Bienvenido a CloudSec Academy, tu guía para navegar por la sopa de alfabeto de los acrónimos de seguridad en la nube y la jerga de la industria. Cortar el ruido con contenido claro, conciso y elaborado por expertos que cubra los fundamentos de las mejores prácticas.
Descubre cómo Wiz convierte los fundamentos de la seguridad en la nube en resultados reales.
A cloud security architect designs the security model for cloud environments. That model includes the standards, patterns, controls, and guardrails that engineering teams use when building and operating in the cloud.
A configuration management database (CMDB) is a centralized repository of IT assets (also known as “configuration items”) and the relationships between them. The key word is relationships.
La seguridad de las API abarca las estrategias, procedimientos y soluciones empleadas para defender las API contra amenazas, vulnerabilidades e intrusiones no autorizadas.
Software as a service (SaaS) refers to cloud-based software applications that can be accessed over the internet without any installation or maintenance on local devices.
Mira cómo Wiz convierte la visibilidad instantánea en una remediación rápida.
Container security scanning detects vulnerabilities early for an efficient DevSecOps process. Discover how it safeguards containers throughout the lifecycle.
Una plataforma de protección de carga de trabajo en la nube (CWPP) es una solución de seguridad que proporciona monitoreo y protección continuos contra amenazas para cargas de trabajo en la nube en diferentes tipos de entornos de nube.
8 herramientas de gestión de vulnerabilidades de código abierto y sus características, clasificadas por caso de uso
El análisis de vulnerabilidades es el proceso de detección y evaluación de fallos de seguridad en los sistemas informáticos, las redes y el software.
Vulnerability prioritization helps you manage your cloud risk efficiently. Discover how to pinpoint threats with context, automation, and real-time insights.
Threat detection and response (TDR) is a cybersecurity discipline that combines continuous monitoring, threat identification, investigation, and containment to find and stop attacks before they cause damage.
Security as Code (SaC) is a methodology that integrates security measures directly into the software development process. It involves codifying security policies and decisions, and automating security checks, tests, and gates within the DevOps pipeline.
Learn to navigate the complexities of cloud security, including the knowledge and tools required to build a robust and proactive defense against ever-evolving cyber threats.
Google Kubernetes Engine (GKE), the managed Kubernetes solution from Google Cloud, is designed to help manage containerized applications through built-in security features that protect sensitive data and minimize potential risks.
Cloud infrastructure security describes the strategies, policies, and measures that organizations implement to protect cloud-based systems, data, and infrastructure from threats and vulnerabilities.
A hardened image is a pre-configured container or VM template stripped of unnecessary components and vulnerabilities to minimize risk.
Helm Charts streamline the deployment of applications by providing a packaging format that includes all necessary Kubernetes resources.
A Kubernetes cluster consists of a group of node machines designed to run applications within containers.
En este artículo, analizaremos las evaluaciones de vulnerabilidades que pueden ayudarlo a encontrar y corregir vulnerabilidades críticas, creadas para la nube.
A penetration tester (pen tester) is a security professional who evaluates an organization's defenses by simulating authorized cyberattacks, identifying and chaining weaknesses together to demonstrate real-world impact.
