Tamnoon / Authors
Zohar Alon.
Founding Chairman
Zohar is Tamnoon's Founding Chairman and the founder of Dome9 (acquired by Check Point). He writes about where CSPM, CNAPP, and cloud remediation are headed next.
LinkedInArticles by Zohar (13)
Terraform Security Scanning for Resilient Cloud Deployments
Security misconfigurations in Infrastructure as Code (IaC) are the primary cause of cloud breaches, not zero-days. Organizations often invest heavily in runtime security, only to find critical vulnera…
Read story
Closing the Cloud Remediation Gap for CISO Peace of Mind
Security tools identify cloud vulnerabilities, but fixing them without breaking production remains a significant hurdle. This gap between detection and successful remediation directly impacts business…
Read story
Cloud Vulnerability Remediation Proactive Strategies
The increasing volume and complexity of cloud vulnerabilities necessitate proactive remediation strategies that go beyond traditional detection-focused approaches. Modern cloud security demands moving…
Read story
Your SaaS Misconfiguration Investigation Playbook for Proactive Cloud Security
SaaS security is now a high priority for many organizations, making proactive misconfiguration investigation crucial. Effectively addressing issues before they become breaches requires a structured ap…
Read story
Fortify Kubernetes Token Security in CI CD Pipelines
Compromised Kubernetes tokens in CI/CD pipelines represent direct pathways to critical production infrastructure. Teams can't afford to overlook the specific threats and remediation strategies around …
Read story
Closing the Cloud Security Remediation Gap
Security tools generate alerts. Remediating them often breaks production. Modern cloud environments create a constant stream of security findings. Tools like Wiz, Orca Security, Palo Alto Cortex Cloud…
Read story
AWS IAM Key Rotation: Hidden Costs of Inaction
Stale AWS IAM access keys are a ticking time bomb in any cloud environment. It sounds simple enough: rotate credentials. Yet, many organizations struggle with this across their AWS accounts. The reali…
Read story
Cloud Security Misconfigurations Demand Faster Remediation
Reducing mean time to remediation (MTTR) for cloud security misconfigurations is an operational imperative. Organizations today face a relentless barrage of security alerts, many of which stem from in…
Read story
Lateral Segmentation Achieving True Zero Trust in Private Clouds
Lateral Segmentation Achieving True Zero Trust in Private Clouds Integrating zero trust principles into private cloud environments isn't just about hardening the perimeter anymore; that ship sailed ag…
Read story
Continuous Threat Exposure Management: From Alerting to Remediation Excellence
Your Cloud Security Tool Found an Issue. Now What? Your CNAPP just flagged a critical IAM misconfiguration with a 9.8 severity score. The ticket is assigned, the clock is ticking, but weeks later, it’…
Read story
Cloud Intrusion Prevention: A CISO's Playbook for Proactive Defense
Move Beyond Detection Theater to Operational Defense Your CNAPP is a firehose of alerts, not solutions. The cloud security market has perfected detection, leaving security teams with thousands of find…
Read story
Fixing Over-Permissive IAM: A Remediation Blueprint
Your Detection Tools are Red But Production Can't Go Down Your CSPM is lit up with critical IAM findings. Wiz, Prisma Cloud, or Orca Security is flagging hundreds of roles with wildcard permissions. Y…
Read story
Google Sheets Data Leakage: Fixing Shorthand Shadow IT
Your most critical data leak isn't in a misconfigured S3 bucket. It's in a Google Sheet shared with 'Anyone with the link' by your finance department. While security teams rightly focus on vulnerabili…
Read story