Sold by: Yuma IT
Scope-bound independent assessment of the security controls supporting a SaaS product on AWS. Tenant isolation, identity, secure SDLC, operations, and a written attestation your customers can check.
Overview
Yuma IT, through AttestHub, delivers a scope-bound SaaS product cybersecurity attestation for products hosted on AWS. This is for SaaS vendors responding to enterprise procurement, investment, or customer assurance needs.
Typical assessment areas include tenant isolation, identity and access, secure software delivery, logging, incident readiness, and the AWS controls that support the product. Evidence, findings, and approvals live in one governed engagement file. A reviewer who did not perform the work approves deliverables before release.
Where in scope, AttestHub issues an attestation with a verification identifier that a customer can check without an account. Indicative delivery is typically 4 to 8 weeks, scoped by product, evidence, and testing depth.
This service supports AWS-hosted SaaS, including Yuma IT Marketplace products such as RangerOS, GRiCk, Kelpie, and DingoDocs, and it helps customers adopt AWS with independently reviewed product security.
The review is point-in-time and does not guarantee that a system cannot be compromised. Final scope, price, methods, and dates are confirmed after triage.
Highlights
- Independent SaaS control assessment with executive and technical findings
- Scope-bound attestation with a public verification identifier where in scope
- Separation of duties: assessors cannot approve their own work
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. To get a custom quote for your needs, request a private offer.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Resources
Support
Vendor support
Yuma IT responds to listing enquiries within two business days (AEST/AEDT).
Email: hello@yumait.com.au Web: https://www.yumait.com.au/contact Assessments: https://attesthub.au Address: 49 Phillip Ave, Watson ACT 2602, Australia
After you request a private offer we confirm scope, price, and dates before work starts. After you accept an offer we contact you within two business days with next steps. Refunds, if applicable, are handled as written in the private offer.
Software associated with this service
DingoDocs keeps scope, evidence, findings, reports, and remediation in one auditable workspace for security assessment teams.
By Yuma IT
Kelpie is incident response and case management software for small security operations teams. Organise incidents, coordinate investigations, and close cases with a clear, auditable workflow.
Customer-hosted cyber governance workspace for ISM, Essential Eight, evidence, risk, vendor assurance and authority-to-operate workflows. Runs in the buyer's AWS account on ECS Fargate or Amazon EKS.
By Yuma IT
An operations management platform created for Indigenous Australian ranger programs and configurable for adjacent land and environment organisations. RangerOS provides tools for field work, observations, incidents, assets, fuel, cattle operations, projects, funding outcomes and operational reporting - all from a single multi-tenant web application.