Discover resources
Every account, server, database, bucket, identity and access key across your cloud accounts, inventoried on every scan.
See your exposure. Fix what matters first.
Uncover misconfigurations, vulnerable software and risky permissions across your cloud providers. Redoubt connects the findings to your resources and attack paths, helping your team understand the impact and take action.
From AWS, Azure and Google Cloud to Scaleway, OVHcloud, Hetzner and beyond: bring your cloud security into one view.
Read-only cloud connections
Hosted in Europe
What Redoubt does
Understand your exposure. Take action with confidence.
Understand exposure
What is reachable from the internet, what each identity can reach, and the paths between them.
Prioritize findings
Findings ranked by exposure, by what they lead to, and by whether the weakness is being exploited.
Track improvement
Posture over time, what changed between scans, and compliance reports for SOC 2, ISO 27001, CIS, NIS2 and GDPR.
Coverage
Cloud providers, platforms, code and SaaS in one view.
The largest cloud providers, and the ones most security platforms leave out.
Cloud infrastructure
Servers, networks, storage, databases, Kubernetes, identities and AI services. Misconfigurations, exposed services, risky permissions, vulnerable and end-of-life software, exposed secrets and sensitive data.
AWS
Microsoft Azure
Google Cloud
OVHcloud
Scaleway
Hetzner Cloud
Exoscale
OpenStack
T Cloud Public
IONOS Cloud
DigitalOcean
Akamai Linode
Vultr
Civo
Cloudflare
Kubernetes
Application platforms
Production protection, credentials exposed to preview environments, databases open to the internet, and who has access.
Vercel
Fly.io
Render
Supabase
Neon
Firebase
Code and dependencies
Infrastructure code checked before it deploys, dependencies matched against vulnerability and malicious-package data, container images scanned from your registries.
GitHub
GitLab
Terraform
CloudFormation
Docker Compose
Container registries
Business SaaS
Sign-in policies, multi-factor enforcement, security defaults and sharing settings.
Microsoft 365
Google Workspace
Logos are trademarks of their owners and identify the services Redoubt connects to. No endorsement is implied.
How it works
Connect your cloud accounts. Start uncovering risk.
Connect
Add a read-only credential for each account. Scans run on a schedule from then on.
Assess
Each scan inventories your resources, maps how they connect, and evaluates them against rules written for that provider.
Investigate
Open a finding to see the evidence, the attack path, and what an attacker could reach from it.
Remediate
Apply the fix attached to the finding, as a command, a code change or a ticket. It resolves on the next scan.
Integrations
Fits the tools your team already uses.
Findings go to the people who act on them, with the evidence and the fix attached.
Ticketing
Open a ticket from a finding.
Jira
ServiceNow
GitHub
GitLab
Notifications
Routed by severity.
Slack
Microsoft Teams
Mattermost
PagerDuty
Opsgenie
Email
Identity providers
Sign in with your own provider.
Microsoft Entra ID
Google Workspace
Any OIDC provider
Passkeys
Security tools
Findings as structured events.
Splunk
Syslog to any SIEM
Webhooks
API
Principles
Designed for the scrutiny a security team applies.
Read-only, by design
Every connection uses a read-only credential with a documented least-privilege policy. Redoubt never changes a resource in your cloud accounts.
Included in every plan
Single sign-on, multi-factor and passwordless sign-in, role-based access and a full audit trail, in every plan.
Hosted in Europe
Runs on European infrastructure. Your cloud credentials are stored encrypted and used only at scan time.
Configuration, not content
Redoubt reads configuration, not traffic or logs. Your data stays where it is.
Design partners
Become a design partner.
Early partners shape what Redoubt builds next and get a direct line to the people building it.