Sold by: Blast Security
Deployed on AWS
Quick Launch
Preemptive cloud security that prevents risks by default, before they become a breach.
Overview
Blast Preemptive Cloud Defense Platform turns cloud security from reactive firefighting into proactive protection.
Driven by your cloud context, Blast Compiler transforms your security strategy into tailored preventive guardrails. Over the pillars of identity, data, workloads, and networks, Blast utilizes your native security controls into one unified defense fabric. The platform leverages context-aware simulation layers to confidently validate and enforce those guardrails, with zero business disruption.
The result: a cloud environment secured by default, a security team empowered to innovate rather than remediate, and an organization that consistently stays ahead of threats.
Highlights
- Proactive Cloud Security: Prevent misconfigurations and threats before they happen, ensuring your cloud environment remains secure by default.
- Seamless Multi-Cloud Support: Easily apply security guardrails across AWS, Azure, GCP, and Kubernetes environments for consistent, scalable security enforcement.
- Continuos Impact Simulations: Validate security configurations with real-time simulations, ensuring full compliance and zero business disruption with every change.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Quick Launch
Leverage AWS CloudFormation templates to reduce the time and resources required to configure, deploy, and launch your software.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Blast Preemptive Cloud Defense Platform | For private offer contact us: aws-marketplace-seller@blast.security | $300,000.00 |
Dimensions summary
This listing is sold through a private offer, not a fixed public price. You buy access to the Preemptive Cloud Defense Platform as a contract measured in Units. Pricing terms and quantities are set individually, so you contact the seller at aws-marketplace-seller@blast.security to arrange them. There are no separate tiers, instance sizes, or usage add-ons to choose from on Marketplace. Instead, the seller scopes a single custom agreement to your environment, and the agreed contract is billed through AWS Marketplace.
Top-of-mind questions for buyers
The Marketplace lists pricing in Units, but the specific mapping is set within your private offer. The platform enforces preventive guardrails across cloud accounts, organizational units, subscriptions, and projects. Because scope is scoped to your environment, contact aws-marketplace-seller@blast.security to confirm exactly what each Unit measures for your agreement.
The platform is agentless and API-based, reading only cloud metadata to enforce native controls. It requires no software installed on your hosts, so it does not meter running instances or endpoints directly. Instead, protection covers your accounts, regions, and organizational hierarchy. Your private offer defines how that coverage maps to billed Units.
This is a contract, not pay-as-you-go. You commit to an agreement measured in Units rather than paying per hour or per action. Terms and quantities are set individually through a private offer, then billed through AWS Marketplace. Contact aws-marketplace-seller@blast.security to arrange the contract scope.
blast.security
Helpful?
Vendor refund policy
Due to the nature of our product, we do not offer refunds after purchase. All sales are final. If you have any questions or concerns about your purchase, please contact our support team at support@blast.security , before completing your transaction. We are here to assist you and ensure your satisfaction with our service.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Additional details
Usage instructions
☁️ Connecting AWS Cloud Accounts
Setting Up the Blast Role
To enable secure integration between Blast Security and your AWS environment, you'll need to deploy a set of predefined IAM roles using AWS CloudFormation. These roles grant read-only access via AWS STS, allowing Blast to collect data and simulate enforcement impact across your organization.
<Note> This setup uses a **CloudFormation StackSet** for member and log-archive accounts, and a standalone **CloudFormation Stack** for the management account **with the same template**. </Note>AWS CloudFormation Deployment
🔧 Prerequisites
Before deployment, ensure you have the following:
- Administrator access to AWS CloudFormation.
- AWS Organizations configured with:
- Management Account
- Member Accounts
- Log-Archive Account (The CloudTrail S3 Bucket Account)
- ARN of your CloudTrail S3 bucket (in the Log-Archive account).
- (Optional) ARN of the KMS key used for CloudTrail log encryption.
- ExternalId provided by the Blast team.
1️⃣ Deploy Roles to Member & Log-Archive Accounts (StackSet)
Accounts: All AWS Member Accounts + Log-Archive Account\
Template: blast-role-cf.yaml
Steps:
- Login to the AWS Management Account Console.
- Go to CloudFormation → StackSets → Create StackSet ([Direct Link](https://us-east-1.console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/create/review?templateURL=https://aws-mp-bucket.s3.eu-north-1.amazonaws.com/blast-role-cf.yaml&stackName=BlastManagementStackSet)**)**
- Upload the template: blast-role-cf.yaml
- Name your stack set (recommended: BlastManagementStackSet).
- Provide the following parameters:
- BlastLogCollectorRoleName : BlastLogCollectorRole
- BlastUnitCollectorRoleName : BlastUnitCollectorRole
- BucketArn : ARN of CloudTrail S3 bucket (only for Log-Archive)
- ExternalId : Provided by Blast
- KmsKeyArn : (Optional) ARN of KMS key for log encryption
- LogArchive : Account ID of Log-Archive account
- Check the box: “I acknowledge that AWS CloudFormation might create IAM resources with custom names.”*
- Set deployment options:
- Deploy new stacks → Default
- Target → Deploy to organization
- Auto-deployment → Activated
- Removal behavior → Delete stacks
- Specify region → Enter your target region
- Review and submit.
- Wait for deployment to complete across all accounts.
Capture Outputs:
Copy the ARNs of the created roles and share with Blast team:
- BlastUnitCollectorRoleARN (from each Member account)
- BlastLogCollectorRoleARN (from the Log-Archive account)
2️⃣ Deploy Role in Management Account (Standalone Stack)
Account: AWS Management Account\
Template: CloudFormation-Management.yaml
Steps:
- Login to the AWS Management Account Console.
- Go to CloudFormation → StackSets → Create StackSet ([Direct Link](https://us-east-1.console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/create/review?templateURL=https://aws-mp-bucket.s3.eu-north-1.amazonaws.com/blast-role-cf.yaml&stackName=BlastManagementStackSet)**)**
- Upload the template: blast-role-cf.yaml
- Stack Name: BlastManagementStack (recommended)
- Provide parameters:
- BlastUnitCollectorRoleName : BlastUnitCollectorRole
- ExternalId : Provided by Blast
- Acknowledge IAM creation: “I acknowledge that AWS CloudFormation might create IAM resources with custom names.”
- Review and submit.
- Confirm successful deployment.
🔎 Capture Output:
- BlastUnitCollectorRoleARN (from Management account)
3️⃣ Share ARNs with Blast Security
After both deployments, securely send the following ARNs to the Blast team:
- BlastUnitCollectorRoleARN (Management & Member accounts)
- BlastLogCollectorRoleARN (Log-Archive account)
📧 Email: contact@blast.security
4️⃣ Finalization
Blast Security will verify the received ARNs and complete the integration process. You'll receive confirmation and further instructions upon success.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Cloud Defense offers a revolutionary solution to discovering and protecting sensitive data in public cloud from modern ransomware and exfiltration attacks.
Protect your Applications & Cloud Infrastructure from attackers by leveraging CloudDefense.AI's ACS patented technology. Presenting our NextGen Intelligent platform CloudDefense ACS with inbuilt advanced AI & ML to secure the Cloud infrastructure also continuous monitoring & complying to regulatory requirements.
Blast is a high-performance API and development tooling platform focused on providing access to blockchain nodes for Web3 developers.
Leveraging an advanced smart routing system and a proprietary cloud architecture optimized for blockchain infrastructure, Blast stands out as one of the most reliable and fastest API and node providers in the Web3 space for more than 39 different blockchains. Additionally, we offer the most competitive pricing in the industry, ensuring top-tier performance and affordability for developers and enterprises alike.
A centralized repository of pre-formatted BLAST databases created by the National Center for Biotechnology Information (NCBI).
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.