57 Findings Across 12 AWS Services. Zero False Positives. No Credentials Required.

We ran a static analyzer against NCC Group's SadCloud. 84 intentional AWS misconfigurations across 22 services. Here's what it found, what it missed, and why the compound chain matters more than the count.