The Immediate and Lasting Benefits of TAG Security Assessments
Talkat KubeCon + CloudNativeCon Europe 2025 · on Thursday, 2025-04-03· at 11:00· Platinum Suite | Level 3 | Room 3-4·
summary
TAG Security provides a self-assessment template and a volunteer-led joint review process that check concrete controls, not vague promises. Cubescape runs as a Kubernetes operator with microservices, eBPF node agents and a vulnerability scanner, stores large SBOMs via an aggregated API server, and during assessment discovers the storage-to-API connection lacks mutual TLS — the team flips the Helm-chart flag, ships a secure release, and gains documentation plus a repeatable process and roadmap for periodic reviews.
AI-written summary · about
chapters (6)
- 0:00TAG Security assessments
- 2:29Purpose and structure
- 8:09Cubescape’s self-assessment
- 15:12Self-assessment benefits
- 20:29Long-term security value
- 27:03TAG Security future
related talks
05mA Maintainer’s Tour Of Tag Security And Compliance
36mLevel up Your Security Career with the TAG Security Community
28mA Project Maintainers Guide To TAG Security
24mStaring Into the Abyss With the Security Technical Advisory Group
17mKeynote: TAG Security, You're It!
32mStaring Into the Abyss with the Security Technical Advisory Group
16mSecurity TAG Closing
19mTAG Security Cloud Native Security Whitepapers Overview