Matrix Inspect

Matrix Inspect – Vulnerability Assessment & Penetration Testing Professional Services This Professional Service provides comprehensive vulnerability assessment and penetration testing support for applications and workloads running on AWS. Delivered by certified security engineers, Matrix Inspect helps customers identify security weaknesses, validate risks, and implement effective mitigation strategies across their cloud-hosted environments.

Service Overview Matrix Inspect Professional Services evaluates application, network, and cloud infrastructure security using a combination of automated scanning, manual testing, and threat-driven attack simulations. The service includes full test planning, execution, reporting, and remediation guidance to help customers enhance their overall security posture and comply with industry standards.

Relation to AWS Services This Professional Service directly supports workloads deployed on AWS and includes security testing, configuration validation, and threat analysis for the following AWS services:

• Amazon EC2 – OS-level vulnerabilities, exposed services, privilege escalation
• Amazon EKS / Amazon ECS – container and orchestration security validation
• AWS Lambda – serverless application security analysis
• Amazon API Gateway / Application Load Balancer – authentication, authorization, and API/Web entry-point testing
• Amazon RDS / DynamoDB – access control and data exposure validation
• Amazon S3 – bucket policy, object access, and misconfiguration testing
• AWS WAF / AWS Shield – ruleset validation, bypass testing, and configuration review
• AWS IAM – identity misconfiguration, privilege escalation paths, and policy weaknesses
• Amazon CloudFront – security header validation and origin protection review

What the Service Includes

• Pre-engagement consultation and test scoping
• Web application penetration testing
• API penetration testing
• Network/host-level assessment for AWS-based workloads
• AWS environment configuration review and IAM analysis
• Manual exploitation to validate critical risks
• Detailed reporting with severity, impact, and remediation guidance

Optional retesting after fixes

• Executive briefing and technical deep-dive session

Deliverables Technical Findings Report (detailed steps, evidence, and remediation actions)

Who Should Use This Service

• Organizations hosting applications or APIs on AWS
• Teams preparing for compliance audits (ISO27001, SOC2, PCI DSS, FISC)
• Companies migrating workloads to AWS and needing a security baseline
• SaaS providers requiring recurring penetration testing
• Enterprises wanting accurate risk visibility and cloud security validation