
05
Cloud
- Client
- SaaS platform
- Year
- 2025
- Delivered by
- MiNDSEC cloud team
In the cloud, identity is the perimeter.
Most findings were not exotic. They were permissions granted once, for a reason, and never revisited.
The track worked through privilege paths, logging blind spots and the difference between configured and effective access.
02
Outcomes
What changed after the engagement.
Capability,
not certificates.
- Privilege escalation paths closed across accounts
- Logging coverage validated against real detections
- Review cadence owned by the platform team
Work with MiNDSEC
