Find what you’re looking for
Browse everything
181 results in Learn Center
What Is Trust Chain in Cloud Security?
A Trust Chain is the sequence of implicit trust relationships between cloud workloads that attackers exploit for lateral movement. Learn how Communication Governance eliminates it.
What Is The Fork in Cloud Security?
The Fork is the March 2026 cloud security inflection point when detection-based security's core assumption broke down. Learn what happened and what changed.
What Was The Cascade? The Supply Chain Attack That Ended the Detection Era
The Cascade was the March 2026 coordinated supply chain attack that triggered The Fork and the shift to the Containment Era. Learn what happened and what changed.
What is Distributed Cloud Firewall?
A distributed cloud firewall enforces policy at every workload boundary rather than at centralised perimeter gateways. Learn how this eliminates lateral movement and reduces blast radius.
What Is East-West Traffic in Cloud Security?
East-West traffic is communication between workloads inside a cloud environment. Learn why it's your biggest security risk and how to enforce policy on it.
Default Deny Egress: The Foundational Control of the Containment Era
Default-deny egress means no workload can initiate outbound connections unless explicitly permitted by policy. Learn why it's the foundational control of the Containment Era.
What Is a Containment Platform?
A Containment Platform enforces Communication Governance across cloud workloads, ensuring every workload only reaches what it's explicitly permitted to. See how Aviatrix built one.
What Is Contain Detect Eliminate?
Contain-Detect-Eliminate is Aviatrix's Containment Era security model: limit blast radius first, detect second, systematically eliminate exposure. Learn how it works.
What is Communication Governance?
Communication Governance is the enforcement model of Containment Era architecture: every workload communication path is explicitly authorized, workload-identity-verified, and enforced inline.
North-South vs East-West Traffic: Why the Dangerous Traffic Is the One You're Not Watching
North-south traffic flows in and out of your environment. East-west traffic moves between workloads inside it. Learn why east-west is where modern attacks live and how to contain them.
What Are SmartGroups? Identity-Based Cloud Workload Security at Scale
SmartGroups are Aviatrix's identity-based workload grouping for east-west policy enforcement. Learn how SmartGroups implement Communication Governance at scale.
AI Workload Security: Applying Containment Principles to Your Highest-Risk Workloads
AI workloads introduce unique security risks, model poisoning, data exfiltration via inference, and training pipeline attacks. Learn how the Containment Era model secures AI at the workload level.