Resources
Container security, Kubernetes protection, runtime security, and workload hardening across cloud environments — blogs, guides and use cases.
66 resources — 15 blogs · 19 learn · 14 podcasts · 18 use cases
A FinTech running most of its compute on GKE replaces standing kubeconfigs and shared cluster-admin with time-bound, namespace-scoped, identity-stamped Kubernetes JIT — including private GKE clusters.
Replace standing SSH keys and bastions with time-bound, approved, session-recorded VM JIT across GCP Compute Engine and Azure VMs with no standing access.
How a lean healthcare team added agent-based runtime workload protection for partner-built Docker-on-EC2 apps, with container and host-level detection.
Running workloads on Amazon ECS? Here are the task definition, IAM role, service networking, and image provenance checks that generic CSPM tools often skip.
Most ECS security stops at the task boundary, leaving the RDS database governed separately. See why that split creates a data-tier blind spot and how to fix it.
Secure Amazon ECS task definitions, task IAM roles, service networking, and image provenance with contextual CSPM built for non-Kubernetes containers.
See how a healthcare provider kept continuous CNAPP security across posture, runtime, and identity while migrating from Docker-on-EC2 to Kubernetes on AWS.
See how a multi-cloud AI platform replaced Wazuh, SonarCloud, Snyk, and Nessus with one CNAPP+ platform unifying CSPM, code, workload, and JIT access.
See how a team closed the runtime gap for Docker containers running on VMs and Kubernetes with Cloudanix image scanning and runtime protection.
See how a multi-cloud team with 1,000+ VMs replaced a self-run Wazuh deployment with managed VM vulnerability management to cut noise and overhead.
See how an AI SaaS company replaced a fragile 5-step EKS socat tunnel and Vault workflow with a single CLI command using Cloudanix Database JIT.
How a DevOps team replaced standing EKS cluster-admin bindings with time-bound, namespace-scoped Kubernetes JIT access for 75% of access requests.
CSPM secures cloud configurations while CWPP protects workloads at runtime. Learn key differences, when you need each, and why CNAPP unifies both.
Compare the best container security tools for 2026. Covers image scanning, runtime protection, Kubernetes security, and CWPP platforms for DevSecOps teams.
How a multi-cloud FinTech replaced native tools with one CNAPP+ dashboard, added JIT for 500 users, and secured EKS/GKE workloads across AWS, GCP, and OCI.
How a FinTech on GCP + Azure with GKE workloads unified CSPM, compliance, and Kubernetes security in one CNAPP+ platform.
Compare agentless and agent-based CNAPP architectures in 2026. Understand eBPF sensors, snapshot scanning, hybrid strategies, use case mapping, TCO, and 5 key questions to ask your vendor.
What container image scanning is, why it matters, common vulnerabilities detected, key steps, benefits, and how to choose the right tool.
Learn how a SaaS company using GitLab for SCM and CI/CD integrated SAST, SCA, secrets detection, and container image scanning into their pipeline — without upgrading their SCM tier or disrupting developer velocity.
Learn how a SaaS company running 90% ECS workloads across 9 AWS accounts moved from open-source tools and AWS Trusted Advisor to a unified CSPM platform — with a 4-person team and no landing zone in place.
A stage-by-stage guide to implementing DevSecOps on Azure. Covers code pipeline security, JIT access beyond Entra PIM, database activity monitoring, CSPM, and AI coding agent controls.
How a healthcare provider secured partner-built and AI-generated code on AWS, closing attack paths across cloud, identity, and infrastructure with Cloudanix.
Learn how a fast-growing SaaS company with 400+ EC2 instances and EKS clusters unified cloud posture, Kubernetes workload protection, and code security under one platform with a 2-person DevOps team.
The complete 2026 Kubernetes security checklist for hardening EKS, AKS, and GKE. Covers Zero-Trust data plane, eBPF runtime security, workload identity, supply chain integrity, secrets governance, and AI workload hardening.
A cloud security graph connects assets, identities, permissions, networks, workloads, data, and findings so teams can understand real risk paths.
Cloud UEBA detects unusual behavior across users, service accounts, workloads, and cloud identities by comparing activity to expected baselines.
Falco is an open-source runtime security tool for detecting suspicious behavior in containers, Kubernetes, Linux hosts, and cloud-native workloads.
How ransomware targets AI systems, why model poisoning complicates recovery, and how to build organizational resilience against AI-powered attack vectors.
Comprehensive guide to the top 10 CNAPP tools in 2026. Compare features, pricing, and capabilities of leading Cloud-Native Application Protection Platforms including Cloudanix, Orca Security, Tenable, and more.
Excel-based User Access Reviews create compliance gaps, stale data, and audit failures. Learn the 5 security risks of spreadsheet UAR and how automation solves them for ISO 27001, SOC 2, and PCI-DSS.
Master cloud workload protection in 2026. Explore eBPF for kernel visibility, the agent vs. agentless debate, and securing AI agents using MCP.
Struggling with cloud complexity? Compare CSPM vs. CNAPP to secure your microservices. Learn how to unify posture, identity, and runtime protection for 2026.
Dinis Cruz explains how to secure ephemeral Kubernetes workloads, why identity is the new perimeter, and how GenAI transforms both attack surfaces and defense.
Eliminate standing AKS access with JIT Kubernetes for Azure. Get granular, time-bound RBAC controls at cluster and namespace level with automatic revocation.
Learn Kubernetes cluster defense strategies including Network Policies, RBAC, Secret Management, and security best practices for robust environments.
Learn container security fundamentals, best practices, vulnerability scanning, and runtime protection for containerized cloud applications.
Understand what CWPP is, why it matters, and how it secures cloud workloads through visibility, threat detection, and compliance capabilities.
Learn what GKE is, how it works, its benefits, limitations, and use cases. Discover why Google Kubernetes Engine is production-ready.
Confused between CNAPP and CSPM? Learn the key differences, when to use each, and which cloud security tool fits your organization's needs in 2026.
Protect running containers from escape attacks, privilege escalation, and zero-day exploits. Covers runtime monitoring, threat detection, and enforcement.
Secure your Kubernetes clusters against misconfigurations, image vulnerabilities, and runtime threats. Covers compliance, RBAC, and network policies.
Detect container escapes, privilege escalation, and zero-day exploits in real time. Covers eBPF monitoring, seccomp profiles, and runtime threat response.
Amazon EKS is a managed Kubernetes service for running Kubernetes on AWS. Learn about EKS benefits, components, and security best practices.
Azure Kubernetes Service (AKS) simplifies container orchestration and scales workloads securely. Learn about AKS architecture and use cases.
Track and secure every cloud resource across AWS, Azure, and GCP. Reduce shadow IT, optimize spend, and maintain compliance with cloud asset management.
Learn Kubernetes architecture, networking, security with RBAC and Pod Security Standards, GitOps workflows, and managed services like EKS, GKE, and AKS.
Essential IAM practices for the cloud: least privilege, short-lived credentials, role separation, and regular access review across AWS, Azure and GCP.
Learn how SBOMs, container image signing, and SCA tools integrated into CI/CD pipelines strengthen your software supply chain security posture.
Brad Geesaman explores how agentic AI is transforming application security, from ReaperBot's autonomous testing to building trust in AI-driven workflows.
Tom Adamski shares insights on network segmentation in AWS, from security groups and VPCs to Zero Trust architecture and the importance of simplicity.
Why CISOs need emotional intelligence: master self-awareness, empathy, and social skills to lead security teams, manage crises, and build a security culture.
12 container security best practices for 2026 covering image signing, eBPF runtime monitoring, admission policies, least privilege, and network segmentation.
Learn 5 proven cloud workload protection strategies for 2026 covering runtime security, contextual risk prioritization, and AI agent workload safeguards.
Stop relying on static compliance scans. Discover why real-time event visibility and Kubernetes-native security are essential for modern containerized clouds.
Secure your Kubernetes clusters with Cloudanix's Spectro Cloud add-on. Get runtime threat detection, misconfiguration checks, and image analysis in minutes.
Kesten Broughton shares why asset management is the bedrock of cloud security and how to effectively handle ephemeral Kubernetes workloads at scale.
Move beyond the blame game. Learn how Restorative Justice framework transforms security culture, eliminates shame, and aligns security with DevOps velocity.
What cloud-native security means, how to secure Kubernetes deployments, why policy as code is essential, and when K8s is not the right answer.
Use eBPF for deep Kubernetes observability without performance overhead. Learn 4 use cases: K8s monitoring, network tracing, and pod-level visibility.
Learn the differences between red, blue, and purple teams, when to invest in threat hunting, and how to start a career in security operations.
Learn how policy as code solves Kubernetes misconfiguration, secures supply chains with image signing, and why security belongs in platform engineering.
Learn how to secure Kubernetes clusters, avoid common misconfigurations, and choose between managed and self-hosted K8s for your cloud environment.
Learn how to build risk management programs, prioritize security debt, implement incident response plans, and protect sensitive data from social engineering.
CVE-2022-0185 explained: a critical Linux kernel flaw enabling container escape in Kubernetes. Learn how to identify, mitigate, and patch this vulnerability.
Secure your AWS S3 buckets with encryption, access logging, public access blocks, and object lock. Prevent data breaches and meet compliance standards.
Learn why real-time event monitoring and deep container-native protection are essential for securing modern cloud workloads
Connect a cloud account in under 30 minutes. See every finding rooted in identity, asset, and blast radius — with a fix path attached.
Book a Demo