Skip to main content
Cloud Sentry

Welcome to Cloud Sentry

Our guard opens the security crates, and our smith connects the tools you already run.

What we run

We switch on the security your platforms already include.

Microsoft 365 Business Premium and your AWS account ship with security tools. We turn them on and keep them configured, run your edge through Cloudflare, and connect the tools your team already runs.

Microsoft 365Microsoft 365Microsoft 365Microsoft 365Microsoft 365Microsoft 365Microsoft 365Microsoft 365Microsoft 365
  1. The Microsoft 365 security you already pay for remains unopened in the cellar
  2. Our guard opens it and arms the walls
  3. Then the AWS crate, opened the same way for your cloud account
  4. Kept sharp, and a raider finds the walls held
Microsoft 365

Business Premium includes security we switch on for you.

Conditional access, Defender for Business, Intune and Safe Links ship with Business Premium. We confirm your license, switch on what is unused, and keep it configured as Microsoft changes the defaults.

  • Conditional accessRules that check who is signing in, from where and on what device. Business Premium includes Entra ID P1.
  • Defender for BusinessEndpoint protection for every device, with web content filtering.
  • IntuneDevice compliance and management across Windows, Mac, iOS and Android.
  • Safe LinksLinks and attachments checked before anyone clicks them, with Defender for Office 365 Plan 1.

What ships depends on your Microsoft license. We confirm what you have before we touch anything.

AWS

Your AWS account includes security services to switch on.

GuardDuty, Security Hub, Config and CloudTrail are available in your account. We turn on what is missing, triage what they find, and keep them tuned as your account changes.

  • GuardDutyThreat detection built from signals already flowing through your account. It is opt-in and billed by usage.
  • Security HubFindings from GuardDuty, Config, Inspector and AWS's own checks, gathered in one place and turned on per account and region.
  • ConfigRecords how your resources are configured, and flags drift against the rules you define.
  • CloudTrailA complete, durable trail of account activity across every region, retained and reviewed.

What is on today depends on your account and region. We read it first.

Cloudflare

Your edge runs through Cloudflare, watched with the rest.

Cloudflare is one of the five platforms we run end to end, and your DNS and edge security run through it.

  • Connected from the startFoundations' guided setup connects Cloudflare alongside Microsoft 365, Google Workspace and AWS.
  • One triage queueOn Resilience, Cloudflare findings sit beside Microsoft Defender, Google Workspace and AWS findings, worked through a tracked response.

What is included depends on your tier; the plans set it out.

The forge

Then we connect the tools your team already runs.

Around the platforms we run, the platform connects to the tools your team uses and reads what it needs. Three that matter for security:

GitHubSplunkClaudeClaudeClaudeClaude
  1. The tools your team already runs wait their turn at the forge
  2. Our smith forges the next connection
  3. It joins your armoury, beside the tools already connected
  4. You keep working in it, and the platform reads only what it needs
  • GitHub, for your codeMembers without two-factor sign-in, outside collaborators, and Dependabot, code scanning and secret scanning alerts from your GitHub organization, in front of you as findings. Your code stays in GitHub.
  • Splunk, for your SIEMPlatform findings flow into your Splunk, a Cloud Sentry app gives your team searches and dashboards over them, and your Splunk alerts come back as findings.
  • Claude, for AI accessWho is in your Claude organization, which API keys exist, and Claude Code usage per person, for access reviews. Every conversation stays private.How we govern your AI tools

Every tool we connect

Ways in

Start here.

Start with a Hygiene Check on Microsoft 365 or AWS. A fixed-fee, read-only look at your tenant or account: what is configured, what is still open, and what to fix first.

Free

Talk to us for 15 minutes

Come as you are.

A quick call, consultation, or demo. You tell us what’s going on. We tell you what we see.

Book a time
$1,500, credited in full

Check your setup first

Know where you stand.

A hygiene check shows where your Microsoft 365 or AWS stands before you commit to more.

See the checks
From $295/mo

Start with one service

Start where you need us.

Need one thing handled? Sign up for just that, and add more whenever you’re ready.

See the plans

You run the company. We keep watch.