About this episode

The episode discusses the debate between native cloud security controls and third-party solutions, exploring their effectiveness and market implications.

Guests: Gal Ordo , Co-founder & CPO @ Native Topics: In Episode 186 , we debated 'Native vs. Third-Party' as a binary choice. Native seems to be a third-party vendor whose entire existence depends on the belief that cloud-native controls are superior. Does your platform validate the 'Cloud Provider' side of the debate (that their controls are enough), or does the fact that you exist prove the 'Third-Party' side (that native interfaces aren't enough)? A key argument against native controls is an AWS WAF and a Google Cloud Armor don't behave the same way. If your tool manages native controls across multi-cloud, how do you handle the 'lowest common denominator' problem? Do you dumb down the policy to fit all clouds, or do you expose the unique complexity of each one? GuardDuty and SCC produce similar but meaningfully different results. How do you abstract across that so an analyst or IR team isn't having to dig into the exact meaning of the different JSON fields in their output? We often say native tools are 'good enough' for 80% of use cases but lack the depth of specialized third-party vendors (like a dedicated CNAPP or DLP). By betting your company on orchestrating native…

People in this episode

Host: Anton Chuvakin

Guest: Gal Ordo

Topics covered

• Native Cloud Security
• Third-Party vs Native
• Cloud Provider Controls
• Multi-Cloud Management
• Security Tools Comparison
• Market Trends

Keywords

• cloud security
• native controls
• third-party vendors
• multi-cloud
• security tools
• AWS WAF
• Google Cloud Armor
• GuardDuty
• SCC

Mentioned in this episode

Organizations: AWS, Google Cloud, CSP, CNAPP, DLP

More episodes of Cloud Security Podcast by Google

• EP287: Creating Trust at Global Scale with Local AI: Reken-ing with Shuman Ghosemajumder · July 20, 2026 · 38 min
• EP286 Building an AI-pilled, solo vibe-coded, Clickhouse-based SIEM with Dan Lussier · July 13, 2026 · 27 min
• EP285 Scaling Lessons from Leading the NSA to Defending the World with Morgan Adamski · July 6, 2026 · 20 min
• EP284 Closest Alligator to the Canoe: How Transforming SOC Became P0 for Lloyds Bank · June 29, 2026 · 26 min
• EP283: How Google Cloud CISO Chris Betz Uses LLMs to Defend Billions of Users from Vulnerablities · June 22, 2026 · 29 min
• EP282: Debating Coupled or Decoupled SIEM with Alex Hurtado and Christopher Witter · June 15, 2026 · 49 min

Explore listener stats, chart rankings, contacts and more on the Cloud Security Podcast by Google podcast page.