Choose one to start — you can buy more later.
Trace and break real IAM escalation chains, then apply least-privilege.
Triage live findings, correlate alerts, and wire automated remediation.
Hunt exposed services, tighten security groups, and design safe network paths.