Analysis
Cloud Security
The Shared Responsibility Model: Where Cloud Security Breaks
The provider secures the cloud; you secure what you put in it. Here is exactly where that line falls across IaaS, PaaS and SaaS on AWS, Azure and GCP.
11 min read
Domains
Securing AWS, Azure and GCP workloads — IAM, configuration, workload isolation and cloud-native threat models.
The provider secures the cloud; you secure what you put in it. Here is exactly where that line falls across IaaS, PaaS and SaaS on AWS, Azure and GCP.
A working guide to RBAC, Pod Security Standards, network policy, admission control and image provenance, with manifests you can apply today.
We run security posture reviews for engineering teams — cloud config, access control, CI/CD and the gaps between them. Tell us what you are running and we will tell you where we would look first. No charge for the conversation.
Threat analysis and defensive guidance, sent when there is something worth saying. No vendor pitches.