This paper analyses the application status of cloud services to identify four factors that affect the security of enterprise cloud services (ECSs), including platform facilities, operational safety, operations management, and legal factors. Based on the four factors, the grey fuzzy analytic hierarchy process (GFAHP) is used to construct an evaluation model for the security of ECSs. An example is investigated to demonstrate the proposed model.