- AWS and Azure permission list
- Data categories and location
- Retention and deletion
- Sub-processors
- Questionnaire responses
Typical review path
- Questionnaire
- Permission list
- Read-only trial connection
- Review
start your review.
OpsOne is built by AAIRA Technologies, an AWS Advanced Tier Services Partner. That is a company-level tier. It is not an AWS certification or endorsement of OpsOne.
see your whole cloud, on one board.
Book a demo and we'll show you cost, security and compliance together across AWS and Azure. Prefer to read first? See a sample finding, or write to us.