The Journal: notes on choosing cloud security tools
- Defender for Cloud's Free Posture Tier Goes Opt-In on 27 October 2026
From 27 October 2026, Microsoft's free Foundational CSPM is no longer on by default for new Azure subscriptions. Who is affected, what stays the same and what to check.
PricingCompliance
- Oracle, Alibaba and Tencent Cloud: Which Cloud Security Vendors Name Them
Every vendor here names AWS, Azure and Google Cloud. 7 name Oracle Cloud, 4 name Alibaba or Tencent Cloud. What vendors' own pages say.
Coverage
- Already Running CrowdStrike, SentinelOne or Microsoft Defender? What They Offer for Cloud
If an endpoint agent already runs on your servers, its vendor may extend it to cloud workloads. What CrowdStrike, SentinelOne and Microsoft describe, and what still comes from elsewhere.
AgentsCoverage
- What Cloud Security Vendors Publish About Price: Nine Vendors Checked
One of nine cloud security vendors publishes list prices on its own site; five have public AWS Marketplace prices; two quote only through sales. What each price covers.
Pricing
- Three Example Teams Run Through the Cloud Security Finder
A small Azure team, a Kubernetes team on open-source tools and a four-cloud enterprise with no agents: how the finder's published rules handle each, step by step.
Method
- Kubernetes Security: Where Falco, Trivy and the Commercial Platforms Fit
Falco detects runtime threats and Trivy scans images and code; both are open source. Where they stop, and how nine commercial platforms describe Kubernetes runtime coverage.
CoverageAgents
- AI Agents Inside Cloud Security Products: What Five Vendors Announced in 2026
From Aqua Compass to Sysdig Secure AI and Palo Alto Networks' Console deal: dated 2026 announcements that put AI agents and AI-built apps into cloud security products.
Announcements
- What the Cloud Security Finder Cannot Tell You: Five Checks to Run Yourself
The finder narrows categories and vendors from public facts. Five things it cannot know, and how to test them in a trial: coverage, noise, routing, sensor cost and contract scope.
Method