Connect your AWS account

Set up in under 2 minutes

Deploy a read-only role. Paste the ARN. We scan. Nothing else.

1
Deploy RoleCloudFormation
2
Paste ARNFrom stack output
3
RegionWhere to scan
4
Map~30 seconds
Deploy the CloudFormation stack

Click below to open AWS Console with our pre-built template. Click "Create stack". Takes under 60 seconds.

Open AWS Console · Deploy Stack
Creates: EmfirgeReadOnlyRole with ReadOnlyAccess only
This role is global. Deploy in any region.
View template source on GitHub →
Paste the Role ARN

Go to the CloudFormation Outputs tab and copy the RoleArn value.

Helps you identify this account on the dashboard
Select your region

Choose the AWS region where your main resources live.

Mapping your infrastructure…

Analyzing 16 AWS services. Usually takes 15–45 seconds.

  • Validating AWS credentials
  • Scanning EC2 instances and security groups
  • Checking S3 bucket policies and encryption
  • Auditing IAM users, MFA, and root keys
  • Reviewing RDS, CloudTrail, and CloudWatch
  • Scanning Budgets and billing alarms
  • Checking GuardDuty, Lambda, and Secrets Manager
  • Generating AI security advisory
Scan failed
What happens to your data
No AWS account? Try Demo Mode →