How XSEE protects your environment and your data.
Assessment access is limited to the read-only role you create.
Assessment requires no agent installation in your account.
Evidence records include hashes so later changes can be detected. A hash shows a record is unaltered, not that an attack succeeds.
Delete the IAM role at any time to end XSEE access to your account.
You create the role and choose its policy. The assessment flow uses the AWS-managed ReadOnlyAccess policy, which grants no write actions.
Nothing is installed on your instances or deployed into your workloads.
XSEE analysis uses AWS configuration and policy metadata. Note that ReadOnlyAccess also permits some data reads, such as S3 objects. If you need a narrower scope, ask us about a custom policy.
XSEE does not make changes in your AWS account. Your team decides on and applies any remediation, then XSEE can re-check the path.
Details on hosting, encryption, data retention and access controls are available on request as part of our security documentation. Contact security@xsee.io.
Report vulnerabilities to security@xsee.io. We review every report and will reply to coordinate next steps.
For security documentation or data processing agreement requests, contact security@xsee.io.