[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:cloud-security-posture":3},{"control":4,"products":25,"stories":66,"lessons":110,"related":135,"compare":156},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.","Continuous checks of cloud accounts in AWS, Azure and Google Cloud against secure settings, plus a view of which workloads are exposed, vulnerable and reachable from the internet.","Cloud breaches are rarely clever: an open storage bucket, an exposed database, an over-privileged key. Posture management finds these within minutes of creation and ranks them by real exposure, which matters because cloud teams change settings many times a day.",[11,12,13,14],"Which cloud providers and services does it cover?","Does it show attack paths, for example an exposed machine with a role that reaches sensitive data?","Can findings go straight into the owning team's backlog?","Is it agentless, and what access does it need to our accounts?","Risk: data exposure through cloud misconfiguration. Control: continuous cloud posture monitoring, with findings routed to owners. Owner: cloud platform lead. Measure: critical misconfigurations open longer than 7 days.",[17,18,19,20],"NIS2 Art. 21(2)(e): security in acquisition, development and maintenance","DORA Art. 9: protection and prevention","CIS Control 4: secure configuration","ISO\u002FIEC 27001:2022 A.5.23 and A.8.9: cloud services and configuration management",{"name":22,"slug":23},"Configuration Management","configuration-management","2026-10-16T12:48:09.89199+00:00",[26,34,42,50,58],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"total":67,"last_days":68,"recent":69},359,114,[70,75,80,85,90,95,100,105],{"slug":71,"title":72,"published_at":73,"brief":74},"cert-in-warns-ai-agents-accessed-sensitive-data-at-indian-organizations-during-t-9e713c","CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing","2026-10-16T06:53:09+00:00","AI agents accessed sensitive data at Indian organizations during testing, CERT-In reports.",{"slug":76,"title":77,"published_at":78,"brief":79},"vibetech-database-exposes-13-7m-records-including-at-t-and-fbi-data-f35a85","Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data","2026-10-15T15:48:52+00:00","Vibetech database exposed 13.7M records from previous breaches, including AT&T and FBI data.",{"slug":81,"title":82,"published_at":83,"brief":84},"bvwg-w292-2301903-1-0b1465","BVwG - W292 2301903-1","2026-10-14T17:59:00+00:00","Austrian court rules telco violated GDPR by failing to prevent identity fraud during contract conclusion.",{"slug":86,"title":87,"published_at":88,"brief":89},"garante-per-la-protezione-dei-dati-personali-italy-710-2026-1db143","Garante per la protezione dei dati personali (Italy) - 710\u002F2026","2026-10-14T08:11:18+00:00","Italy's DPA fines IQVIA €7M for GDPR violations after patient data breach.",{"slug":91,"title":92,"published_at":93,"brief":94},"tietosuojavaltuutetun-toimisto-finland-tsv-303-2022-ece029","Tietosuojavaltuutetun toimisto (Finland) - TSV\u002F303\u002F2022","2026-10-14T06:55:58+00:00","Finland DPA fines healthcare provider €33,000 for unlawful tracking pixel disclosure to Google, Meta, Microsoft",{"slug":96,"title":97,"published_at":98,"brief":99},"xandr-fined-a-record-8-6-million-for-relaying-grindr-data-revealing-sexual-orien-88ba1d","Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation","2026-10-13T13:12:32+00:00","Xandr fined €8.6M for illegally relaying Grindr users' sensitive data.",{"slug":101,"title":102,"published_at":103,"brief":104},"datatilsynet-norway-20-03541-37-b824a4","Datatilsynet (Norway) - 20\u002F03541-37","2026-10-13T11:22:22+00:00","Norway's DPA fines Xandr €8.5M for unlawful processing of Grindr user data.",{"slug":106,"title":107,"published_at":108,"brief":109},"norway-fines-microsoft-ad-firm-9-6-million-over-grindr-data-sharing-1507a8","Norway fines Microsoft ad firm $9.6 million over Grindr data sharing","2026-10-12T20:13:52+00:00","Norway fines Microsoft ad firm Xandr $9.6M for unlawful Grindr user data sharing.",[111,115,119,123,127,131],{"slug":112,"title":113,"published_at":114},"ai-agents-accessed-live-sensitive-data-during-testing-due-to-exposed-credentials-and-excessive-permi","AI Agents Accessed Live Sensitive Data During Testing Due to Exposed Credentials and Excessive Permissions","2026-10-16T08:20:59.754+00:00",{"slug":116,"title":117,"published_at":118},"vibetech-exposes-137m-records-in-unsecured-database","Vibetech Exposes 13.7M Records in Unsecured Database","2026-10-15T16:20:19.435+00:00",{"slug":120,"title":121,"published_at":122},"telco-found-liable-for-gdpr-breach-after-identity-fraud-enabled-by-weak-verification","Telco Found Liable for GDPR Breach After Identity Fraud Enabled by Weak Verification","2026-10-14T18:20:33.817+00:00",{"slug":124,"title":125,"published_at":126},"telco-fined-for-failing-to-verify-identities-enabling-gdpr-violating-fraud","Telco Fined for Failing to Verify Identities, Enabling GDPR-Violating Fraud","2026-10-14T18:20:19.96+00:00",{"slug":128,"title":129,"published_at":130},"iqvia-fined-7m-by-italys-dpa-for-gdpr-violations-exposing-3780-patients-health-data","IQVIA Fined €7M by Italy's DPA for GDPR Violations Exposing 3,780 Patients' Health Data","2026-10-14T10:20:50.218+00:00",{"slug":132,"title":133,"published_at":134},"healthcare-provider-fined-33k-for-leaking-therapy-data-to-google-meta-microsoft-via-tracking-pixels","Healthcare Provider Fined €33K for Leaking Therapy Data to Google, Meta & Microsoft via Tracking Pixels","2026-10-14T08:20:59.917+00:00",[136,140,144,148,152],{"slug":137,"name":138,"problem":139},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":141,"name":142,"problem":143},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",{"slug":145,"name":146,"problem":147},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":149,"name":150,"problem":151},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"slug":153,"name":154,"problem":155},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.",{"wiz\u002Fwiz-cloud":157,"orca-security\u002Forca-cloud-security-platform":175,"crowdstrike\u002Ffalcon-cloud-security":186,"palo-alto-networks\u002Fcortex-cloud":203,"microsoft\u002Fdefender-for-cloud":220},{"hq_country":158,"also_provides":159,"reviews":160,"affected":173,"reported":174},"US",[],[161,164,167,170],{"label":162,"url":163},"PeerSpot: Wiz user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fwiz-reviews",{"label":165,"url":166},"Gartner Peer Insights: Wiz CNAPP user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fwiz-703120040",{"label":168,"url":169},"CSO Online: CNAPP buyer's guide: Top cloud-native app protection platforms compared (2025)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F573629\u002Fcnapp-buyers-guide-top-tools-compared.html",{"label":171,"url":172},"TechTarget: What the $32B Google-Wiz deal says about cloud-native security (2025)","https:\u002F\u002Fwww.techtarget.com\u002Fcybersecurity\u002Fopinion\u002FWhat-the-32B-Google-Wiz-deal-says-about-cloud-native-security",0,14,{"hq_country":176,"also_provides":177,"reviews":178,"affected":173,"reported":173},null,[],[179,182,185],{"label":180,"url":181},"Gartner Peer Insights: Orca Security user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Forca-security-1910019033",{"label":183,"url":184},"PeerSpot: Orca Security user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Forca-security-reviews",{"label":168,"url":169},{"hq_country":158,"also_provides":187,"reviews":188,"affected":201,"reported":202},[],[189,192,195,198],{"label":190,"url":191},"SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"label":193,"url":194},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"label":196,"url":197},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"label":199,"url":200},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",4,15,{"hq_country":158,"also_provides":204,"reviews":205,"affected":218,"reported":219},[],[206,209,212,215],{"label":207,"url":208},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":210,"url":211},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":213,"url":214},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"label":216,"url":217},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",9,32,{"hq_country":158,"also_provides":221,"reviews":222,"affected":235,"reported":236},[],[223,226,229,232],{"label":224,"url":225},"AV-TEST: business results for Microsoft Defender","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fmicrosoft\u002F",{"label":227,"url":228},"ITPro: Microsoft Defender for Business review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fcloud\u002Fcloud-security\u002Fmicrosoft-defender-for-business-review-feature-filled-enterprise-security-for-small-businesses",{"label":230,"url":231},"PeerSpot: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmicrosoft-defender-for-endpoint-reviews",{"label":233,"url":234},"Gartner Peer Insights: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fmicrosoft-defender-for-endpoint",244,105]