1. Home
  2. Learn

Learn

Cloud security, explained plainly

Short guides to the ideas behind cloud posture work: what the terms mean, how the practices work, and where they tend to break down. Each guide teaches the topic first, then shows how ACSE approaches it.

Three layers of one systemYour cloud estate on top, the risk graph that connects its findings in the middle, and the signed evidence chain underneath.DETECT · YOUR ESTATEaws · google cloud · azure · k8sFIX · THE PATH THAT MATTERSrisk graph · attack pathsPROVE · THE RECORDsigned · in your cloud
01

Learn the practice, not a product

Each guide starts with the topic itself, in terms you can use with any tool.

02

Share one vocabulary

The glossary gives security, engineering, risk and audit the same words for the same things.

03

See where it breaks

Every guide names the common failure points, so you can check your own program against them.

A reading path

From finding to proof

If you are new to the area, the guides read well in this order. Each one picks up where the last stops.

  1. Find what is misconfiguredStart with CSPM: how posture checks read your cloud and report what fails.
  2. See what matters mostAttack path analysis shows which findings combine into real exposure.
  3. Fix it safelyAutomated remediation and policy as code cover changing the cloud without breaking it.
  4. Prove it was doneCompliance evidence covers showing an auditor the fix was authorized, tested and reversible.
Compliance that keeps itself currentA loop runs around the estate: detect, fix, prove, again, on every scan and every change.DETECTFIXPROVEevery scan · every change · every day

Questions

What people ask us

Are these guides specific to ACSE?

The first half of each guide is vendor-neutral and applies whatever tools you use. The second half shows how ACSE approaches the topic.

Who are the guides for?

Security and platform engineers, risk owners and auditors who want a clear grounding in cloud posture work, or a shared vocabulary across teams.

Where can I see the product itself?

Start with the platform overview, or talk to us for a walk-through.

Talk to us

See ACSE on your cloud.

Tell us what you run and what your auditors ask for. We’ll show you the loop end to end: a real finding, a fix as code, an approval with MFA and the sealed record.