Ensure the data in data lakes and application workflows are free of viruses, ransomware, trojans and other payloads by scanning it with Malware Protection for Amazon S3 by Cloud Storage Security.

HOW THIS SOLUTION IS DIFFERENT

Multi-Engine Technology

Multiple Scanning Models

Static, Dynamic & Forensic Analysis

Configuration Intelligence

Simplified Setup

Security First Approach with In-Tenant Scanning

Engines

Identify malware at petabyte scale by leveraging the power of Sophos, CrowdStrike, or ClamAV®. Engines may be used individually or simultaneously to optimize accuracy and performance.

Scanning Models

This solution offers three flexible scanning options that integrate seamlessly into your workflow:

Event - scan new data in real time when dropped into storage (easy to integrate into workflows because minimal code changes are needed)

Retro - scan existing data on demand or via schedule (use to baseline data and for compliance audits)

API - scan data in real time via a REST-based API before they are written (useful for blocking malware uploads or if you initiate a workflow where the scan dictates whether a file should be used based on scan verdict)

Analysis

Analyze files in real time with Static and Dynamic Analysis powered by the SophosLabs Intelix™ Platform. The solution also provides Forensic Analysis via an Amazon Bedrock integration that provides additional information about the detected malware as well as remediation suggestions.

Configurations

Quickly gain visibility into misconfigurations including publicly accessible buckets as well as encryption status via a single unified dashboard.

Setup

Deploy via AWS CloudFormation or HashiCorp Terraform in less than 10 minutes. Initial scanning setup takes less than 5 minutes with just a few clicks of the mouse. Follow the Getting Started Guide: https://help.cloudstoragesec.com/getting-started/summary/.

Security First

This solution installs and runs in your AWS account, so data never leaves your environment or region. Additional ways to further enhance security include centralized security services account deployment with linked accounts and a private VPC endpoint deployment option.

Case Studies

https://cloudstoragesec.com/case-studies

CUSTOMER-FAVORITE FEATURES

Automated serverless architecture

Real-time, scheduled & on-demand scanning

Easy management console, built-in dashboards & detailed reporting

Automatic data discovery & scaling across multiple accounts & regions

XL file scanning

Problem file remediation (automatic Quarantine, Tag, Delete)

Robust notifications & integrations - this solution integrates with third party ticketing, Slack, Microsoft Teams, Amazon Chime, SIEM, Amazon SNS, AWS Security Hub, AWS CloudTrail, AWS Control Tower, AWS Transfer Family, and more

You can also scan data for sensitive information or PII

ONLY PAY FOR WHAT YOU SCAN

Pricing at payment terms that fit with your procurement process. We offer pay-as-you-go pricing, prepaid discounts, and private offers. Contact us at https://cloudstoragesec.com/contact to discuss the best pricing option for you.

NOT TO MISS ARTICLES ON AWS

https://aws.amazon.com/blogs/apn/integrating-amazon-s3-malware-scanning-into-your-application-workflow-with-cloud-storage-security/

https://aws.amazon.com/blogs/apn/integrating-malware-scanning-into-your-data-ingestion-pipeline-with-antivirus-for-amazon-s3/