The Prevention-First Cloud Security Manifesto

We are uncovering better ways of securing cloud infrastructure by shifting to prevent incidents from code to cloud. Through this work we have come to value:

Prevention over detection - stop security issues before they reach production

Risk reduction over risk awareness - eliminate threats to reduce the noise

Guardrails over guidelines - automated enforcement avoids a manual task later

Shift-left over shift-blame - security teams ensure control while app teams remain agile

That is, while there is value in the items on the right, we value the items on the left more.

Join the movement, learn more at turbot.com/prevention