Cloud Security
Serverless Security: How to Secure Lambda and Cloud Functions
The serverless attack surface — event injection, over-permissive roles, secrets and dependencies — plus a security checklist for Lambda and Cloud Functions.
Category
Cloud Security
Every product here is evaluated against the same criteria — pricing, support, security, and real-world usability — with pricing re-checked monthly.
We're still building out scored reviews in "Cloud Security."
In the meantime, here's what we've already published on the topic.
Cloud Security
CSPM Explained: Automating Cloud Security Posture and Compliance
What cloud security posture management (CSPM) does, the misconfigurations it catches, CSPM vs. CNAPP, open-source and native options, and how to roll it out.
Cloud Security
Kubernetes Hardening Guide: Securing Clusters Beyond the Defaults
A practical Kubernetes hardening checklist from NSA/CISA and CIS guidance: RBAC, Pod Security Standards, network policies, secrets, images and audit logs.
Cloud Security
The Cloud Shared Responsibility Model, Explained Clearly
What cloud providers secure and what you must secure across IaaS, PaaS and SaaS, the gaps that cause breaches, and a governance checklist for each model.
Cloud Security
Scout Suite Review 2026: Useful Multi-Cloud Audits, Slower Development
Scout Suite reviewed: NCC Group's open-source multi-cloud auditor, its HTML report, supported clouds, how to run it, and why Prowler may now be better.
Cloud Security
Prowler Review 2026: The Most Active Open-Source Cloud Security Scanner
Prowler reviewed: hundreds of security checks for AWS, Azure, GCP, Kubernetes and Microsoft 365, compliance frameworks, Prowler App and Cloud, and how to start.