Hardening Library

Security research, tutorials, and product updates from the Retrievy team

Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.

Filters: #compliance × Clear all
4 articles match
of 34 total
Cloud Security Posture Management. Audit Automation Is the Easy Part
Articles
5 min read

Cloud Security Posture Management. Audit Automation Is the Easy Part

Cloud security posture management audit automation has gotten good at scanning. The harder part is what happens to a finding after the scan. That is where most security teams still lose ground, and where the next generation of tooling has to earn its keep.

N
Ney Gelbcke Junior
Read Now
FortiGate Firewall Compliance Audit Tool: Beyond CIS with Policy X-Ray
Articles
5 min read

FortiGate Firewall Compliance Audit Tool: Beyond CIS with Policy X-Ray

A FortiGate firewall compliance audit tool will tell you whether you configured the box the way CIS and NIST recommend. It will not tell you whether the rule that looks fully inspected is actually inspecting anything. That second question is where most real risk hides.

N
Ney Gelbcke Junior
Read Now
Active Directory Security Audit Tool: From Configured to Applied
Articles
5 min read

Active Directory Security Audit Tool: From Configured to Applied

An Active Directory security audit tool can prove a GPO exists. It cannot, on its own, prove the policy is being applied to the machines that need it. That gap is where most domains quietly stop being defensible, regardless of how clean the audit looks.

N
Ney Gelbcke Junior
Read Now

Cookie Preferences

We use essential cookies to make our site work, including privacy-first, cookieless analytics that never collect personal data. With your consent, we may also use non-essential marketing cookies. See our Cookie Policy.