Buy through AWS Marketplace
Buy Threat Protect through your AWS account.
33 cyber security services, from independent advice and compliance to testing and 24x7 managed security, available in AWS Marketplace. The same service and the same single point of accountability, on the AWS bill you already pay.
Why buy this way
Security, bought the way you already buy cloud.
One bill
Our services land on your existing AWS invoice, alongside everything else you already buy from AWS.
Faster procurement
No new supplier to onboard. Your team accepts a private offer in the AWS console.
Your AWS commitment
Depending on your agreement, Marketplace purchases can count towards your committed AWS spend.
How it works
Agreed with you first, accepted in AWS.
- 01Choose a servicePick one below, or tell us what you need and we will point you to the right one.
- 02We agree the scopeWe scope the work with you and agree the price before anything is sent.
- 03We send a private offerThe agreed terms arrive as a private offer through AWS Marketplace.
- 04You accept, we startAccept the offer in your AWS account and the work begins.
The services
Every listing, by what it solves.
Each listing opens in AWS Marketplace, where you can request a private offer. Or ask us and we will send one directly.
Advisory
Senior advice on what to buy, renew or stop, and the security leadership to run it.
AWS Cloud Security Posture Review
A focused review of your AWS accounts against the CIS AWS Foundations Benchmark and the AWS Well-Architected security pillar, with a prioritised fix list and evidence for your auditors.
- IAM, logging, network and data protection reviewed
- Findings ranked by risk, with fix steps
- Mapped to ISO 27001 and SOC 2 controls
Cyber Security Maturity Assessment & Roadmap
Find out where you stand and what to fix first. A two-to-four-week assessment against NCSC CAF, NIST CSF or CIS Controls, ending in a costed 12-month roadmap your board can approve.
- Scored against a recognised framework
- Gaps ranked by risk and cost
- Board summary on one page
Security Vendor Selection & Technology Procurement
Two or three options for each security gap, compared side by side across vendors, then bought for you. Where the product is available in AWS Marketplace, the spend can sit on your AWS bill.
- Shortlist and scoring matrix for each product category
- Commercial negotiation handled for you
- Depending on your agreement, Marketplace purchases can count toward your AWS commitment
Threat Protect Independent Cyber Security Advisory & vCISO (UK)
Independent cyber security advice and a senior virtual CISO from a UK firm that helps you choose, buy and run security products, then evidence them for your auditors.
- Advice not tied to any one vendor
- Products can go on your AWS bill through private offers
- Every control mapped and evidenced for audit
Virtual CISO (vCISO) & Board Cyber Risk Reporting
A named, senior security lead for your organisation, without a full-time hire. Board reporting, policy ownership, supplier risk and a standing roadmap.
- A named senior lead with a set number of days each month
- Board-ready risk report every quarter
- Policies, risk register and supplier assurance kept current
Compliance
Certification and audit readiness, kept current all year.
Continuous Compliance as a Service
Stay audit-ready all year, not just in audit week. A monthly service that keeps evidence, policies and controls current across Cyber Essentials, ISO 27001, SOC 2, DORA and NIS2.
- Monthly evidence and control checks
- One compliance calendar across every framework you hold
- Audit preparation and auditor liaison included
Cyber Essentials & Cyber Essentials Plus Certification
Get Cyber Essentials or Cyber Essentials Plus certified, with a readiness check and remediation support before you submit. Certification is delivered through certified assessment partners.
- Pre-assessment gap check before you submit
- Remediation guidance for every failed control
- Annual renewal reminders and re-certification
DORA & NIS2 Compliance Readiness Assessment
Know where you stand against DORA or NIS2 and what to fix before regulators ask. Gap assessment, third-party risk review and a prioritised remediation plan.
- Gap assessment against the regulation’s requirements
- ICT third-party and supplier risk review
- Board-level remediation plan
GDPR & UK Data Protection Compliance Programme
Practical UK GDPR compliance: data mapping, records of processing, DPIAs and breach response, with tooling chosen to fit your size.
- Data map and records of processing activities
- DPIA templates and completed priority assessments
- Breach response plan and ICO reporting runbook
ISO 27001 Certification & Continuous Compliance
From gap analysis to certificate and beyond. We build or tighten your ISMS, prepare you for the audit by an independent, UKAS-accredited certification body, and keep the evidence current every month.
- ISMS, risk assessment and Statement of Applicability
- Internal audit before the certification audit
- Monthly evidence upkeep so surveillance audits are routine
ISO 42001 & EU AI Act AI Governance Readiness
Adopt AI with control and an audit trail. An AI inventory, risk assessment and governance framework aligned to ISO 42001, with preparation for the EU AI Act.
- Inventory of AI tools and use cases in your organisation
- AI risk assessment and acceptable-use policy
- Readiness plan for ISO 42001 certification
PCI DSS v4.0 Compliance Assessment & Remediation
Understand your PCI DSS v4.0 scope, close the gaps and get ready for your SAQ or QSA assessment, with scoping help that can shrink what needs to comply.
- Cardholder data scoping and segmentation review
- Gap report against PCI DSS v4.0
- SAQ completion support or QSA audit preparation
SOC 2 Readiness & Audit Support
Prepare for a SOC 2 Type I or Type II report without stalling the business. Readiness assessment, control design, evidence collection and auditor liaison.
- Readiness gap report against the Trust Services Criteria
- Controls and evidence set up in your GRC platform
- Support through the auditor’s fieldwork
Human risk and email
Training, phishing simulation and email protection.
DMARC, SPF & DKIM Email Domain Protection
Stop criminals sending email as your domain. A staged move from monitoring to full DMARC enforcement that protects your legitimate mail, then keeps it there.
- Every sending source found and fixed before enforcement
- Staged move to p=reject, with legitimate mail protected
- Monthly reporting and change management
Email Security & Archiving Review and Migration
Is your email gateway and archive still the right fit? An independent review, a side-by-side shortlist and a planned switch that keeps mail flowing and your archive complete.
- Independent review of protection, archiving and cost
- Two or three vendor options compared
- Planned cutover, with your archive carried over
KnowBe4 Security Awareness Training: Managed Service
KnowBe4 licences bought through AWS Marketplace, set up and run for you. Monthly phishing tests, targeted training and board-ready human risk reporting.
- KnowBe4 licences and managed service on one AWS bill
- Monthly phishing simulations and automated training paths
- Quarterly human risk report for leadership
Security Awareness Training & Phishing Simulation
A vendor-neutral awareness programme. The right training platform for your size and sector, phishing tests run for you and reporting on behaviour change.
- Platform chosen on fit for your size and sector
- Phishing tests tuned to your real threats
- Behaviour metrics your board understands
Testing
Find weaknesses before attackers do, once or continuously.
Application Security Testing & DevSecOps Tooling
Find and fix flaws in your web apps, APIs and code before release. Independent selection of SAST, DAST and dependency scanning tools, set up in your pipeline, plus tester-led application testing.
- Code, dependency and API risks found before release
- Tools chosen on fit across vendors
- Findings routed to developers with clear fixes
Autonomous Penetration Testing & Continuous Validation
Test your network the way an attacker would, as often as you need. Autonomous penetration testing, with the results interpreted for you and every fix verified.
- Autonomous tests across internal and external networks
- Exploitable attack paths shown, not just vulnerabilities
- A monthly fix-and-verify cycle, managed for you
External Attack Surface & Dark Web Monitoring
See what attackers see. Continuous discovery of your internet-facing assets, plus monitoring for leaked credentials and data on the dark web, with alerts you can act on.
- Unknown and forgotten internet-facing assets found
- Leaked staff credentials flagged as they appear
- Monthly exposure report
Penetration Testing: Infrastructure, Web & Cloud
Tester-led penetration testing of your networks, web applications, APIs and AWS environment, matched to the right specialist firm and scoped to what your auditors and customers need.
- Specialist tester matched to the scope
- Clear report with risk-ranked findings and fix steps
- Scope agreed up front in a private offer
Vulnerability Management as a Service
Continuous scanning of your servers, endpoints and cloud, with findings triaged and turned into a short, prioritised fix list each month.
- Scanning set up and maintained for you
- Monthly risk-ranked fix list, not a raw export
- Trend reporting for audits and the board
Detect and respond
24x7 monitoring, endpoint protection and a plan for when things go wrong.
EDR & XDR Deployment & Management
Endpoint detection and response rolled out across every device, tuned to cut alert noise and managed day to day.
- Rolled out across every device, with coverage checked
- Policy tuning to reduce false positives
- Monthly health and threat report
Incident Response Retainer & Readiness
Know who to call before you need them. A pre-agreed incident response retainer, an incident response plan and a tabletop exercise for your leadership team.
- Response times agreed in advance
- Incident response plan and playbooks written for you
- Annual tabletop exercise with your leadership
MDR Selection, Onboarding & Oversight
24x7 threat detection and response, chosen independently. We compare MDR providers, onboard the one that fits and stay accountable for the service.
- Two or three MDR providers compared on coverage and cost
- Onboarding, tuning and escalation paths set up
- Quarterly service review on your behalf
SIEM Selection, Deployment & Managed Log Monitoring
Get the right logs in one place and someone watching them. Independent SIEM selection, deployment and tuning, with managed monitoring or a clean handover to your team.
- SIEM platforms compared on cost and fit
- Log sources onboarded and noisy alerts tuned out
- Retention set for audit and incident response
Protect
Identity, access, data, network and backup controls, selected, set up and managed for you.
Data Loss Prevention (DLP) & Data Security
Find where your sensitive data lives, who can reach it and stop it leaving. Data discovery, access review and DLP policies rolled out in stages.
- Sensitive data discovered and classified
- Excess permissions found and removed
- DLP policies rolled out without blocking work
Endpoint Patching, Device Management & CIS Hardening
Keep every laptop, server and phone patched, managed and configured to CIS benchmarks, with monthly proof for Cyber Essentials and your auditors.
- Automated OS and third-party patching
- Laptops and phones enrolled, hardened and managed
- Monthly compliance report per device
Enterprise Password Manager Rollout
Replace shared spreadsheets and reused passwords with an enterprise password manager, rolled out to every user with the adoption support that makes it stick.
- Platform chosen to fit your size
- Rollout and staff onboarding handled
- Shared vaults and admin policies set up
Firewall & Network Security Review and Management
Is your firewall still doing its job? An independent rule-base and network security review, a vendor-neutral shortlist when a refresh is due, and managed changes after.
- Firewall rules reviewed and risky access removed
- Refresh options compared across vendors
- Managed changes with an audit trail
Identity, MFA & Privileged Access Management
Close the most common way in. Single sign-on, multi-factor authentication and privileged access controls, designed and rolled out across your users and admins.
- MFA on every user and admin account
- Single sign-on across business apps
- Privileged accounts vaulted and monitored
Ransomware-Ready Backup & Recovery
Backups that survive an attack. Immutable, isolated backup for servers, SaaS data and endpoints, with recovery tested and timed.
- Immutable, isolated backup copies
- Recovery tested and timed twice a year
- Covers SaaS data as well as servers
Zero Trust, SASE, CASB & Secure Web Gateway Deployment
Secure access for staff and cloud apps wherever people work. Independent selection and deployment of zero trust access, secure web gateway and CASB controls.
- Two or three platforms compared
- Phased rollout replacing legacy VPN
- Shadow IT and cloud app use brought under policy
Third-party products
Products we can supply through AWS Marketplace.
Where a vendor has authorised us, we can supply their product through AWS Marketplace too, so the licence sits on the same AWS bill as the service around it. Today that includes KnowBe4, and the list is growing.
We stay vendor-agnostic either way. We recommend what fits your problem, then tell you whether it can go on your AWS bill.
How we source securityFAQ
Buying through AWS Marketplace
- Yes. You buy through your organisation’s AWS account, and the cost appears on your AWS invoice.
- No. We agree the price with you first, then send it to you as a private offer.
- It can, depending on your AWS agreement. Check with your AWS account team, or ask us and we will help you find out.
- Yes. AWS Marketplace is an option, not a requirement. The service and the accountability are the same either way.
- Talk to us. We can usually scope it and send a private offer for that too.
Next step
Not sure which service fits?
Tell us what you need and we will recommend the right one, even if it is not ours to sell.
Book a callAmazon Web Services, AWS and AWS Marketplace are trademarks of Amazon.com, Inc. or its affiliates.