Kloudle

I used to struggle to monitor security across multiple platforms. Kloudle made it easy to track vulnerabilities and provided detailed documentation for fixing them. The UI/UX could be better, and an option to automatically fix vulnerabilities would be great. I manage source code and deployments across various platforms that keep evolving, making it difficult to stay on top of security. Kloudle gives me a single dashboard overview of infrastructure vulnerabilities, and I can dive into their technical documentation to resolve them easily.

- Quick 5-minute onboarding. - Automated asset results appear right after onboarding. - Helps identify correct configurations for cloud accounts. - No cloud security expertise needed. - Lacks trend analysis or analytics. - UX could be improved. - No support for MS Azure. As an accelerator, we have a lean tech team of developers, and Kloudle helps us manage our cloud infrastructure without hiring a full-time DevOps expert.

1. Onboarding is extremely easy—takes under a minute. 2. It covers all the AWS services we use with extensive checks. 3. Slack alerts help us spot issues in real time. 4. The team is very responsive to product queries and support requests are handled quickly. One limitation: you can't mute alerts for specific resources, such as the 'SSH port not allowed' alert for my bastion host. Kloudle secures our AWS cloud without needing a dedicated security team, and its misconfiguration checks ensure we follow AWS security standards. We wait for a green check from Kloudle before launching any new service.

What I like about Kloudle: 1. It provides a total score out of 100, helping my team improve monthly and ensure our cloud assets are secure. 2. Mitigation steps for each issue are easily accessible. 3. It has a very extensive library of common misconfigurations. 4. It includes Google Cloud CIS benchmarks, aiding compliance with Google's security recommendations. Few minor complaints: 1. The impact of mitigations isn't clear because Kloudle doesn't know our tech stack. 2. The interface is a bit slow, though it has improved over time. Kloudle helps us fix vulnerabilities before attackers can exploit them, playing a critical role in making our systems more secure for users.

We're a small company without dedicated SREs, but we have many cloud instances across providers. After a recommendation, we tried Kloudle and found it made our lives much easier. The self-serve model is easy, the interface is clean, and the buttons/links are intuitive. Adding cloud accounts is straightforward, and the dashboard gives a clear security score, providing an overview of our cloud security. Misconfigurations come with technical details, risk information, and business impact. It's easy to use with clear instructions and a video tutorial for adding new providers, no extra help docs needed. It does what we need, though it doesn't support Azure yet. Features are updated regularly, and filtering/navigation could improve but are being addressed. Notifications currently need manual enabling, but that could be default. Kloudle is ideal for startups or enterprises that want SREs focusing on more valuable tasks while delegating cloud monitoring. It gives a unified view of all cloud assets, saving time on weekly/monthly audits, and the security score gamification encourages SREs to fix misconfigurations. Plus, it offers insights into compliance checks.

1. It reassures us that our DigitalOcean configurations are correct. 2. We're confident we have a warning system if we introduce security issues in existing or new systems. 3. Even without access to our DigitalOcean account, I can see the number of droplets we run, which is useful. 4. The landing page presents the most relevant information immediately, rather than showing many nice but unnecessary graphs. 1. There were a few bugs at the start that got resolved. 2. Showing the checks we've passed would add value; currently, we only see two failed medium-level checks. Without knowing the full checklist, I can't tell what's not being checked. Displaying passed checks would be more reassuring. 3. Some terms are abstract, like 'snapshot'—'scan' might be clearer. Our product, Domdog, provides continuous security monitoring for clients' web infrastructure, giving full visibility into significant security threats. We understand the value of constant monitoring for alerts on security issues. We follow secure coding and server hardening, but our cloud environment was a blind spot, which Kloudle addresses. Since we change cloud configurations regularly, Kloudle's continuous monitoring reassures us we haven't introduced issues. When misconfigurations occur, Kloudle pinpoints the exact problem and offers specific mitigation advice, much like SAST or DAST tools we're familiar with.

1. Broader asset visibility across the various cloud providers we use, like Google Cloud, AWS, DigitalOcean, and Quay.io. 2. Seeing misconfigurations across providers helps me prioritize and triage issues. 3. An extensive and frequently updated set of test cases/checks keeps me informed on different problems. 1. Initially, there were some dashboard UX issues, but I see the team addressing them in recent updates. 2. I'd like more detailed resources on certain misconfigurations/checks to make fixing them easier. 3. Although there's been improvement, I expect even better and cleaner interfaces. Appknox is a powerful mobile security platform, and while we provide security services, we must also secure our own systems. Kloudle addresses our cloud infrastructure security concerns, allowing us to focus on scaling for hypergrowth.

The security experts at Digital Ocean suggested Kloudle to me. With Kloudle, handling the complex Facebook Data Protection Assessment became a smooth process, unlike the daunting task it could have been. A special thanks to Akash, one of Kloudle's co-founders; his personal support during setup showed the company's dedication to customer satisfaction. This excellent service greatly enhanced my overall experience. Kloudle could add more options for their cloud configuration review checks. My goal is to ensure my cloud configuration is secure and meets Facebook's Data Protection policies.

Kloudle's automated cloud configuration review was thorough, comprehensive, and very informative. The support from the Kloudle team exceeded our expectations; they were quick to assist, highly competent, and knowledgeable. They also helped us understand some of the misconfigurations better and resolved a few of the issues the scans found. There were no downsides at all—the service met all our needs. We needed a cloud configuration assessment for our Digital Ocean servers, and Digital Ocean recommended Kloudle to us.

The tool produces fewer false positives and connects with services like GitHub and multiple clouds, giving us a complete picture of our infrastructure. It's straightforward to use, and I appreciate the simplicity the Kloudle team has implemented. The pricing is reasonable compared to other options on the market. There's potential for Kloudle to become a strong CSPM solution with future features, like the ability to incorporate findings from other tools, which would be a valuable integration. There isn't anything I dislike, just some areas for improvement: the UI/UX could be enhanced while staying simple, adding basic triage and issue suppression would be helpful, and more metrics on the number of issues flagged would be beneficial. The integrations with GitHub and multi-cloud give a full infrastructure overview, the ease of use and simple design make navigating and working with security misconfigurations easy, and the affordability stands out against other CSPM tools. Upcoming features could solidify Kloudle as a robust CSPM tool, and the capability to import results from other tools is a useful integration to have.