Data Loss Prevention for AI Coding Agents
AI coding agents can send secrets, PII, and source code to external models. Learn how data loss prevention works for coding agents and where it fits.
Resources
Data Security
Database activity monitoring, data security posture management, data masking, and encryption.
57 resources — 21 blogs · 12 learn · 22 podcasts · 2 use cases
From Endpoint PAM to Cloud-Native JIT: Securing Azure Infrastructure and Databases for a Global Manufacturing Conglomerate
How a global manufacturing conglomerate replaced endpoint PAM with native JIT access, Database Activity Monitoring, and compliance across Azure infrastructure.
AI: Your Next Tool or New Colleague? Next-Gen Security Skills with Priyanka Chatterjee
How security teams should adopt AI in operations, why the industry has shifted from a knowledge economy to a skills economy, and what next-gen practitioners need to get hired.
Beyond the Tools: Bridging Product Security Gaps and Calibrating SDLC with Neelu Tripathy
How to embed security into developer systems rather than bolting on tools, calibrate product security for engineering velocity, and secure agentic development workflows.
15 Top AWS RDS Misconfigurations To Avoid
The 15 most critical AWS RDS misconfigurations (public snapshots, missing encryption, open security groups, and more) with detection and remediation.
PAM for Cloud Infrastructure: Why Traditional PAM Falls Short and What to Do
Traditional PAM tools were built for on-premise infrastructure. This article breaks down exactly where they fall short in cloud environments — and what cloud-native privileged access management looks like in 2026.
DSPM vs DAM: What Is the Difference?
DSPM discovers and classifies sensitive data, while DAM monitors database activity and access. Learn where each fits in a cloud data security program.
What Is LLM Gateway Security?
LLM gateway security controls how applications, employees, and AI agents call large language models, including policy, logging, data protection, and abuse prevention.
What Is Real-Time Data Masking?
Real-time data masking protects sensitive data at access time by hiding or transforming values based on user, role, policy, context, and purpose.
What is Enterprise Cloud Security?
Secure your entire cloud footprint. Address multi-cloud complexity, federated IAM threats, and APTs with an integrated enterprise cloud security framework.
What is Secret Scanning?
Master secret scanning to detect exposed API keys and passwords. Learn 2026 best practices for automated detection, SDLC integration, & credential remediation.
The End of Permanent Access: Next-Generation JIT for Granular Database Security
Eliminate standing privileges with granular JIT access. Implement SQL-level auditing and JEP across hybrid databases to simplify GDPR and HIPAA compliance.
Kubernetes Security Mastery: Ephemeral Environments, Identity, and GenAI with Dinis Cruz
Dinis Cruz explains how to secure ephemeral Kubernetes workloads, why identity is the new perimeter, and how GenAI transforms both attack surfaces and defense.
Database Activity Monitoring
Learn how Database Activity Monitoring provides real-time visibility, detects insider threats, and creates an immutable audit trail for select compliances
How to Prioritize Vulnerabilities Based on Business Risks?
Prioritize vulnerabilities using business risk, asset criticality, and threat intelligence instead of just CVSS. Maximize security with limited resources.
The Secrets of Cloud Security: Navigating Identity, Ephemerality, and the Multi-Cloud Frontier
Discover the secrets of cloud resilience. Learn about the 45:1 machine identity ratio, multi-cloud strategy, and why on-prem habits fail.
The Human Firewall: Designing for Behavior in Modern Security
Cassie Clark explains how behavioral design, choice architecture, and System 1/System 2 thinking build a resilient, no-blame security culture.
Threat Modeling Made Practical: Secure by Design Lessons from Adam Shostack
Adam Shostack explains how to integrate threat modeling into agile workflows, why secure by design matters, and what Star Wars teaches us about security.
Designing Security for GenAI: Guardrails, Shared Responsibility, and Defense in Depth with Shweta Thapa
AWS Security Specialist Shweta Thapa explains how to design security controls for GenAI apps, from input/output guardrails to shared responsibility.
Streamlining Just-in-Time Access: Balancing Security and Developer Workflow Integration
Balance JIT security with developer productivity. Learn how to integrate secure access requests into Slack and Teams without compromising identity trust.
What is Cloud Workload Protection Platform?
Understand what CWPP is, why it matters, and how it secures cloud workloads through visibility, threat detection, and compliance capabilities.
What is HIPAA Compliance? | Patient Privacy & Healthcare Data Security Explained
Learn about HIPAA Compliance, its rules, PHI protection, covered entities, and the steps needed to become compliant with healthcare data standards.
Mastering Network Segmentation in AWS: Security, Simplicity, and the 3 AM Test with Tom Adamski
Tom Adamski shares insights on network segmentation in AWS, from security groups and VPCs to Zero Trust and the importance of simplicity.
Source Code Security Best Practices
Protect your codebase with 10+ source code security best practices covering secure coding, code reviews, static analysis, penetration testing, and DevSecOps.
Privacy by Design: A New Era of Proactive Security
Explore the world of privacy engineering with practical insights on building privacy-by-design systems, data protection, and regulatory compliance.
The Science of Setting Up Security Boundaries
Define effective AWS permission boundaries at scale using the flavored approach to security baselines, SCPs, and IaC-driven boundary management.
Demystifying Identity Access Management (IAM Security)
The New Perimeter, Context-Driven Access, and Combatting Burnout
Principles of Maturity and the Power of Hands-On Learning
Learn how to navigate the cloud security maturity journey. From foundational controls to advanced automation, build a roadmap for your organization.
The Cloud Security Saga
Conquering Complexity, Embracing Least Privilege, and Preparing for AI
The Human Element: Mastering Emotional Intelligence in Cybersecurity Leadership
Shivani Arni, CISO at TransUnion CIBIL, shares how emotional intelligence drives resilient security programs and builds psychological safety.
How to use CSPM to detect and remediate cloud misconfigurations
Learn how CSPM detects and remediates cloud misconfigurations across AWS, Azure, and GCP. Reduce your attack surface with automated posture management.
Codifying Security: The Evolution from Detection to Prevention in Cloud Native DevSecOps
Master DevSecOps by codifying security. Learn to solve the Maker-Checker problem, prioritize via EPSS, and move toward 100% automated cloud-native remediation.
Mastering Incident Response, Digital Forensics, and Threat Intelligence with Gerard Johansen
Learn how to build IR playbooks, preserve digital evidence, leverage cloud-native tools for forensics, and adapt incident response for multi-cloud environments.
Cyber Risk Management, DevSecOps Alignment, and Data Loss Prevention with Chris Hodson
Learn how to align security in DevOps environments, communicate risk to executives, implement cyber risk management strategies, and rethink data loss prevention for the modern enterprise.
Dealing with Social Engineering Attacks: Incident Response, Security Awareness, and Modern SOC Operations with Emily Zakkak
Learn how to build incident response plans for social engineering attacks, why security awareness is everyone's responsibility, and how Open XDR modernizes SOC operations for faster threat detection.
Kubernetes Governance and Policy as Code with Jim Bugwadia
Learn how policy as code solves Kubernetes misconfiguration, secures supply chains with image signing, and why security belongs in platform engineering.
Data Privacy and Governance Fundamentals with Adam Smith
Learn how to build data privacy programs, implement data governance, navigate GDPR and CCPA compliance, and create a privacy-first culture through recognition.
Information Security and Risk Management Fundamentals with Parul Khanna
Learn how to build risk management programs, prioritize security debt, implement incident response plans, and protect sensitive data from social engineering.
Zero Trust Architecture: Identity, Data Protection, and NIST 800-207 with Vincent Romney
Learn how to start the zero trust journey with CIS benchmarks 1 and 2, implement identity-driven policy enforcement using NIST 800-207, and protect sensitive healthcare data with role-based access controls.
Preparing for Cloud Data Breaches: Incident Response, Trust Recovery, and Security Metrics with Nat Shere
Learn how to prepare for data breaches with incident response planning, why transparent breach communication builds more trust than never being hacked, and the two metrics every security team should track.
How to Build Secure AWS S3 Bucket?
Secure your AWS S3 buckets with encryption, access logging, public access blocks, and object lock. Prevent data breaches and meet compliance standards.
A Complete List of AWS S3 Misconfigurations
Complete list of AWS S3 misconfigurations from public access to missing encryption. Learn how to fix each one and meet PCI, HIPAA, and GDPR compliance.
A Big List Of Popular Data Breaches and What Can Your CloudOps Team Learn From Them
Explore major data breaches at Yahoo, LinkedIn, Adobe, and more. Learn what went wrong and how your CloudOps team can prevent similar incidents.
Cybersecurity For Every User
Learn essential cybersecurity practices every user should know, from strong passwords and phishing prevention to device security and data backup strategies.
Top 6 AWS IAM Misconfigurations To Avoid in 2022
73% of companies have AWS IAM misconfigurations. Avoid these top 6 mistakes including root access keys, missing MFA, and certificate rotation issues.
AWS IAM Permission Boundary and Why You Shouldn't Ignore It
Learn what AWS IAM Permission Boundary is, how it limits delegated admin access, and why it matters for preventing privilege escalation and data breaches.
A Practical Guide To Achieving HIPAA Compliance In AWS
Practical steps to achieve HIPAA compliance in AWS using encryption, CloudWatch, CloudTrail, and IAM. Includes a final checklist for healthcare organizations.
What is Green Cloud Computing?
Learn what green cloud computing is and how energy-efficient data centers, remote work, and cloud migration can cut your carbon footprint by up to 87%.
What is GDPR Compliance?
Understand GDPR compliance: what it covers, who it affects, the 7 key principles, controller vs. processor roles, and penalties up to 4% of revenue.
Why understanding IAM (Identity and Access Management) Is Most Important For Better Cybersecurity
Understand why IAM is critical for cybersecurity. Learn about insider threats, access management, and how IAM prevents 80% of credential-based breaches.
A Guide About Priorities For Chief Information Security Officer (CISO)
Explore CISO priorities including identity management, zero trust, DevSecOps, IoT security, and how to lead security strategy during uncertain times.
AWS Networking Fundamentals Crash Course For A Busy Developer
Learn AWS networking fundamentals: VPC, subnets, IP addressing, route tables, internet gateways, security groups, NACLs, and flow logs explained for developers.
As A CIO Do You Have A Plan If A Data Breach Occurs At Your Organization?
A CIO's guide to handling data breaches: understand your role in security, build an incident response plan, and protect your organization from costly attacks.
How to respond to a Data or Security Breach?
How to respond to a data breach: a step-by-step incident response plan covering containment, communication, forensics, and recovery for your organization.
A quick introduction to PCI Compliance and Key Aspects To Know
What is PCI DSS compliance, why it matters for online payments, and how to achieve it in AWS. Protect cardholder data and avoid costly penalties.
Learn
What Is Pcidss Compliance
Learn about PCI DSS compliance requirements to protect cardholder data, prevent fraud, and maintain customer trust in payment security.
Learn
What Is Secure Software Development Lifecycle
Understanding how security requirements are integrated with functional requirements to identify threats and compliance needs.
Ready to see your graph?
Connect a cloud account in under 30 minutes. See every finding rooted in identity, asset, and blast radius — with a fix path attached.
Book a Demo