Cloud Security
In-depth guides and analysis on cloud security from the Safeguard engineering team.
239 articles
Discover, protect and respond with AWS and Prisma Cloud
Prisma Cloud discovers, protects, and responds across AWS — but the framework starts after code is already built. Here's the AWS supply chain gap it leaves open, and how to close it.
What Is CNAPP? (Cloud-Native Application Protection Platf...
CNAPP unifies CSPM, CWPP, CIEM, and app security into one platform. Here's the Gartner-defined pillars, how Prisma Cloud stacks up, and the supply-chain gap it leaves.
Azure Key Vault Managed HSM for Artifact Signing: Pattern Library
Managed HSM gives you FIPS 140-3 Level 3 key custody in Azure. We map the patterns for using it as the root of trust for code signing, container signing, and SBOM attestation.
Cloud Security and Compliance: Where They Overlap and Where They Don't
Passing a compliance audit and actually being secure in the cloud are related but not the same thing — here's where cloud security and compliance genuinely overlap and where treating them as identical creates blind spots.
AWS Security Breaches: Lessons Learned From Real Incidents
Most AWS security breach postmortems trace back to a small set of repeating misconfigurations — public S3 buckets, overprivileged IAM roles, exposed credentials — not novel attacks on AWS itself.
AWS Security Tools: Native Services vs Third-Party Platforms
GuardDuty, Inspector, and Security Hub cover a lot of ground — but they stop at the AWS account boundary. Here is where native AWS security tools genuinely suffice and where third-party platforms earn their cost.
Oracle Cloud Tenancy Disclosure Practices: A Defender's Read
Oracle Cloud's disclosure cadence and tenancy isolation story have been pressure-tested across multiple incidents. We unpack what defenders should ask of their provider regardless of vendor.
Cloudflare R2 February 6, 2025 Outage: When Abuse Tooling Took Down Production
A routine phishing-URL takedown clicked the wrong button and disabled R2 globally for 59 minutes. Here is what went wrong and the two-party approval Cloudflare added afterwards.
Cloud-Native Security Practices That Actually Scale
Containers, Kubernetes, and ephemeral infrastructure broke the perimeter security model. These are the cloud-native security practices that hold up past your first hundred services.
AWS Bedrock Guardrails for Agent Workloads: A Defender's Walkthrough
Bedrock Guardrails now span prompt filtering, contextual grounding checks, and tool-use policies. We trace how they fit into a supply chain threat model for production agents.
Cloud-Native Security Platforms: What to Look For
A cloud native security platform needs to cover code, containers, and cloud configuration as one connected surface — here's what separates a real platform from a bundle of point tools.
What is Cloud Native Security
Cloud native security explained: what it is, the 4C's model, real breach examples, SBOM requirements, and the tools that secure containers and Kubernetes.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.