Welcome to CloudSec Academy, your guide to navigating the alphabet soup of cloud security acronyms and industry jargon. Cut through the noise with clear, concise, and expertly crafted content covering fundamentals to best practices.
See how Wiz turns cloud security fundamentals into real-world results.
A cloud security architect designs the security model for cloud environments. That model includes the standards, patterns, controls, and guardrails that engineering teams use when building and operating in the cloud.
A configuration management database (CMDB) is a centralized repository of IT assets (also known as “configuration items”) and the relationships between them. The key word is relationships.
API security encompasses the strategies, procedures, and solutions employed to defend APIs against threats, vulnerabilities, and unauthorized intrusion.
Software as a service (SaaS) refers to cloud-based software applications that can be accessed over the internet without any installation or maintenance on local devices.
Watch how Wiz turns instant visibility into rapid remediation.
Container security scanning detects vulnerabilities early for an efficient DevSecOps process. Discover how it safeguards containers throughout the lifecycle.
Learn the principles of cloud workload protection platforms (CWPP), how to apply them, and why a unified cloud security platform offers enhanced protection.
Discover and compare the best open-source vulnerability management tools for detection, risk prioritization, and compliance to strengthen your cloud security.
Master vulnerability scanning with this detailed guide. You’ll learn about scanning types, how scanning works, how to pick the right scanning tool, and more.
Vulnerability prioritization helps you manage your cloud risk efficiently. Discover how to pinpoint threats with context, automation, and real-time insights.
Threat detection and response (TDR) is a cybersecurity discipline that combines continuous monitoring, threat identification, investigation, and containment to find and stop attacks before they cause damage.
Security as Code (SaC) is a methodology that integrates security measures directly into the software development process. It involves codifying security policies and decisions, and automating security checks, tests, and gates within the DevOps pipeline.
Learn to navigate the complexities of cloud security, including the knowledge and tools required to build a robust and proactive defense against ever-evolving cyber threats.
Google Kubernetes Engine (GKE), the managed Kubernetes solution from Google Cloud, is designed to help manage containerized applications through built-in security features that protect sensitive data and minimize potential risks.
Cloud infrastructure security describes the strategies, policies, and measures that organizations implement to protect cloud-based systems, data, and infrastructure from threats and vulnerabilities.
A hardened image is a pre-configured container or VM template stripped of unnecessary components and vulnerabilities to minimize risk.
Helm Charts streamline the deployment of applications by providing a packaging format that includes all necessary Kubernetes resources.
A Kubernetes cluster consists of a group of node machines designed to run applications within containers.
In this article, we’ll look at vulnerability assessments that can help you find and fix critical vulnerabilities—built for cloud.
A penetration tester (pen tester) is a security professional who evaluates an organization's defenses by simulating authorized cyberattacks, identifying and chaining weaknesses together to demonstrate real-world impact.
