Cloud Security Podcast by Google · 2026-05-25 · 29 min
Guests: Gal Ordo , Co-founder & CPO @ Native Topics: In Episode 186 , we debated 'Native vs. Third-Party' as a binary choice. Native seems to be a third-party vendor whose entire existence depends on the belief that cloud-native controls are superior. Does your platform validate the 'Cloud Provider' side of the debate (that their controls are enough), or does the fact that you exist prove the 'Third-Party' side (that native interfaces aren't enough)? A key argument against native controls is an AWS WAF and a Google Cloud Armor don't behave the same way. If your tool manages native controls across multi-cloud, how do you handle the 'lowest common denominator' problem? Do you dumb down the policy to fit all clouds, or do you expose the unique complexity of each one? GuardDuty and SCC produce similar but meaningfully different results. How do you abstract across that so an analyst or IR team isn't having to dig into the exact meaning of the different JSON fields in their output? We often say native tools are 'good enough' for 80% of use cases but lack the depth of specialized third-party vendors (like a dedicated CNAPP or DLP).
EP284 Closest Alligator to the Canoe: How Transforming SOC Became P0 for Lloyds Bank85 / 100EP283: How Google Cloud CISO Chris Betz Uses LLMs to Defend Billions of Users from VulnerablitiesEP282: Debating Coupled or Decoupled SIEM with Alex Hurtado and Christopher WitterEP281: Deceiving Adversaries at Scale with Kevin ConleyEP280 Hyperscaling Cloud Security: Wiz Joins the Cloud Security Podcast by Google