AWS governance, commercial through GovCloud.
PolicyCortex deploys natively on AWS — single-account through Organizations, commercial through GovCloud (US-East / US-West). Native integration with AWS Config, Security Hub, CloudTrail, and IAM Identity Center. Same engine, same rollback contracts, framework-mapped from day one.
- CAP-01AWS Organizations-awareMember account discovery; SCPs honored.
- CAP-02Config + Security Hub nativeFindings consumed; remediation applied via SSM.
- CAP-03Multi-framework mappingCMMC · NIST 800-171 · FedRAMP · SOC 2 · PCI 4.0.
- CAP-04GovCloud + ITAR scopeDeploys in us-gov-east-1 / us-gov-west-1.
- CAP-05Auto-remediation via SSMRun Commands + State Manager for fix execution.
- CAP-06Anomaly + cost couplingSpend drift mapped to compliance drift.
- 01ConnectIAM cross-account role + Organizations discovery.
- 02BaselineConfig rules + custom controls active. Drift surfaces in real time.
- 03OperateAuto-remediation via SSM. Evidence flows to CloudTrail + S3.
- DOE National LabActive consultant
- MITRECybersecurity engineering
- USAAFinancial-grade ops
- FrontierProduction cloud architecture
Founder runs every engagement personally. 4 U.S. patent applications filed.
GovCloud supported?
Yes. Deploys in us-gov-east-1 and us-gov-west-1. ITAR-controlled workloads are supported when scoped appropriately.
AWS Config replacement?
Complementary, not a replacement. We consume Config rule evaluations and add remediation execution + framework mapping. Existing Config investments are preserved.
Multi-account / Organizations?
Yes. Discovers member accounts via Organizations API. SCPs are honored — we don't bypass guardrails, we operate within them.
How does remediation execute?
Via SSM Run Command, State Manager, or direct AWS SDK calls. Every action has a rollback path. CloudTrail captures full audit lineage.
Govern AWS, commercial through GovCloud.
$15,000 flat for the 30-day pilot. Connect an AWS account, baseline frameworks, auto-remediate live.