Skip to content
Product
Icon-Platform
Platform

Explore the core capabilities of the Cado Platform.

 Icon-Integrations
Integrations

Learn how the Cado platform integrates into your broader ecosystem.
Solutions
Use Cases
Icon-Cross-Cloud Investigations
Cross Cloud Investigations

Respond to incidents identified in AWS, Azure, and GCP in a single pane of glass.

 Icon-Container-Investigations
Container & K8s Investigations

Perform container investigations in EKS, AKS, GKE, and Kubernetes.

 Icon-Endpoint-Triage
SOC Triage

Automate endpoint triage for immediate insights and quick escalation.

 Icon-BEC-Compromise
SaaS Investigations

Analyze critical SaaS logs to investigate Business Email Compromise.

 Icon-Incident-Containment
Cloud Detection & Response (CDR)

Marry threat detection with forensic context to expedite response.

Icon-Evidence-Preservation
Evidence Preservation

Capture data immediately and preserve it before it disappears.
Cado For
SecOps
Incident Responders
Forensic Teams
MSSPs
Partners
Government
Resources
Icon-Report
All Resources

Explore Cado Security's entire content library.

 Icon-Blog
Blog

Timely commentary from the Cado Security team.

 Icon-Playbook
Playbooks

Best practices for investigating and responding to threats.

Icon-Cheat-Sheet
Cheat Sheets

Quick tips for investigating and responding to incidents.

 Icon-News
News

The latest Cado company announcements, press, and more.

 Icon-Community
Community

Access to our free edition of the Cado platform.

 Icon-documentation
Documentation

Technical documentation on how to best leverage the Cado platform.

 White Paper 80x80
Wiki

Everything you need to know about cloud security and cloud forensics.

Company
Icon-About
About

Learn more about the Cado Security mission, vision, and team.

 Icon-Careers
Careers

Check out current career opportunities at Cado Security.

 Icon-Incidident-Response Preparedness-II
Cado Security Labs

The research and development division at Cado Security
Get a Demo
    Get a Demo
      curve design on left

      Cloud DFIR

      blog post featured image
      blog icon Featured Post |

      Darktrace's Proposed Acquisition of Cado Security

      January 22, 2025

      We are excited to share the news that Darktrace has announced its proposed acquisition of Cado Security. This milestone marks a new chapter...

      Continue Reading
      Cloud Investigations icon
      blog icon Cloud Investigations
      Navigating the Cloud: The Art of Digital Forensics and Incident Response in Google Cloud Platform (GCP)
      November 28, 2023

      Organizations of all sizes are making a monumental shift towards cloud computing to improve efficiency, scalability, and...

      Continue Reading
      Cloud Investigations icon
      blog icon Cloud Investigations
      How we Sped up Acquiring Forensic Data From Managed Kubernetes Services by 97% by Rebuilding the SDK
      May 25, 2023

      In June 2022, we accomplished a major breakthrough by integrating container level support for AKS and EKS into the Cado...

      Continue Reading
      Cloud Investigations icon
      blog icon Cloud Investigations
      Is Cloud Forensics just Log Analysis? Kind Of.
      May 23, 2023

      Is Cloud Forensics just Log Analysis? The cloud sure does have a lot of logs. There are IAM logs, application logs,...

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      Fallout from Log4Shell-related Vietnamese Cryptocurrency Exchange Attack: KYC Data for Sale on Dark Web
      January 20, 2022

      Introduction Since its discovery at the end of 2021, Log4Shell - a zero-day vulnerability affecting Apache’s Log4j logging...

      Continue Reading
      Expert Opinion icon
      blog icon Expert Opinion
      Our Take: Four Cloud Security Predictions for 2022
      January 6, 2022

      2021 was far from ordinary. Cybersecurity remained front and center after numerous high-profile breaches and vulnerabilities...

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      The Continued Evolution of Abcbot
      December 21, 2021

      A new version of a malicious shell script targeting insecure cloud instances running under Cloud Service Providers such as...

      Continue Reading