What is CloudShield?
Agentless security scanning for cloud instances and repositories.
CloudShield finds vulnerabilities in the code you actually run. Point it at a live instance or a Git repository, and it returns prioritized, de-duplicated findings with clear explanations and AI-suggested fixes.
Two ways to scan
SSH instance — CloudShield connects to a VM over SSH, copies its code into an isolated workspace, inventories its installed packages, runs a multi-scanner analysis, and disconnects. Nothing is installed on your machine, and your credentials are used once and destroyed.
Git repository — CloudShield clones a repository over https (public, or private with a read-only access token) and runs the same code analysis on it.
What you get
- Code findings from an ensemble of eight security scanners, merged and de-duplicated, each scored 0–10 and classified as a likely true positive, uncertain, or likely false positive by CloudShield's heuristic engine.
- Package CVEs for everything installed on the instance, cross-referenced with the CISA Known Exploited Vulnerabilities catalog, with a single recommended upgrade per package.
- AI-suggested fixes generated by self-hosted models — your code never leaves CloudShield's infrastructure for remediation.
- Trends over time — every instance gets a vulnerability graph across scans, with new, resolved, and persistent findings tracked between runs.