Shadow Access Risk Assessment

  • Daily report of prioritized Shadow Access risks in your environment.
  • Automated analysis of cloud identity security risks with contextual evidence.
  • Eliminate the need for stitch together piecemeal, manual tools.
  • Runs in your cloud with no change to existing security and compliance.

What is It?

The Stack Identity Shadow Access Risk Assessment eliminates the need for piecemeal, manual tools and processes and enables you to proactively detect identity security risks in your cloud environment and easily answer:
  • What new cloud IAM and operations risks have occurred in the last 24 hrs?
  • Have there been any permission changes or privileged access operations?
  • Where and why are IAM policy violations happening?
  • Has there been risky access to production systems?
  • What new cloud IAM risks came up in the last 24 hours?

What will I get?

You will receive a daily report of Shadow Access Risks with insights about your environment, for example:
  • The number of identities, data assets and policies you have
  • Top risky identities in your environment due to their access and entitlements
  • Application identities being used for third-party access
  • Data assets that are exposed to external networks
  • Cloud identities that have not been used in the last 90 days
  • Daily compliance scorecard for CIS, PCI-DSS, SOC2 and HIPAA

How does it work?

The Shadow Access Risk Assessment (SARA) utilizes Stack Identity’s patent-pending, proprietary product algorithms to comprehensively assess and analyze different cloud events and identify new Shadow Access risks. It is a stand-alone lightweight version of the Stack Identity enterprise platform designed to only run in your cloud environment.

How do I get a Shadow Access Risk Assessment in my cloud environment?

  • Register here:
  • We send you the SARA reporting tool you install in your AWS environment
  • You install the SARA reporting tool in your cloud account
  • You configure account and email settings for SARA
  • Daily Shadow Access Risk reports are sent to your inbox


Stack Identity SARA Platform portal
On-boarding AWS account
Configure AWS CloudTrail
Configure Email provider
Download reports