In-Tenant Malware Scanning and Data Security Posture Management for Cloud Storage

Founded in 2020 by the late Ed Casmer, Cloud Storage Security serves organizations that need to secure the files landing in their cloud object and file storage rather than their endpoints or networks. The company began with Antivirus for Amazon S3, an in-tenant malware scanning service, and has since expanded into data security posture management across AWS, Azure and Google Cloud. Customers cluster in healthcare and life sciences, financial services, media and entertainment, and the public sector.

Deployment is agentless and stays inside the customer's own account, subscription or project via a CloudFormation template, so files are never shipped to a vendor cloud for analysis. Uploads and modifications trigger event-driven scans that pass objects through multiple malware detection engines, with policy-driven actions to tag, quarantine or delete infected files, while scheduled batch jobs cover historical data and archives. An API tier returns synchronous verdicts for interactive uploads and runs asynchronous scanning for high-volume pipelines, tracking state in DynamoDB and publishing results through SNS.

DataDefender extends the same in-tenant model to posture management, inventorying S3, EBS, EFS and FSx volumes, classifying sensitive data in place, evaluating more than ninety storage configuration best practices, surfacing publicly exposed resources, and flagging unusual activity such as mass deletions or off-hours access. Findings feed CloudWatch, SNS and AWS Security Hub. The company reports over a thousand subscriptions and more than ten billion files scanned, runs a research arm called Casmer Labs, and partners with Sophos, CrowdStrike, Kion and HashiCorp.