Project Horizon
A cloud security posture management style platform that evaluates configuration across major cloud providers against security best practices, and prioritizes findings by realistic exploitability rather than raw count.
Product status
- Concept
- Prototype
- MVP
- Pilot
- Beta
- Production
- Scale
Problem
Cloud environments accumulate configuration issues faster than teams can review them, and generic checklists produce large volumes of findings without clear prioritization.
Why this problem matters
Alert fatigue from unprioritized findings leads teams to deprioritize genuinely risky issues alongside low-risk ones.
Solution
Evaluates cloud configuration via read-only access against a curated rule set, and scores findings by exploitability rather than treating all findings equally.
Core capabilities
- Multi-cloud configuration scanning
- Exploitability-based prioritization
- Least-privilege, read-only access model
Architecture
Read-only connectors collect configuration snapshots; an evaluation layer scores findings against best-practice and exploitability heuristics; a dashboard prioritizes results.
How it works
- 1Connect cloud accounts via read-only, least-privilege credentials.
- 2Configuration is snapshotted and evaluated against security rules.
- 3Findings are scored by exploitability, not just rule count.
- 4Teams triage and remediate prioritized findings.
Security model
- • Read-only cloud credentials only
- • No write access requested to customer cloud accounts
Not yet independently assessed
Integrations
- • AWS
- • Azure
- • Google Cloud
- • Planned: ticketing system export
Deployment models
Target customers
- • Cloud security teams
- • Platform engineering teams
- • MSSPs managing multi-cloud environments
Business model
To be determined; likely tiered by number of connected cloud accounts/resources.
Differentiators
- • Prioritization designed around realistic exploitability rather than raw finding volume.
Evidence
Architecture & documentation
Architecture concept
ConfidentialTraction
Stage
Concept
Roadmap
now
AWS connector and rule set
Initial configuration scanning for AWS.
next
Azure and Google Cloud connectors
Extend coverage to additional providers.
later
Exploitability scoring engine
Cross-resource exploitability analysis.
Team capability
Investor relevance
Addresses a large, well-understood cloud security category with a differentiated prioritization approach.