TotalHealDatasheet · 27 October 2026
TotalHealCloudPosture
Cloud Security Posture Management (CSPM)
Find risky settings in your AWS, Azure and Google Cloud accounts — connected without keys.
- Cloud (SaaS)
- On-premises
- Air-gapped
The challenge
Public storage buckets, administrators without MFA and roles anyone can assume are the commonest cloud breaches, and most security tools want a long-lived access key to look for them — one more secret to leak.
The answer
CloudPosture connects to each cloud account without keys: a one-line installer in the cloud’s own shell makes the account trust TotalHeal, read-only. It then checks the account’s settings and lists what is risky, account by account.
- Status
- Available
- Deploys as
- Cloud (SaaS) · On-premises · Air-gapped
- Runs on
- Amazon Web Services; Microsoft Azure; Google Cloud
- Priced per
- Cloud account per year
- Trial
- 30 days
- Licence
- Sold on its own; one TotalHeal console
Supported platforms
- AWS
- Microsoft Azure
- Google Cloud
How it works
- ConnectRun the one-line installer in the cloud’s own shell.
- CheckIdentity, storage, logging and network settings are checked.
- PrioritiseFindings per account with severity and the fix.
Reference architecture
Key capabilities
- Keyless connectionFor AWS, Azure and Google Cloud a one-line installer run in the cloud’s own shell creates a read-only trust for TotalHeal. No access key, secret or key file is created or stored.
- Misconfiguration checksChecks across identity, storage, logging and network settings — 23 for AWS, 18 for Azure and 12 for Google Cloud — such as public buckets, console users without MFA, old access keys and roles any account can assume.
- Per account and across accountsFindings per account with severity and how to fix them, and a multi-account view.
- Cloud detectionsCloud audit-log rules for control-plane changes join incidents when ThreatFusion XDR is present.
Deployment options
Cloud (SaaS)AvailableSingle-region service.
On-premisesAvailableDelivered with our team from the on-premises kit.
Air-gappedAvailableOffline kit, offline licence file and offline update bundles.
System requirements
Protected platforms
- AWS
- Microsoft Azure
- Google Cloud
On-premises server
- Operating system
- RHEL, Rocky Linux or AlmaLinux 8 / 9; Ubuntu 20.04, 22.04 or 24.04; Debian 11 / 12
- Processor
- 4 vCPU (tested configuration)
- Memory
- 8 GB recommended (6 GB minimum)
- Disk
- 10 GB free for software, releases and backups, plus data
- Sign-in
- Active Directory / LDAP, SAML 2.0 or OpenID Connect
- Software
- Nothing to pre-install: no container runtime, database, web server or Java
Network and access
- Someone who may create a read-only role or federation in each cloud account
Alerts and tickets to
- Splunk
- Microsoft Sentinel
- Elastic
- Syslog / CEF
- Jira
- ServiceNow
- Slack
- Microsoft Teams
Technical specifications
| Features | Included | |
|---|---|---|
| Keyless connection | Included | |
| Misconfiguration checks | Included | |
| Per account and across accounts | Included | |
| Cloud detections | Included | |
| Availability by edition | Business | Enterprise |
| Keyless connection, misconfiguration checks, multi-account view | Included | Included |
| Platforms and coverage | ||
| Amazon Web Services | Read-only role trusted by TotalHeal | |
| Microsoft Azure | Read-only access through workload identity federation | |
| Google Cloud | Read-only access through workload identity federation | |
| Console | TotalHeal web console | |
| Deployment options | ||
| SaaS (India region) | AvailableSingle-region service. | |
| On-premises control plane | AvailableDelivered with our team from the on-premises kit. | |
| Air-gapped | AvailableOffline kit, offline licence file and offline update bundles. | |
| Licensing | ||
| Priced per | Cloud account per year | |
| Counted | Connected cloud accounts, subscriptions or projects | |
| Trial | 30 days | |
| Editions | No Business/Enterprise split is set for CloudPosture yet. | |
| Government profile | Government is a profile, not a separate tier or price list: the Elite tier with Government defaults switched on — data residency in India, four-eyes approval of policy changes, a distinct approver for every approval-level action, retention of at least 180 days, and the CERT-In and DPDP reporting clocks. | |
| Procurement dossier | Compliance matrix, bill of materials, architecture and hardening, SLA and OEM authorisation letter, on request | |
| On-premises server | ||
| Operating system | RHEL, Rocky Linux or AlmaLinux 8 / 9; Ubuntu 20.04, 22.04 or 24.04; Debian 11 / 12 | |
| Processor | 4 vCPU (tested configuration) | |
| Memory | 8 GB recommended (6 GB minimum) | |
| Disk | 10 GB free for software, releases and backups, plus data | |
| Sign-in | Active Directory / LDAP, SAML 2.0 or OpenID Connect | |
| Software | Nothing to pre-install: no container runtime, database, web server or Java | |
| Requirements | ||
| Requirement 1 | Someone who may create a read-only role or federation in each cloud account | |