Resources
Threat intelligence, security research, and practitioner insights from the Cloud Cape team.
Cloud SIEM vs. On-Premises: What the Operating Model Actually Changes
Whether your SIEM runs in the cloud or in your own data center is the least interesting question. What matters is who operates it, how the licence scales and whether anyone actually answers the alerts.
Co-Managed SIEM: Who Does What, and What Belongs in the Contract
"Co-managed" describes a division of labour and almost nobody writes that division down. Who owns the licence, who writes the detection rules, how an alert reaches you, and what you have to deliver yourself.
Which Log Sources Does a SIEM Actually Need?
The reflex is: collect everything first, filter later. The result is a bill that grows with log volume while detection quality does not. The sources that actually count.
SIEM, SOC, MDR: Who Does What, and What You Actually Need
SIEM is a technology. SOC is a function. MDR is a delivery model. Comparing the three as alternatives is like comparing an engine, a garage and a lease agreement.
Zscaler Internet Access & Microsoft 365: 5 Benefits of the Integration
Zscaler Internet Access is the Secure Web Gateway of the Zero Trust Exchange and pairing it with Microsoft 365 is the foundation of a modern SSE architecture. Five benefits from the field.
Crowdsourced Ethical Hacking: Bug Bounty vs. Dedicated Penetration Testing
Bug bounty platforms promise the swarm intelligence of thousands of hackers. Where that holds up and where a dedicated red team with context and repeatability wins.
S3 Bucket Security: Best Practices Against Cloud Storage Misconfigurations
Open cloud storage buckets are among the most common and most damaging data leaks. Five principles to prevent misconfigurations instead of cleaning up after them.
What Is a Red Team? Realistic Attacks Instead of Checklist Security
A red team doesn't measure whether your controls exist. It measures whether they survive a real attack. What separates a red team operation from a pentest, and when it's worth it.
Breach and Attack Simulation (BAS): Test Continuously Instead of Hoping Once a Year
You invest in security tools, but do they hold up against a real attack? Breach and Attack Simulation tests your controls continuously and automatically, instead of hoping once a year.
STACKIT: The European Cloud Alternative From Heilbronn
Data sovereignty instead of US hyperscaler dependence: what STACKIT from the Schwarz Group delivers, where its strengths lie and which companies should take a closer look.
Security in Azure Kubernetes Service (AKS): What Actually Matters
AKS takes the control plane off your hands, but not the job of securing the cluster. The levers that actually decide container security in Azure, and the defaults that stand in the way.
Cloud Patch Management: How Automated Patching Raises Your IT Security
Unpatched vulnerabilities are one of the most common causes of security incidents and one of the most avoidable. How cloud-based patch management solves the problem automatically, and what you should actually prioritise by.
How Often Should Companies Conduct Penetration Tests?
"Once a year" is a rule of thumb, not a strategy. How to build a pentest programme that matches your company's risk, compliance and pace of change.
Security and Compliance in Microsoft 365: What Microsoft Protects, and What You Must Do Yourself
Microsoft secures the platform. You secure your data. Which protection and compliance tools Microsoft 365 provides, where the default configuration leaves gaps, and why MFA alone no longer stops modern attacks.
AWS vs. Azure: Comparing the Two Major Cloud Providers
Two providers, nearly half the IaaS market. AWS and Azure compared across six criteria and why the right choice depends less on the winner than on your requirements.
What Is a Managed Public Cloud? When Experts Run Your Cloud
The hyperscalers deliver infrastructure, not operations. What a managed public cloud delivers, where the responsibility boundary actually runs, and how to recognise a good partner.
Penetration Testing in the Public Cloud: Shared Responsibility, Rules and Limits
In the cloud the infrastructure isn't yours, but your configuration is. What you may test in AWS, Azure and GCP, where the limits are, and why cloud pentests follow their own rules.
Vulnerability Scan: What It Delivers, and When You Need a Pentest
Scan, assessment, pentest, management: four terms constantly confused, often deliberately. What a vulnerability scan really delivers, what it systematically misses, and how you should prioritise the results.
How Much Does a Penetration Test Cost? Day Rates, Cost Factors and Realistic Ranges
There's no flat price, but there are understandable factors. What makes a pentest expensive or cheap, what effort is realistic per test type, what should be included in the price, and how to spot a mislabelled offering.