Kévin D.

I assist companies using AWS in identifying their real security risks: misconfigurations, excessive IAM permissions, service exposure, insecure S3 storage, poorly protected secrets, invisible attack surfaces, and privilege escalation paths.

The goal is not simply to run a tool or produce a list of vulnerabilities. My approach combines automation, human validation, and complementary manual analysis to achieve a more reliable, actionable, and realistic view of an attack scenario.

Each engagement begins with a structured analysis of the AWS environment: identities, roles, permissions, exposed resources, critical services, network configurations, logging, access mechanisms, and existing security controls. Automated findings are then verified, contextualized, and enriched by manual searching for findings that tools might miss.

I intervene specifically on:

• AWS security audits

• IAM analysis and privilege control

• Detection of excessive permissions

• Verification of the principle of least privilege

• Analysis of S3 buckets and exposure risks

• Evaluation of EC2, network, access, and exposed services

• Search for critical misconfigurations

• Analysis of attack paths and escalation scenarios

• Validation of logging and detection mechanisms

• Prioritization of risks based on their actual impact

• Clear and actionable remediation recommendations

kepler-pentest.cloud is for startups, SMEs, SaaS companies, software publishers, and businesses that want to strengthen their AWS security with a specialized, pragmatic, and results-oriented approach.

My goal: to help companies better understand their cloud exposure, reduce critical risks, and sustainably strengthen their AWS security posture.