AWS Security, Due Diligence & Platform Hardening

Many businesses run critical software on infrastructure that was set up quickly and never revisited: a single server, missing patches, manual certificates and wide-open networking. It works, until it doesn't. MatterHive Software is a Perth-based AWS consultancy that reviews, secures and hardens cloud platforms so they're safe to rely on and ready to grow.

Technical due diligence

Investing in, acquiring or taking over a software product? We give you an independent, plain-English assessment of the technology behind it: architecture, infrastructure, security, scalability, code quality and engineering practices. You'll get a clear picture of the risks, what it would take to fix them, and what that means for the product's future.

AWS security reviews

We review your AWS environment against security best practice, including:

  • IAM users, roles and permissions
  • VPC design, security groups and network exposure
  • Operating system and software patching
  • Secrets and credential management
  • TLS/SSL certificates and encryption at rest and in transit
  • Backups, logging, monitoring and recovery

You receive a prioritised list of findings, so you know what to fix first, and we can fix them for you.

Platform hardening

We go beyond the report and uplift your platform to a secure, resilient and maintainable setup:

  • Containerising applications and running them on Amazon ECS and Fargate
  • Self-healing services behind load balancers, with no single server to fail
  • Automatically renewing SSL certificates
  • Secure VPC networking with private subnets for applications and databases
  • CI/CD pipelines in GitHub Actions with automated rolling deployments and automatic rollback, so every release goes out the same way and a bad release never takes the site down
  • Infrastructure as code, so environments are repeatable and changes are reviewable

Case study: hardening a custom CRM

A client's custom CRM was running on a single, unpatched EC2 instance. One server meant one point of failure, and missing patches left the business exposed to known vulnerabilities.

We migrated the CRM to containers on a fully self-healing AWS Fargate cluster behind a load balancer, with automatically renewing SSL certificates and a secure VPC network, and set up a GitHub Actions CI/CD pipeline with rolling deployments and automatic rollback, so new versions go out with no downtime and a failed release is reverted automatically. If a container fails, it's replaced automatically. Certificates no longer need manual renewal. Releases no longer mean manual changes on a live server, and there's no longer an unpatched server to look after.

Who we work with

Investors and acquirers who need technical due diligence, boards and founders who want to know their platform is secure, and teams who have outgrown their original setup. We're based in Perth and work with businesses across Western Australia, Australia and New Zealand, including PropTech and FinTech companies where security and reliability matter most.

Get in touch to arrange a security review or due diligence assessment, or see our full list of services.