Cloud Security
In-depth guides and analysis on cloud security from the Safeguard engineering team.
100 articles
How to Secure Terraform State: Encryption, Access, Locking
Secure Terraform state with a remote encrypted backend, tight access, versioning, locking and no secrets in config. Includes an S3 backend example and OpenTofu notes.
Multi-Cloud Security Checklist for Small Teams
A practical multi-cloud security checklist: one identity source, common baselines, central logs, posture scanning, IaC checks and a shared control framework.
Undersea Cable Cuts and Internet Resilience: What the Evidence Says
Most subsea cable faults are accidents, and repair takes time. Here is what ENISA, the ICPC and the ITU advisory body say, and what it means for your network design.
Service Account Security Best Practices for Cloud Teams
Secure service accounts by avoiding long-lived keys, giving each app its own least-privilege identity, rotating or retiring credentials, and logging every use.
Connect Safeguard to AWS: ECR, connectors and events
Where AWS fits in Safeguard: Amazon ECR images, the AWS compliance connector, the CLI cloud scan and Kinesis event delivery, as the docs describe them.
Connect Safeguard to Microsoft Azure: connectors, scans and Event Hubs
What the Safeguard docs say about Azure: the Microsoft Azure connector, Azure Government, the CLI cloud scan and Event Hubs delivery.
Connect Safeguard to Google Cloud: connectors, registries and Pub/Sub
The documented ways Google Cloud connects to Safeguard: the GCP connector, Cloud Storage, the CLI cloud scan and Pub/Sub event delivery.
Yandex Cloud puts platform in emergency mode after data center strikes
Yandex reported drone attacks on three data centers between 8 and 11 Oct 2026 and told customers to use other disaster recovery plans. A physical outage case for dependency planning.
Google Cloud Storage writes failed in us-central1 for 18 hours
A load balancing change in Google Cloud Storage caused upload errors on 8 Oct 2026 and came back on 9 Oct after an incomplete rollback. What Google's final report says and what to test.
Vault 2.1.2: Four October Bulletins, From ACL Deny Bypass to ACME
HashiCorp's 7 October Vault bulletins fix a case-sensitivity bypass of deny rules, unverified ACME certificate identities and plugin code execution from snapshots.
Rancher CVE-2026-88804: Unauthenticated Writes to the Login Page
A request-parsing quirk let anyone who could reach Rancher rewrite public UI settings and plant script on the login page. Fixed 23 September in five release lines.
Consul 2.0.4: Intentions That Match Too Much and Catalog Takeovers
HashiCorp's 10 September Consul bulletins fix broad Envoy RBAC matching for intentions, two catalog authorization bypasses, an RPC memory DoS and a consul-template leak.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.