About

Security you can prove, not just switch on

InfoSecFlow is a small, hands-on AWS security consultancy. We build the open source tools we use with clients.

Why InfoSecFlow exists

Most AWS teams have the right services enabled: GuardDuty, Security Hub, CloudTrail, a few SCPs. Very few have ever checked whether any of it would catch a real attack. Public breach reports keep showing the same pattern: the activity was logged, but nobody was alerted.

We close that gap the way engineers close any gap: we test it. cloud-firedrill runs real attack techniques in a sandbox account and shows what was detected, what was only logged and what was missed. Then we fix what's missing and run the drill again to prove it.

Mateusz Borowski AWS Security Consultant & Founder at InfoSecFlow

Mateusz helps startups and scale-ups on AWS turn security services that are switched on into detections, alerts and guardrails that are proven to work. He is the author of cloud-firedrill, an open source tool that runs real attack techniques in a sandbox account and checks what actually happens.

How we work

Prove, don't assume

Every engagement starts and ends with a fire drill. You get a measured before-and-after, not a slide that says "configured".

Open source first

Our tooling is open source and runs in your account. You can keep using it after we leave, and audit every line of it.

AWS-native, vendor-neutral

No commercial SIEM required and no product to resell. If you already have one, we make it work better.

Everything as code

Detections, alert routing and guardrails ship as Terraform in your repository, reviewed through pull requests.

Curious what your account would miss?

Book a 20-minute call. We'll look at your setup and tell you where we'd start.

Book a call See cloud-firedrill