Skip to main content
CloudArq
about · who builds it

Mission control for your cloud account.

A read-only AWS audit — up to 193 automated checks across 6 Well-Architected pillars.

193
automated checks
6
well-architected pillars
0
agents installed

· 193 checks across 6 pillars · agentless, API-only · figures derive from the live scanner registry.

§ 01 · mission

Our mission

We help teams running on AWS understand their account — what's secure, what's efficient, what's reliable, and what's costing too much. CloudArq replaces manual audits with continuous, automated monitoring across all six AWS Well-Architected pillars.

six pillars · watched on a recurring schedule
§ 02 · why cloudarq

Why CloudArq

Manual AWS reviews are stale the moment they're finished. Industry estimates suggest point-in-time assessments from security consultants run well into the five figures, and the result is outdated within a week. AWS native tools give you data but not answers. CloudArq bridges that gap — automated, continuous, and actionable.

§ 03 · where it runs

Read-only by design. EU-hosted by default.

The audit assumes a read-only IAM role with your unique ExternalId — no keys, no agents, no write access. Findings live in Helsinki, encrypted at rest.

access
read-only IAM role
scope
ExternalId per scan
region
EU · Helsinki (FI)
at rest
AES-256-GCM
stored creds
none
data
export / delete on demand
§ 04 · our values

Our values

Depth over breadth

Every check includes root cause analysis, remediation scripts, and compliance mapping. We don't just tell you something's wrong — we show you exactly how to fix it.

Automation first

Manual audits are stale the moment they're finished. CloudArq re-runs the same checks on a schedule, so posture is never a one-off snapshot.

Transparency

No black boxes. Every finding shows the raw data, the logic that flagged it, and the exact API calls we made.

§ 05 · who builds it

Who builds it

CloudArq is built and operated by one person: Abdallah Khaldi. It is registered as an Israeli sole proprietorship (osek zair), not a company, so the “we” elsewhere on this page is one person. Mail to [email protected] reaches him directly, not a queue.

— two separate facts —

· CloudArq the product scans against 8 compliance frameworks. The business holds no certifications — two separate facts we never blur.