Startup Peace of Mind Assessment
Pre-assessment overview
sentinel.teckpath.com/startups
Understand your AWS — before you hope for the best.
You inherited AWS from a contractor or early hire. Sentinel connects read-only,
assesses how your environment is actually built, and delivers a founder-ready report — typically within 24–48 hours of connection.
The questions we answer
How is our AWS designed? VPC layout, public vs private subnets, load balancers, databases.
How secure are we? Posture score, critical/high findings, CIS & AWS FSBP mapping.
What’s exposed? Open security groups, public S3, public RDS, container vulnerabilities.
What are we spending? 30-day spend by service and cost quick wins.
What should we fix first? Prioritized actions with step-by-step playbooks.
Rebuild or fix in place? Path comparison with timeline and cost estimates.
How it works
Connect (~5 min) — Deploy a read-only IAM role via CloudFormation. No write access required.
Scan (~30 min) — Automated assessment across 31 security, network, and operations checks.
Report — Startup Peace of Mind Assessment, network diagram, executive summary.
Improve (optional) — Governed remediation with approval; rescan to prove progress.
Not a penetration test. Configuration and architecture posture — what investors and auditors expect in due diligence.
What you receive
Deliverable
What it shows
Who reads it
Startup Peace of Mind Assessment
Security grade, top risks, DR gaps, spend headline, improvement path
Founders, investors
Network topology diagram
How VPCs, subnets, ALBs, and RDS are wired — the “aha” moment
CTO, technical co-founder
Architecture paths
Rebuild vs remediate in place — timeline, TCO, recommendation
Leadership, board
Share link
Password-protected URL for auditors — no Sentinel login
Investors, advisors
Why TeckPath Sentinel
Outcomes, not checklists — decide, approve, and prove improvement over time.
Board-ready — reports built for due diligence, not engineer JSON dumps.
Read-only first — assessment never requires write access to your account.
MSP-grade delivery — same platform TeckPath uses for managed clients.
What we assess (sample)
IAM users, roles, password policy, root MFA
S3 public access, encryption, logging
Security groups, VPC flow logs, TLS certificates
CloudTrail, GuardDuty, Config compliance
RDS exposure, backup, encryption
ECR image scanning & container CVEs
Cost Explorer spend & quick wins
Typical first-scan insight: Most startups discover 15–50 findings, 2–5 critical/high items
(public exposure, logging gaps, or weak IAM), and spend visibility they never had —
plus a clear prioritized path to fix without a six-figure enterprise security platform.
