Back to the registry
Agent passport

Cavirin 11 - AI-Powered Hybrid Cloud Security & Compliance [CSPM] - BYOL

Cavirin · Cybersecurity & IT

No attestation published

Certification per AWS Marketplace.

Provenance reach3 of 12 layers traced

Evidence tier Source Confirmed · 4 captures on record

User ratingNot rated0 reviews on the listing
Runs onUnknownVirtual machine
ProvenanceUnknown33% of the provenance layers this product can disclose
Evidence riskHighSign in to see the basis for this band.

What the publisher says

As described on AWS Marketplace.

AI/ML Cloud security starts by building a 'First Line of Defense', ensuring robust configurations of your key infrastructure and platform services. What are those configurations? Cavirin has researched the industry (e.g., CIS, NIST, PCI, GDPR, and cloud provider recommendations) and delivered easy, one-click policy packs to fortify cloud assets. The policies enforce important access controls, data protection measures (encryption, privileged access), boundary controls, audits, and monitoring. Most importantly, we provide a prioritized list of fixes and specific steps to fix or auto-fix misconfigurations directly via our platform to truly operationalize cloud security. AI/ML-driven Cloud Security Posture Management (CSPM) and interactive CISO dashboard setup the security best practices for the Security teams to start with one-click policies, first for key IaaS and PaaS, then for cloud compute (both OSs and container eco-systems), incorporating findings into DevOps processes; and complete their cloud security journey with our full Cyberposture Intelligence platform, enabling continuous IT health through real-time monitoring, threat detection, and auto-remediation.

Highlights

Highlighted by the publisher on AWS Marketplace.

Broadest policy coverage across clouds, OS, containers, and Kubernetes for a comprehensive set of benchmarks - CIS, NIST, PCI, HIPAA, SOC2, GDPR, DISA.

Enterprise features include configurable & custom policies, one-click remediation, compliance policy packs, cloud monitoring, threat integration, AI Threat Intelligence, and AI-Predictive Analytics.

Configurable policies allow you to ensure compliance with your secure standards & configurations (e.g., for your security, encryption, and administrative settings). Custom policies offer an easy way to add custom policies to the system.

Agent build and provenance

See the full provenance

The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.

Compliance

Government
  • FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27

Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.

Vendor

External enrichment

CompanyCavirinAutomated
HQUnited States of AmericaAutomated

Refund terms

As stated by the publisher on AWS Marketplace.

https://www.cavirin.com/company/legal/end-user-license-agreement

Sources

Marketplace listingaws.amazon.comSource
App certificationaws.amazon.comSource
CustomEulaCustomEulaSource

Publisher resources

3 links
Product Videovimeo.comSource
Cavirin Resourceswww.cavirin.comSource
Cavirin Blogwww.cavirin.comSource

Linked repositories

RepositoriesUnknownUnknown

Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.

Pricing
Unknown
Not stated
Delivery
Virtual machine
https://cavirin.zendesk.com/hc/en-us
Open the source listing ↗

Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.