AVThreatLabs
Casefile

The cloud assessment workbench.

Sign in once, run your whole toolkit, and keep every finding, its evidence, and the report together in one case.

A case, not a folder of logs.

Every tool writes into the same case. Output becomes findings you can search and triage, the raw evidence stays attached, and one click turns it into a report.

Runner
40 tools, no shell, risk-gated
Findings
Normalized and de-duplicated
Evidence
SHA-256 hashed into the case
Findings12 open
case · acme-prod
  • Public S3 bucket allows listopen
  • IAM user with wildcard actionstriaged
  • Access key 412 days oldopen
  • Security group open to the internetopen
  • CloudTrail not multi-regionresolved
evidence · sha256 9f2c4e…a1Generate report

Run the whole toolkit, without the terminal.

Point Casefile at a tool and it runs directly, no shell. Credentials reach only the tools that need them, and every run lands in the case, redacted.

No shell
Tools run directly, not through a terminal
Isolation
Keys reach only the tools that need them
Risk gates
Destructive tools stay off until you confirm
Security Tools40 in catalog
  • cloudfoxassessmentrun
  • prowlerassessmentrun
  • pacuactiverun
  • gitleaksassessmentrun
  • cloud-nukedestructiveoff
credentials injected only where required

Casefile is free. Pro is how you bill.

The workbench is free forever. Pro adds what you need to hand a client a defensible, branded deliverable.

Community

free
  • Map AWS, GCP, and Azure from one sign-in
  • Run 40+ tools in the guarded runner
  • Dedup, triage, and review findings in one queue
  • Export a local Markdown report

Pro

early access
  • Client-ready reports

    Export the reviewed case to a branded PDF or DOCX in one click.

  • Dispatch from your phone

    Start an enumeration on-site and it syncs straight into the case.

  • Write a finding once

    Save findings and remediation, then reuse them on the next job.

  • Compliance-ready

    Map findings to CIS, SOC 2, and PCI controls as you triage.

Get Pro earlyFounding users lock in early pricing.

Want to try Casefile?

Join the waitlist. We will email you when early access opens.

Join the waitlist

No spam. One email, when Casefile is ready for you.

See Casefile on real assessments.

Walkthroughs and use cases from the field.

Read the blog