[ PLATFORM // ORACLE_CLOUD ]
Security for Oracle Cloud.
Compartment by compartment.
Core coverage for IAM, networking, Object Storage, and Cloud Guard in OCI tenancies — ideal for enterprises standardizing on Oracle stack.
80+
Compartments
Synced
Cloud Guard
Core
Coverage tier
Compartment: prod/workloads
What we assess
in Oracle Cloud.
Platform-native domains — not a generic cloud checklist pasted from another provider.
IAM policies
Verbosity, cross-tenancy, API keys age.
Cloud Guard
Problems, targets, responder recipes (read-only).
Networking
Security lists vs NSGs, ingress 0.0.0.0/0.
Object Storage
Public buckets, pre-authenticated requests.
Compute
Shielded instances, metadata service exposure.
Logging
Audit vs default log groups retention.
Vault
Secrets rotation and endpoint policies.
Database
Autonomous DB network access lists.
Onboarding preview
from checklist.
Steps align with NNSEC_Onboarding_Checklist — full runbook generates after discovery wizard.
- 01
Dynamic group + policy
Instance principal or user with read-only policy.
- 02
Tenancy OCID
Register home region and compartment roots.
- 03
Cloud Guard enable
Verify problems export API access.
- 04
First ingest
Raw JSON to tenant prefix.
- 05
Gap report
Mapped to ISO and SOC controls.
- 06
Scale add-on
Full multi-cloud when moving to Scale tier.
Tools we deploy
and integrate.
Open-source and native cloud APIs — no proprietary agent required unless noted for on-prem.
Connector · OCI IAM policy with inspect-level permissions only.
Framework mapping
for Oracle Cloud.
Evidence exports attach findings to auditor-friendly control IDs.
CIS OCI
CIS benchmarks
ISO 27001
A.8 technical controls
SOC 2
CC6 · CC7
[ TIERS ]
Connector included by tier
| foundation · $3,500 | ▲ |
| growth · $5,000 | ☑ |
| scale · $8,000 | ☑ |
| enterprise · $12,000 | ☑ |
Customer story
Cloud Guard 100% targets
Enterprise ERP migration closed 31 open problems in first sprint.
Enterprise
FAQ
OCI coverage focuses on highest-risk services first; Full expands with roadmap.
Connect Oracle Cloud to NorthSec AI
Core coverage · read-only · per-tenant KMS