Technical GuideCloud6AI
Cloud6AI Guide to Securing AI Agents
Cloud6AI guidance for reviewing AI agents, tool permissions, retrieval boundaries, evaluation gaps, and runtime monitoring.
Cloud6AIagentic AIAI securitytool permissions
Resources
Security guidance you can put to work.
Browse Cloud6AI guides and checklists, plus links to standards and research from their original publishers. Filter by topic or search for a specific challenge.
Cloud Security Frameworks
Public frameworks and original Cloud6AI guidance for cloud posture, governance, and control design.
AI and Agentic AI Security
Guidance for AI risk management, generative AI controls, and agentic system security.
Secure Software Supply Chain
Standards and guidance for CI/CD, artifacts, dependencies, provenance, and secure development.
Vulnerability and Exposure Management
Resources for prioritizing exploitable risk, exposure, remediation ownership, and operational reporting.
Identity and Zero Trust
Guidance for access governance, privileged access, identity controls, and staged Zero Trust improvements.
Security Observability
Resources for telemetry, monitoring, traces, logs, and security operations observability.
28 resources shown
ChecklistCloud6AI
Cloud6AI Cloud Security Readiness Checklist
Cloud6AI checklist for reviewing cloud identity, exposure, workload configuration, logging, governance, and remediation ownership.
Cloud6AIchecklistcloud securityreadiness
Technical GuideCloud6AI
Cloud6AI Vulnerability Remediation Playbook
Cloud6AI playbook for turning vulnerability findings into exposure-aware, owner-routed remediation work.
Cloud6AIvulnerability managementremediationexposure
FrameworkMITRE
MITRE ATT&CK
Knowledge base of adversary tactics and techniques based on real-world observations.
MITREATT&CKtacticstechniquesdetection
Technical GuideOpenTelemetry
OpenTelemetry Security Documentation
OpenTelemetry documentation covering security considerations for telemetry collection, transport, and deployment.
OpenTelemetrysecurity observabilitytelemetryopen standards
Technical GuideKubernetes
Kubernetes Pod Security Standards
Kubernetes project guidance defining baseline and restricted pod security profiles.
Kubernetescontainer securityworkload securitypod security
ToolCNCF
Falco Runtime Security
CNCF Falco project documentation for cloud-native runtime threat detection.
FalcoCNCFruntime securityKubernetes
DatasetNIST
NIST National Vulnerability Database
NIST vulnerability database that enriches CVE records with scoring, references, and searchable vulnerability data.
NISTNVDCVEvulnerability management
Industry StandardOWASP
OWASP Top 10 Web Application Security Risks
OWASP awareness document for critical web application security risks.
OWASPapplication securityweb security
FrameworkOWASP
OWASP Gen AI Security Project
OWASP project focused on security risks and guidance for generative AI and LLM applications.
OWASPgenerative AILLMAI security
Industry StandardOWASP
OWASP Top 10 for Large Language Model Applications
OWASP guidance on common security risks in LLM applications, including prompt injection, data exposure, and unsafe integrations.
OWASPLLMAI securityprompt injection
Industry StandardNIST
NIST Post-Quantum Cryptography Standards
NIST's finalized post-quantum cryptography standards for key establishment and digital signatures.
NISTpost-quantum cryptographycryptographycloud modernization
FrameworkNIST
NIST Generative AI Profile
NIST profile for identifying and managing risks that are distinctive to generative AI systems.
NISTgenerative AIAI RMFagentic AI
FrameworkNIST
NIST Cybersecurity Framework 2.0
A NIST framework for organizing governance, identification, protection, detection, response, and recovery practices.
NISTcybersecurity frameworkgovernancerisk management
FrameworkMITRE
MITRE ATLAS
MITRE knowledge base focused on adversarial threats to AI-enabled systems.
MITREATLASAI securitymachine learning
FrameworkOpenSSF
SLSA: Supply-chain Levels for Software Artifacts
OpenSSF framework for improving integrity across build, provenance, and software artifact supply chains.
OpenSSFSLSAsoftware supply chainprovenance
White PaperCNCF
CNCF Cloud Native Security Whitepaper
CNCF whitepaper on cloud-native security concepts, lifecycle practices, and ecosystem considerations.
CNCFKubernetescontainer securitycloud native
ToolOpenSSF
OpenSSF Scorecard
OpenSSF tool for assessing open source project security health through automated checks.
OpenSSFopen source securitydependenciessoftware supply chain
Industry StandardMITRE
MITRE CWE Top 25 Most Dangerous Software Weaknesses
MITRE list of dangerous software weaknesses that can guide application security education and prioritization.
MITRECWEapplication securitysecure coding
ToolOpenSSF
Sigstore Software Signing
Open source project for signing, verifying, and protecting software artifacts in supply chains.
SigstoreOpenSSFsoftware signingartifact integrity
Industry StandardOWASP
OWASP API Security Top 10
OWASP project identifying common and high-impact API security risks.
OWASPAPI securityapplication security
Technical GuideCISA
CISA Secure by Design
CISA guidance encouraging technology providers and software teams to make security a core product design responsibility.
CISAsecure by designsecure engineering
FrameworkCISA
CISA Zero Trust Maturity Model 2.0
CISA maturity model for organizing Zero Trust improvements across identity, devices, networks, applications, data, and visibility.
CISAZero Trustidentity securitymaturity model
FrameworkCISA
CISA Cross-Sector Cybersecurity Performance Goals
CISA baseline cybersecurity goals intended to help organizations prioritize high-value security practices.
CISAcybersecurity goalsgovernancerisk management
FrameworkNIST
NIST AI Risk Management Framework 1.0
Voluntary NIST framework for managing risks associated with AI systems across design, development, use, and evaluation.
NISTAI riskAI governancetrustworthy AI
FrameworkNIST
NIST Secure Software Development Framework
NIST guidance for reducing software vulnerabilities through secure development practices.
NISTSSDFsecure developmentDevSecOps
DatasetCISA
CISA Known Exploited Vulnerabilities Catalog
CISA catalog of vulnerabilities known to be exploited in the wild and useful for risk-based remediation prioritization.
CISAKEVvulnerability managementexploitation
FrameworkOWASP
OWASP Software Assurance Maturity Model
OWASP maturity model for analyzing and improving software security programs.
OWASPSAMMsoftware assurancematurity model