CSAIChaptersEventsBlog
Learn why hybrid environments are now the norm and how to build a security architecture that embraces this. Register for the July 1st webinar →

CSA Research

Best practices, guidance, frameworks and tools to help the industry secure the cloud. Read our research to get your questions around cloud security answered.
Research

CSA Research is created by the industry for the industry and is both vendor-neutral and consensus driven. Our research is created by subject matter experts who volunteer for our working groups. Each working group focuses on a unique topic or aspect of cloud security, from IoT, DevSecOps, Serverless and more, we have working groups for over 20 areas of cloud computing. You can view a list of all active research working groups. To find out more about how our research is created and the process we follow you can view the CSA Research Lifecycle.

Contribute to CSA Research

Peer reviews allow security professionals from around the world to collaborate on CSA research. Provide your feedback on the following documents in progress.

Latest Research

Quantum Computing & Artificial Intelligence

Quantum Computing & Artificial Intelligence

Release Date: 06/17/2026

Quantum computing and AI are two of the most transformative technologies shaping the future. While each is powerful on its own, their convergence has the potential to accelerate innovation across industries. They may even give rise to Quantum Artificial Intelligence (QAI), where both...
Core Collapse: The Mathematics of AI Security Asymmetry

Core Collapse: The Mathematics of AI Security Asymmetry

Release Date: 06/16/2026

This publication explores why attackers hold a structural advantage in cybersecurity and how defenders can shift the balance. Using a conceptual scaling model, the publication formalizes the attacker-defender relationship. It shows how attackers face a bounded search problem while defenders...
Evaluating PyRIT for Agentic AI Red Teaming

Evaluating PyRIT for Agentic AI Red Teaming

Release Date: 06/15/2026

As organizations adopt autonomous AI systems, traditional AI security testing methods are no longer enough. This research evaluates Microsoft’s Python Risk Identification Toolkit (PyRIT) and its effectiveness for agentic AI red teaming.

Building on the Agentic AI Red Teaming Guide, the report...