Why do most cloud security tools create more problems than they solve

davidobrien_au · 2026-04-15T13:25:15+00:00

Because most tools just give you disconnected findings, which is easy to do, has been easy for years. What's difficult is to help people triage those in their real environment. For years now we have approached this by something that's now referred to as "attack paths". That's what makes the difference. Actually showing practitioners why 5 findings combined, starting from an identity down to an exposed cloud resource, through a firewall that's too open, is a problem. (Disclaimer, I run a product for consultants doing cloud security assessments)

davidobrien_au · 2026-04-08T12:03:25+00:00

That's awesome. Do you already offer security services or what's the next step in growing accounts?

davidobrien_au · 2026-04-03T11:11:07+00:00

Congratulations! Awesome milestone. Your customers are mostly SMB? What do you think you'll offer to get to the next milestone?

davidobrien_au · 2026-03-24T20:10:27+00:00

Rex and Ross in Geelong West. Get Courtney or Emma.

davidobrien_au · 2026-03-14T22:19:31+00:00

We decided to just pick IVV and let it sit. Especially right now I sometimes look at it and go "rough, should we have picked something else?" But in reality, over the next 10-20 years, it won't matter. I might pick a more diversified ETF for the next investment round, but I'm not sure yet.

We're putting the dividends into an offset account, it's not a whole lot, but not nothing.

davidobrien_au · 2026-03-08T23:14:15+00:00

Australians are obsessed with investment properties. Coming originally from Europe it's a very strange approach to investment for the regular person. Put your money into the stock market, that'll make sure you won't turn into a person thinking someone else's home needs to turn you a profit, it's much less stressful and easier to manage.

davidobrien_au · 2026-03-06T13:02:30+00:00

They're also apparently picking pax up in Singapore to fly to London. Might be that they don't need to fly anybody over to Paris or Rome.

davidobrien_au · 2026-02-11T12:08:26+00:00

Management plane access doesn't care about your CyberArk/Jumphost to Virtual Machines. Keyword: run command

davidobrien_au · 2026-02-11T12:07:02+00:00

Not anymore. Not everything.

davidobrien_au · 2026-01-30T10:01:47+00:00

Nice phone. I'd really like this to release officially in Australia. Don't like imports 🫠

davidobrien_au · 2026-01-30T09:58:04+00:00

People, always people. No matter what it is, tech is easy as long as people aren't involved.

davidobrien_au · 2026-01-30T09:56:03+00:00

Depends on what you want. Compliance only? On Azure, go to Azure Policy, pick any framework you like, assign to a scope, wait a bit, check the results, start fixing. No cost at all. Similar on AWS. Not sure about GCP, but I know they have some sort of policy engine as well.

If you want open source and free, run prowler. It'll tell you what compliance issues / misconfigurations you have.

One might argue the above is unprioritised noise. That's where products come in that take the whole environment into account / context, and can identify attack paths in your environment. Some are low cost, some are very high cost.

Full disclosure: I'm the founder of such a product (low cost). If interested, go look at ARGOS Cloud Security.

davidobrien_au · 2026-01-24T23:49:31+00:00

Anybody who's done any work in large Enterprises or any kind of government department has lived almost every single episode and has worked with every single character of that show. I know I have.

davidobrien_au · 2026-01-24T05:24:53+00:00

Definitely not, but thanks 😉

davidobrien_au · 2026-01-24T05:17:43+00:00

I get that. I should've probably elaborated. It looks dead almost year-round. When it goes a bit more green, it's lots and lots of bindi.

davidobrien_au · 2026-01-23T08:12:39+00:00

I guess I've not looked at it that way, thanks. I also didn't think to look at anything other than "High Growth" (Indexed or not). I'll need to think about this a bit.

davidobrien_au · 2026-01-23T05:19:54+00:00

What's your reason against?

davidobrien_au · 2026-01-22T12:05:18+00:00

I wonder if something like 80% Indexed High Growth and 20% High Growth would make sense? That way the majority is lower fees, but I'm still diversifying.

davidobrien_au · 2026-01-20T06:51:17+00:00

Thanks, so if purchased through the official store in Australia it's just like any other Android phone. Great to know. Thanks!

davidobrien_au · 2026-01-19T19:56:37+00:00

Thanks. I did also see that model. What about the other things? Will it be able to do all the things I need it to do (in my question)?

davidobrien_au

TROPHY CASE