.svg)
Comprehensive Coverage
IAM
S3
EC2
RDSIAMIAMS3EC2RDSIAMIAMS3EC2RDSIAMIAMS3EC2RDSIAMIAMS3EC2RDSIAMIAMS3EC2RDSIAM
Powerful Features to Automate your Security
Automated discovery, validation, and attack chaining for your AWS cloud.
Automated Discovery
Discovers S3, IAM, EC2, RDS, and Lambda configurations via secure read-only APIs.
Blast Radius Scoring
Computes a reachability-based 0-100 score for every finding using graph traversal.
Exploit Validation
Actively tests open buckets and endpoints to verify exploitability and eliminate false positives.
Attack Path Chaining
Correlates multiple findings into attack paths, showing how hackers could pivot to your data.
Getting Started with MetriGraph CSPM
Connect your account and secure your cloud posture in three simple steps.
.webp)
.svg)
Connect AWS Role
Deploy a read-only IAM role using our 1-click CloudFormation template. MetriGraph scans using secure temporary STS tokens.
.svg)
Run Security Audit
MetriGraph executes 20+ checks across IAM, S3, EC2, RDS, and Lambda, analyzing trust relationships and configurations.
.svg)
Prioritize & Fix
Visualize your attack paths, identify high blast-radius findings, and remediate using plain-English step-by-step instructions.
MetriGraph Pricing Plans
Enterprise-grade cloud security posture management tailored to your infrastructure.
Perfect for basic security posture audits and single account scans.
$0.00 / month
.svg)
Features +
1 connected AWS accountBasic security scans
20+ standard security checks
Email reports & alerts
Email reports & alerts
Secure, Read-Only Agentless Scans
We never store your permanent access keys. Scans run securely using AWS STS temporary tokens.
Frequently Asked Questions
Everything you need to know about our AI platform answered clearly and simply.
What does MetriGraph do?
.svg)
MetriGraph is a Cloud Security Posture Management (CSPM) tool. It connects to your AWS account, scans your resources, evaluates misconfigurations, and calculates a 0-100 Blast Radius Score to show how far an attacker could breach.
How does MetriGraph connect to my AWS account?
MetriGraph connects securely to your AWS account using AWS STS (Security Token Service) to assume a read-only role. You deploy this role in 1-click using our CloudFormation template. We never see or store your permanent credentials.
Will scanning my account impact my AWS bill?
No, read-only API calls (List and Describe commands) are free on AWS. MetriGraph scans cost you absolutely nothing in AWS billing charges.
How does Blast Radius Scoring work?
It constructs a graph of your AWS resources and permissions, then simulates an attacker's path from a misconfigured entry point using BFS traversal. Findings are ranked by how many critical resources are reachable.
Can I integrate this with my existing tools?
Yes! MetriGraph has a built-in MCP server that integrates with AI IDEs and agents, and supports markdown/JSON/SARIF exports, Slack alerts, and direct Terraform remediation instructions.
.webp)
.svg)
