Real Time Events

Catch and correct mistakes before they becomesecurity incidents and end up on compliance reports.

1

Catch mistakes before they hurt you

Receive alerts in real time for critical events that have taken place inside your AWS accounts. Notify through Slack and Email.

2

Remediate in real time

Trigger Lambda Functions that react to and remediate pre-defined threats immediately, minimizing any exposure to seconds.

3

Secure your whole cloud

Use GorillaStack to monitor for more than 500 security threats via CloudTrail and other Real Time Events across all of your accounts and regions through a single pane of glass.

Quick Installation

Just launch a CloudFormation Template and install our One Click Best Practices

Pay via AWS Marketplace

Add a small charge to your AWS bill

Parse Data

Use conditions on any property nested within the source event to filter notifications and remediation

Chat Integration

Event notifications via Slack and Email

ALERTS

$50

USD Per AWS Account/month

Unlimited Alerts

Unlimited Users

Slack App Integration

Email Integration

Role Based Access Control

Single Sign On (SAML 2.0)

API Access and Terraform

Pay via AWS Marketplace or Credit Card

ALERTS + REMEDIATION

Coming Soon

Unlimited Alerts

Unlimited Users

Slack App Integration

Email Integration

Role Based Access Control

Single Sign On (SAML 2.0)

API Access and Terraform

Pay via AWS Marketplace or Credit Card

Remediation Actions

Quick Onboarding. Great Support.

FAQS

How do I link my cloud accounts to GorillaStack?

AWS Accounts are linked to GorillaStack by deploying a CloudFormation template. When deployed this CloudFormation template:

  1. Creates an IAM role for cross-account access. GorillaStack assumes this role when collecting data and executing actions and the role's IAM permissions control GorillaStack's level of privilege
  2. Creates a Lambda Function which has the sole responsibility of posting back to GorillaStack on successful or unsuccessful stack creation.

Azure subscriptions are linked by running a script in the Azure cloud shell.

Can I customize GorillaStack's permissions in my linked cloud accounts?

Yes.

We provide the option of customising the template using the GorillaStack interface to restrict the available permissions to just the Rules Engine Actions and Triggers that you need (no CloudFormation knowledge needed!). This can be done on first-time Account Setup, or by updating the setup for already linked accounts.

What if I need help?

When you need extra assistance book a meeting with Joel

What permissions do I need to give to GorillaStack?

An AWS Account is linked to GorillaStack by deploying a CloudFormation template.

This CloudFormation template creates a role for cross-account access, containing IAM permissions which control what GorillaStack can do within a linked account.

To successfully run GorillaStack Real Time Events, a linked account needs to allow the following IAM permissions:

events:DeleteRule events:DisableRule events:EnableRule events:PutRule events:PutTargets events:RemoveTargets events:ListRules

Are you available via AWS Marketplace?

Yes, you can pay for us via the AWS marketplace, GorillaStack will appear as an item on your bill every month.

What events do you track?

You can use GorillaStack to filter and alert on any CloudTrail event.

For more information on the kinds of events you may wish to consider, you can read about high priority CloudTrail security events.

How quickly are events registered?

Receive notifications in real time as CloudTrail events take place. Typically a system event will write to CloudTrail in less than 10 seconds.

Do you offer discounts?

We do! If you want to pay a year up front, we'll give you 2 months for free, you can get in contact at any time. Also, call us if you're a not-for-profit, we'll assess these on a case-by-case basis.