Only You Can Stop Sneaky Malware
AWS doesn't scan the data that's stored in Amazon S3 for advanced threats - that's the responsibility of the organization using Amazon S3 per the AWS Shared Responsibility Model.
But where do you start?
We know you don't have the time (or desire) to build and maintain your own solution. Not to mention the time, cost, and expertise it takes to implement one of those big platforms with extra features you don't want but have to pay for.
Plus, your needs are unique and anything that disrupts application performance, data ingestion pipelines, or user experience is a big NO.
That's why we created Antivirus for Amazon S3.
Drawing on decades of experience, we developed a simple, flexible security solution that's up and running in less than 15 minutes, fits into any workflow you have, and auto detects as well as remediates malware.
Activate an Antivirus for Amazon S3 trial today and scan 500 GB on us.
Antivirus for Amazon S3
Protect Against Malware
Identify and remove malware, viruses, ransomware, trojans and more by scanning all data, regardless of how it arrives in Amazon S3, for even the largest data stores
Provide Compliance Assurance
On-demand and scheduled scans meet service level agreements for threat prevention and compliance frameworks
Identify Insecure Buckets
Gain visibility into misconfigurations across all Amazon S3 buckets to easily identify and fix buckets with secure and insecure permission policies
Safeguard Storage
Quickly protect data flowing into and out of all accounts, regions and buckets; Antivirus for Amazon S3 runs in tenant so data never leaves your environment
Proven Benefits
Shortened Security Reviews from 2 Days to 1 hour Cloud Storage Security helps CloudCheckr reduce security reviews from two days to 60 minutes by actively scanning terabytes of data across multiple AWS accounts and presenting issues in a single dashboard... |
50% Less Expensive ...because Antivirus for Amazon S3 is a more modern, Fargate Container based solution, ADEC Innovations determined that their total cost of ownership for the product would be 50% lower than the other Lambda and EC2 based solutions. |
Eliminated Dozens of Hours of Maintenance Time Antivirus for Amazon S3 has eliminated dozens of hours of maintenance time that was required to keep the former solution running and able to meet Poka’s real time scan requirements. |
More Economical than a Homegrown Solution The combined subscription fees and AWS infrastructure costs for running Amazon S3 were also lower than the AWS infrastructure costs for Poka’s homegrown solution. |
Fast & Efficient: All Objects Scanned in 24 Hours Using Antivirus for Amazon S3’s on-demand scanning option, MindEdge completed a baseline scan of 120+ million existing objects within a few hours. Between deployment and the scanning of all pre-existing files across their environment, MindEdge was able to scan and baseline of all their stored objects for malware within 24 hours. |
Simple Yet Robust ADEC Innovations reviewed multiple solutions but decided to go with Antivirus for Amazon S3 because it was so simple to set up yet robust to use. |
How it Works
Antivirus for Amazon S3 is different from other solutions because it accommodates any type of workflow without interruption:
- Scan new data in real time when they are dropped into Amazon S3, on intake before they are written, or on access when they are retrieved.
- Scan existing data on demand or via schedule.
When a scan completes, a verdict is returned. If an object is found to be infected, you’re alerted and may quarantine it, delete it or decide to keep it in place. If it’s questionable whether a file is truly a problem, we’ve harnessed the power of the SophosLabs Intelix Platform to offer Static Analysis and Dynamic Analysis.
Ridiculously Easy & Secure Installation & Deployment
15 minutes and 3 straightforward steps is all it takes to get started:
-
Subscribe to Antivirus for Amazon S3 in AWS Marketplace.
-
Deploy the software as an ECS container and set of resources. Antivirus for Amazon S3 is installed using a CloudFormation Template. You will be asked a series of questions to install the software.
-
Configure scanning with a few clicks of your mouse via an easy-to-use dashboard; no need to write scripts.
What it Costs
30-Day Free Trial
Put Antivirus for Amazon S3 to the test. Subscribe in AWS Marketplace and scan up to 500 GB in 30 days for free with a fully-featured trial. (Your typical AWS infrastructure costs apply).
Easy Payment
Antivirus for Amazon S3 is procured in AWS Marketplace and automatically added to your monthly AWS billing. We offer a consumption-based pricing structure starting with a minimum monthly subscription fee of $49 per month for the first 100 GB scanned, then a per GB charge after that.
Prepaid discounts and private offers are also available. Contact us.
Unparalleled Support
Both the trial and paid subscription come with email and phone support at no extra cost: support@cloudstoragesec.com, 385-376-3838.
AWS-Verified Customer Reviews
Exactly what we needed
Glad to have found this product on Marketplace. We were considering one of the higher cost data security platforms to scan our S3 buckets, but found that most of them don't directly scan the files in S3 like this solution does. Installation was also a lot simpler and faster than the other options that we initially considered. The retro scan feature has been especially useful for meeting our SLAs for compliance requirements. Kudos to the support team, they are always fast to respond and helpful when it comes to answering questions we had.
Dan Iorg
Great solution and even better customer service
Cloud Storage Sec was exactly the solution we were looking for to secure uploaded files to S3. Not only is their platform great but their customer support is top notch. We had a very particular use case from our end that needed fulfilled. At the time the platform didn't accomplish the use case but after working with Cloud Storage Security support they were able to push out a patch within about a week to fix the issue.
Otus
Love this product.
Super easy to use!
This product was a huge time saver for me. I had been using a home grown solution that used ClamAV and some Lambda functions to scan objects in S3. The solution was a pain to deploy and had object size limitations around 400MB.
I was able to deploy this solution in about 5 minutes with their CloudFormation template and love that it uses Fargate so I don't have to maintain any EC2 instances. It even has a multi-region version for redundancy. Great product!
Christinith
Product Summary
Access the product summary which includes:
-
6 Reasons Customers Love This Product
-
Key Features
-
Scan Models
-
Consumption-Based Pricing
Read What AWS Says About CSS and Amazon S3 Security
AWS Blog: Integrating Amazon S3 Malware Scanning into Your Application Workflow
Frequently Asked Questions
To get started with an Antivirus for Amazon S3 trial, you you’ll need to:
- Use an AWS account
- Have Amazon S3 access
- Have AWS Identity and Access Management (IAM) user permissions to deploy a CloudFormation stack
- Sign up for a free trial of Antivirus for Amazon S3 in AWS Marketplace
When the free trial ends, a pay-as-you-go pricing subscription will automatically begin.
Pay-as-you-go pricing starts with a minimum monthly subscription fee of $49 per month for the first 100 GB scanned. You will be charged a per GB fee after that.
The free trial ends when you have scanned 500 GB or when you hit the 30 day mark, whichever comes first. When you are within 7 days of the trial ending or within 20% of the trial data allotment, you will be notified with a banner warning on the main dashboard within the console.
Antivirus for Amazon S3 is procured in AWS Marketplace and automatically added to your monthly AWS billing.
To avoid auto-enrolling in the pay-as-you-go pricing subscription, you will need to cancel you Antivirus for Amazon S3 subscription or obtain a prepaid discount or private offer.
No, this solution is installed within your AWS account.
That said, there is a mechanism where we could offer this to you as a SaaS today. If interested, please contact us. If you're willing to work with us, we can explore delivering it to you this way.
Yes. You can leverage the Antivirus for Amazon S3 - BYOL and GovCloud 30 DAY FREE TRIAL listing in AWS Marketplace.
Please note, Amazon Cognito is only supported in GovCloud US West, so the console must be deployed in this region. Scanning can be done in West or East, but the console deployment must be done in West.
Also, AWS Marketplace doesn't currently support metering for Fargate containers inside of GovCloud, so you must purchase a license (pre-purchase GBs) to operate within GovCloud once the free trial is over.
Please contact us at sales@cloudstoragesec.com to procure a license.
You determine which objects to scan.
You can scan all objects (those that already exist or those that are newly coming in) or you can scan a subset.
Antivirus for Amazon S3 allows you to determine which folders within which buckets you'd like to scan (aka a Scan List) or exclude from scanning (aka a Skip List). You can also pick a subset of items based on time.
There are two engines that can be used within Antivirus for Amazon S3 at the same time or independently:
- Sophos
- ClamAV
Antivirus for Amazon S3 pulls new signature updates every 1 hour for the ClamAV engine and every 15 minutes for the Sophos engine and each time the agents come online or reboot.
Generally, we have seen ClamAV update once per day (typically mornings) and Sophos about 4 times per day. This is not a hard and fast rule, but what we are seeing regularly.
It depends on which engine you are leveraging.
There are two engines that can be used within Antivirus for Amazon S3:
- Sophos - will scan up objects up to 5 TB in size (the maximum size object allowed in Amazon S3).
- ClamAV - can process up to 2 GB for any individual file. To process files larger than 2 GB, the Sophos engine will need to be used.
Any file over these caps will be tagged as unscannable
.
Yes . . . for the most part.
You can eliminate all non-AWS services public internet connections, but there are still three AWS services (Marketplace, AppConfig and Cognito) that you must have outbound internet access to interact with.
The Console VPC will require access to these three services, but the agents do not. So you can lock the agent VPCs down to have no outbound internet access. Of course your Subnets can sit behind a NAT Gateway to help control this.
No. Antivirus for Amazon S3 infrastructure is built around AWS Fargate containers in order to be serverless like AWS Lambda and faster and more flexible than Amazon EC2.
Two Lambdas are leveraged for subdomain management, but not for the workload.
No. The Antivirus for Amazon S3 solution will fit into your existing workflow. You do not have to make any changes to your current workflow.
Questions? Contact us
or