cloud-security
Safeguard articles tagged "cloud-security" — guides, analysis, and best practices for software supply chain and application security.
321 articles
Public Cloud Security: A Practical Guide to Protecting Workloads
Public cloud security is a shared responsibility, and most breaches trace back to the customer's half of that split rather than a failure by the cloud provider.
What Is IaC in Cyber Security? Risks, Scanning, and Best Practices
Infrastructure as Code turns your cloud setup into version-controlled files, which is powerful and dangerous in equal measure. Here is what IaC means for security teams.
Types of Vulnerability Assessments and When to Use Each
Network, host, application, database, wireless, and cloud assessments each answer a different question. Knowing which type fits which risk is half the job.
Cloud Scan: What It Is and How to Run One That Matters
A cloud scan checks your running cloud accounts, images, and code for misconfigurations and known vulnerabilities. Here is how to scope one so the results are actionable instead of overwhelming.
Cloud Workload Protection Platforms in 2024: What Actually Matters
Cutting through the CWPP marketing noise to identify the capabilities that genuinely protect cloud workloads from modern threats.
SSRF Examples and How They're Actually Exploited
Real SSRF examples, from cloud metadata theft to internal port scanning, showing exactly how a server-side request forgery bug gets turned into a full compromise.
Prisma Cloud Container Security: Palo Alto's Cloud Native Play
A review of Prisma Cloud's container and cloud workload security features, covering image scanning, runtime protection, compliance, and the Twistlock heritage.
Cloud Security Posture Management: A No-Nonsense Guide
What CSPM actually does, where it falls short, and how to get real value from posture management instead of drowning in alerts.
Multi-Cloud Security Posture Management for Supply Chains
Running workloads across AWS, Azure, and GCP multiplies your attack surface. This guide covers cloud security posture management with a supply chain lens.
AWS ECR Image Scanning: A Deep Dive Into What It Catches and What It Misses
ECR offers both basic and enhanced scanning. The difference between them determines whether your container security is real or performative.
MongoDB Atlas Breach: Customer Metadata Exposed in Corporate Systems Attack
MongoDB disclosed unauthorized access to its corporate systems in December 2023, exposing customer metadata and contact information while Atlas cluster data remained secure.
Wiz Cloud Security Platform: Agentless Done at Scale
An overview of Wiz's cloud security platform, covering its agentless architecture, graph-based risk analysis, and how it changed expectations for cloud security tooling.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.