Standard
App Defense Alliance Cloud App and Config Profile
AWS · Google Cloud · Azure
From $499
ADA Cloud App & Config Profile Validation
Scan as often as you need. Fix at your own pace. Get your App Defense Alliance Letter of Validation when you pass. Secusy runs the ADA Cloud App and Config Profile checks against your AWS, Google Cloud and Azure environments, and ValueMentor, an ADA Authorized Lab, verifies the results and issues your letter.
About 30 seconds · Instant pricing · No sales call required
Validated byAn App Defense Alliance Authorized Lab.
Authorized LabValueMentor
AccreditationCREST-accredited
AL2 certificationTrustCB
StandardApp Defense Alliance Cloud App and Config Profile
Cloud providersAWS, Google Cloud and Microsoft Azure
ScanningUnlimited for 30–45 days by package, read-only access
DeliverableLetter of Validation from an ADA Authorized Lab
Letter SLA2–4 business days after you pass, by package
The definition
What is the ADA Cloud App and Config Profile?
The App Defense Alliance (ADA) Cloud App and Config Profile is a security configuration baseline for applications running in the cloud. It sets testable requirements for the cloud services an application runs on across Amazon Web Services, Google Cloud and Microsoft Azure, builds on the CIS Foundations Benchmarks (Level 1), and is designed for applications that handle confidential data such as credentials, keys, and user or company data. Passing it earns a Letter of Validation from an ADA Authorized Lab.
The profile is provider-agnostic and works with any architecture: one standard, applied consistently across the clouds you run on.
Cloud providers
AWS, Google Cloud and Microsoft Azure
Scanning
Unlimited for 30–45 days by package, read-only access
Deliverable
Letter of Validation from an ADA Authorized Lab
Plan your validation
Choose the package that fits your cloud estate
Tell us which providers host your application, how many production accounts are in scope, and whether you need AL1 or AL2. We'll suggest a package, explain why it fits, and show the price of every option.
ADA cloud plan finder
Find your cloud validation package
Your recommendation and all prices appear at the end.
About 30 seconds
Which cloud providers host your application?
Package pricing is the same across AWS, Google Cloud and Azure.
What gets assessed
64 requirements across 6 domains
The profile builds on the CIS Foundations Benchmarks (Level 1) and sets testable requirements for the cloud services your application runs on.
Compute
Supported runtimes, encryption in transit and at rest, firewalls, default accounts and unnecessary services.
Identity & Access Management
Role-based access, unique credentials, dormant accounts, and MFA for exposed, remote and admin access.
Logging & Monitoring
Audit log collection and retention, monitoring of security-relevant changes, patching and vulnerability scanning.
Networking
Encryption in transit, secure network configuration and server firewalls.
Storage
Encryption, access controls, data recovery and secure network architecture.
Database Services
Hardened configuration, encryption, firewalls, patching and detailed audit logging.
Applicable checks by cloud provider
| AWS | Google Cloud | Azure |
|---|---|---|
| 45 checks | 57 checks | 171 checks |
Many checks are conditional and apply only to the services you use. Your Secusy dashboard shows exactly which checks apply to your environment.
How it works
From connected cloud to Letter of Validation
Scan and fix as often as you need inside your 30- or 45-day window. Submit for validation only once your scans pass.
Step 1: Choose your package
Match providers and accounts
Step 2: Connect your clouds
Read-only access, declare production scope
Step 3: Scan without limits
30–45 days of unlimited scans
Step 4: Remediate
Step-by-step guidance per provider
↻ Repeat steps 3 and 4 until your scans pass
Step 5: Submit for validation
ValueMentor verifies scope and results
Step 6: Letter of Validation
Within your package SLA
Step 7: Optional AL2
Certification through TrustCB
- Process step
- Retest loop
- Deliverable issued
Add-on
Managed Assessment
Prefer an assessor alongside your team? Add Managed Assessment to any package. Your team stays in control of every change.
| Managed Assessment | |
|---|---|
| Price | $1,999 (add-on to any package) |
| Assessor time included | 16 hours, across assessment and remediation support |
| Cloud account access | Partial. Your team runs scripts under analyst observation and uploads the evidence to our portal |
| How it's delivered | Scheduled remote sessions. Your engineers run the checks or walk through the console while a ValueMentor assessor observes and verifies the results |
| Remediation | Guided. The assessor works through each finding with your team, and your team makes every change |
| Additional hours | $125 per hour |
Managed Assessment uses the same validation attempts and Letter of Validation SLA as your package. Assessor hours must be used within your 90-day engagement window.
Before you buy
Package terms
The commercial terms that apply to every package.
- Scans are unlimited from purchase for 30 days on Starter and 45 days on Multi-Cloud and Scale. Engagement extensions are available on request.
- Validation attempts are submissions for assessor review. After your first attempt, later attempts review only the accounts and checks that failed or changed. Accounts that have already passed stay locked in.
- Additional validation attempts on Starter cost $150 each.
- The SLA clock starts when your scan passes, your scope declaration is complete and your validation attempt is submitted.
- In-scope accounts are production accounts that host the application being validated.
- Prices are one-time, in USD, and exclude applicable taxes.
Assurance level
AL1 or AL2: which do you need?
Not sure which one fits? Ask an assessor. We'll tell you what your buyers are likely to expect.
| AL1 Letter of Validation | AL2 Certification | |
|---|---|---|
| Issued by | ValueMentor, ADA Authorized Lab | TrustCB, following ValueMentor's assessment |
| Best for | Demonstrating ADA cloud compliance to customers, partners and app ecosystems | Enterprise procurement and buyers who require a certification-body-issued certificate |
| Price | Included in every package | +$999 |
Why Secusy
Proof your buyers recognise
- Lab-verified, not just scanned. CSPM tools report failed checks. A Letter of Validation from an ADA Authorized Lab is proof that ADA, app ecosystems and enterprise reviewers recognise.
- Fix before you submit. Unlimited scans mean you only submit for validation once you're passing. Fewer surprises, faster letters.
- Verified scan provenance. Scans run through Secusy's read-only connectors and are tied to your declared accounts, which makes your validation fast to verify and hard to challenge.
- One platform for the full ADA stack. Already validated for CASA? Add the cloud infrastructure underneath your app in the same workspace.
- Delivered by ValueMentor. A CREST-accredited cybersecurity firm and ADA Authorized Lab.
Who needs it?
SaaS and app developers handling user data, credentials or keys in the cloud; vendors facing enterprise security reviews; and multi-cloud teams that want one recognised standard instead of a separate checklist per provider.
Cloud infrastructure validation
Independent proof of a secure cloud baseline for enterprise security reviews.
Already need CASA for your app?
CASA covers the application; this profile covers the cloud underneath it.
Explore CASA AL1Shipping an Android app too?
MASA validates your mobile app against the App Defense Alliance standard.
Explore MASA AL1
Questions