CLOUD EXPO EUROPE - PARIS 2026

Attendees, exhibitors & solutions

Who this event is for

Industry trends

Key trends shaping this market and its wider industry.

Market news

Latest updates from across the market.

Arrival airports

Choose from the following airports, with convenient access to the event and venue.

Hotel tiers

A range of accommodation options near the venue and across key areas.

Local transport

Get around the city with these convenient transport options.

Frequently asked

Glossary

1

CASB (Cloud Access Security Broker)

A policy enforcement point placed between users and cloud services to provide visibility, data loss prevention, threat protection, and access control for SaaS and IaaS usage.

2

CSPM (Cloud Security Posture Management)

Continuous assessment of cloud configurations against security benchmarks and compliance frameworks, with alerting and remediation guidance for misconfigurations.

3

CNAPP (Cloud-Native Application Protection Platform)

An integrated platform that combines cloud posture management, workload protection, entitlement analysis, infrastructure-as-code scanning, and runtime defenses across multi-cloud environments.

4

CWPP (Cloud Workload Protection Platform)

Security controls for virtual machines, containers, Kubernetes, and serverless workloads, covering vulnerability management, runtime protection, and file integrity monitoring.

5

CIEM (Cloud Infrastructure Entitlement Management)

Analysis and management of cloud permissions to enforce least privilege, detect excessive entitlements, and reduce identity-based risk across cloud accounts.

6

SASE (Secure Access Service Edge)

A converged network and security architecture that combines SD-WAN with cloud-delivered security services such as secure web gateway, CASB, zero trust network access, and firewall-as-a-service.

7

ZTNA (Zero Trust Network Access)

An access model that grants users and devices least-privilege access to specific applications after identity and device checks, rather than trusting the network perimeter.

8

IAM (Identity and Access Management)

The framework of policies and technologies that manage digital identities and control user access to cloud resources, applications, and data.

9

PAM (Privileged Access Management)

Controls that secure, manage, and monitor accounts with elevated privileges, including credential vaulting, session recording, and just-in-time access.

10

MFA (Multi-Factor Authentication)

An authentication method that requires two or more independent credentials, such as a password plus a hardware token or authenticator app, before granting access.

11

DLP (Data Loss Prevention)

Policies and technologies that detect and prevent unauthorized access, sharing, or exfiltration of sensitive data across cloud services, endpoints, and network traffic.

12

SIEM (Security Information and Event Management)

A platform that collects, correlates, and analyzes log and event data from cloud and on-premises sources to support threat detection and compliance reporting.

13

SOAR (Security Orchestration, Automation, and Response)

Tools that automate incident response workflows, integrate security products, and orchestrate repetitive tasks such as enrichment, ticket creation, and containment actions.

14

XDR (Extended Detection and Response)

A detection and response approach that correlates telemetry from endpoints, networks, cloud workloads, and identity systems to improve threat visibility and investigation.

15

SSPM (SaaS Security Posture Management)

Continuous monitoring of SaaS configurations, third-party app integrations, and user permissions to identify risky settings and data exposure.

16

API security

Controls that discover, inventory, and protect application programming interfaces from abuse, misconfiguration, broken authentication, and data exposure in cloud-native applications.

17

DevSecOps

The practice of integrating security checks, policy-as-code, and vulnerability scanning into software development and CI/CD pipelines so that cloud applications are secured earlier.

18

IaC scanning (Infrastructure-as-Code scanning)

Static analysis of templates such as Terraform, CloudFormation, or Kubernetes manifests to detect insecure configurations before infrastructure is deployed.

19

KMS/HSM (Key Management Service / Hardware Security Module)

Services and devices used to generate, store, rotate, and control encryption keys, with HSMs providing tamper-resistant hardware protection for high-assurance key custody.

20

Zero trust

A security model that assumes no implicit trust based on network location and instead continuously verifies identity, device health, and context before granting access to resources.

21

Shared responsibility model

The division of security duties between a cloud service provider and the customer, covering physical infrastructure, hypervisor, operating systems, applications, identities, and data.

22

SOC 2 and ISO 27001

Common assurance frameworks used by cloud security buyers: SOC 2 reports on controls relevant to security, availability, and confidentiality, while ISO 27001 specifies requirements for an information security management system.