> For the complete documentation index, see [llms.txt](https://docs.ox.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ox.security/ox-cloud/cloud-security.md).

# Cloud Security

Modern cloud environments contain hundreds or thousands of resources across cloud providers, services, accounts, and Kubernetes environments. As cloud infrastructure grows, it becomes increasingly difficult to identify security risks, maintain compliance, and ensure that resources are configured securely.

Cloud security focuses on protecting cloud resources, services, workloads, and data from misconfigurations, unauthorized access, and exposure to external threats.

Cloud Security Posture Management (CSPM) helps you identify, prioritize, and remediate security risks across your cloud environments. OX extends this visibility into Kubernetes environments through [Kubernetes Security Posture Management (KSPM)](/ox-cloud/cloud-security/kubernetes-security.md), helping you identify and remediate security risks within your clusters and workloads.

OX continuously analyzes connected cloud accounts to detect misconfigurations, compliance violations, and exposed resources that could increase your organization's attack surface.

<figure><img src="/files/XE2m9QVGSBrjP6olNN7O" alt="" width="563"><figcaption></figcaption></figure>

Unlike traditional cloud security tools that focus only on configuration findings, OX correlates cloud security data with the broader application and security context. This helps you understand not only what is misconfigured, but also the potential impact on your environment.

Supported cloud platforms:

* Amazon Web Services (AWS)
* Microsoft Azure
* Google Cloud Platform (GCP)

### What OX cloud security provides

| Capability                                                                       | Description                                                                                                                                     |
| -------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- |
| CSPM                                                                             | Identifies insecure cloud configurations and policy violations across supported cloud providers.                                                |
| Compliance Monitoring                                                            | Evaluates cloud resources against industry security benchmarks and compliance frameworks.                                                       |
| [Cloud Security Dashboard](/ox-cloud/cloud-security/cloud-security-dashboard.md) | Provides a centralized view of cloud security findings, compliance posture, and cloud assets.                                                   |
| [Cloud attack surface](/ox-cloud/cloud-security/reachability.md)                 | <p>Validates whether supported cloud assets are reachable from the internet and whether authentication is required.<br>cloud attack surface</p> |
| [KSPM](/ox-cloud/cloud-security/kubernetes-security.md)                          | Extends cloud security visibility into Kubernetes environments through KSPM.                                                                    |

### Cloud security in OX

Cloud security findings are continuously collected and analyzed from your connected cloud environments.

OX helps you understand:

* Which cloud resources may be misconfigured
* Which assets may be exposed to external threats
* How your environment aligns with security benchmarks
* Which Kubernetes resources require attention


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ox.security/ox-cloud/cloud-security.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.