What TrustOnCloud is
TrustOnCloud has created in depth threat models for cloud services. For example, they can show you every possible way someone could exploit an S3 bucket. Because they don't focus on scanning, they've created a library of potential exploits that goes far beyond what most CSPMs offer; however, that comes with the downside of being fundamentally a work generation tool. If you're operating at a scale where formal threat models need to be conducted before adopting new AWS services, their tool is undoubtedly useful. The vendor site is www.trustoncloud.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What TrustOnCloud covers
TrustOnCloud is in the catalog for these capabilities. Catalog tags: Best for Enterprise.
How to evaluate TrustOnCloud in a security program
Use TrustOnCloud as a stack candidate, not as diligence evidence. The oneNorma score for TrustOnCloud is 5/10 (percentile 46). A dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.trustoncloud.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
