Getting Started

0scp is a cloud-security and governance platform that lets you define and enforce Service Control Policies (SCPs) for your AWS Organization as code — with detection, automatic containment, cost budgets, an attack-graph view, and an optional AI autopilot.

0scp is sold through AWS Marketplace as a SaaS Contract and runs inside your own AWS account: you launch a CloudFormation stack, and a small seller-hosted licensing service verifies your entitlement.

What you get

• Detect → Contain — continuously evaluate Organization activity against your policies and automatically contain risky principals (SCP attach, IAM deny, or key deactivation).
• Cost budgets — per-user and per-group spend budgets that can notify or block over-budget principals.
• Attack-graph — a live graph of resource and cross-account relationships to reason about blast radius.
• AI autopilot — an opt-in Bedrock-backed assistant that analyzes platform data and proposes or enforces guardrails.

The path from here

1. Subscribe on AWS Marketplace and complete registration — you receive a license key.
2. Deploy the 0scp stack into your AWS account (1-click launch).
3. Learn how Licensing & Entitlement keeps your install active.
4. Explore the platform in the User Guide.
5. Reach out via Support if you get stuck.

Note

0scp installs as serverless infrastructure in your account. The only thing hosted by us is the licensing service that validates your Marketplace entitlement.