Building a Third Party Platform for Cloud Security

Where do you spend more efforts, on detection of pre-fail issues (like configuration errors) or post-fail issues (like incidents)?

How do you prioritize the preventative and detective controls in your platform?

When talking to CISOs, how do you explain that cloud threat detection is different from the on-premise type?

In your opinion, are agents dead in the cloud?

Do you think your customers care more about cloud-specific threats or traditional threats against cloud assets?

How do you think about the tradeoff for security teams between using cloud native controls vs a 3rd party vendor like, say, you?