{"id":10,"date":"2026-10-15T11:25:28","date_gmt":"2026-10-15T11:25:28","guid":{"rendered":"https:\/\/covenantcloudsec.ai\/?page_id=10"},"modified":"2026-10-15T18:26:28","modified_gmt":"2026-10-15T18:26:28","slug":"home","status":"publish","type":"page","link":"https:\/\/covenantcloudsec.ai\/","title":{"rendered":""},"content":{"rendered":"<style>.wp-block-post-title{display:none !important;}<\/style>\n<style>\n.cc-wrap {\n  --navy: #14213d;\n  --teal: #1f7a8c;\n  --ink: #1d2433;\n  --muted: #5b6475;\n  --mist: #f3f6f9;\n  --line: #dde3ea;\n  color: var(--ink);\n  font-family: \"Segoe UI\", system-ui, -apple-system, Roboto, Helvetica, Arial, sans-serif;\n  line-height: 1.6;\n  max-width: 1100px;\n  margin: 0 auto;\n  padding: 0 16px;\n  box-sizing: border-box;\n}\n.cc-wrap *, .cc-wrap *::before, .cc-wrap *::after { box-sizing: border-box; }\n.cc-wrap section { padding: 56px 0; scroll-margin-top: 20px; }\n.cc-wrap section + section { border-top: 1px solid var(--line); }\n.cc-wrap h1 { font-size: 2.4rem; line-height: 1.2; color: var(--navy); margin: 0 0 16px; }\n.cc-wrap h2 { font-size: 1.7rem; color: var(--navy); margin: 0 0 16px; }\n.cc-wrap h3 { font-size: 1.1rem; color: var(--navy); margin: 0 0 8px; }\n.cc-wrap p { margin: 0 0 12px; }\n.cc-wrap p.lead { font-size: 1.15rem; color: var(--muted); max-width: 720px; }\n.cc-wrap a { color: var(--teal); }<\/p>\n<p>.cc-wrap .hero { padding: 72px 0 56px; }\n.cc-wrap .eyebrow {\n  text-transform: uppercase; letter-spacing: 0.12em; font-size: 0.8rem;\n  color: var(--teal); font-weight: 600; margin: 0 0 12px;\n}\n.cc-wrap .button {\n  display: inline-block; margin: 16px 12px 0 0; background: var(--teal); color: #fff !important;\n  padding: 12px 22px; border-radius: 6px; text-decoration: none; font-weight: 600;\n}\n.cc-wrap .button.outline { background: transparent; color: var(--teal) !important; border: 2px solid var(--teal); padding: 10px 20px; }\n.cc-wrap .button:hover { background: #17606e; color: #fff !important; }\n.cc-wrap .button.outline:hover { background: var(--mist); color: var(--teal) !important; }<\/p>\n<p>.cc-wrap .grid {\n  display: grid; gap: 20px; grid-template-columns: repeat(auto-fit, minmax(240px, 1fr));\n}\n.cc-wrap .card {\n  background: var(--mist); border: 1px solid var(--line); border-radius: 10px; padding: 24px;\n}\n.cc-wrap .card .benefit { color: var(--muted); font-size: 0.95rem; margin: 0; }\n.cc-wrap .card .benefit strong { color: var(--ink); }<\/p>\n<p>.cc-wrap .timeline { list-style: none; padding: 0; margin: 0; }\n.cc-wrap .timeline li { border-left: 3px solid var(--teal); padding: 4px 0 20px 20px; }\n.cc-wrap .timeline .dates { color: var(--muted); font-size: 0.9rem; }<\/p>\n<p>.cc-wrap .badges { display: flex; flex-wrap: wrap; gap: 16px; }\n.cc-wrap .badge { border: 2px solid var(--navy); border-radius: 10px; padding: 16px 20px; min-width: 220px; }\n.cc-wrap .badge strong { display: block; color: var(--navy); }\n.cc-wrap .badge span { color: var(--muted); font-size: 0.9rem; }<\/p>\n<p>.cc-wrap .cloud {\n  background: var(--mist); border: 1px solid var(--line);\n  border-radius: 48% 52% 46% 54% \/ 55% 45% 55% 45%;\n  padding: 40px 32px; display: flex; flex-wrap: wrap; justify-content: center; gap: 14px;\n  max-width: 820px; margin: 0 auto;\n}\n.cc-wrap .cloud .bubble {\n  background: #fff; border: 1px solid var(--line); border-radius: 999px; padding: 12px 22px;\n  font-weight: 600; color: var(--navy); box-shadow: 0 2px 6px rgba(20, 33, 61, 0.06);\n}\n.cc-wrap .cloud .bubble:nth-child(3n) { color: var(--teal); }\n.cc-wrap .cloud-caption { text-align: center; color: var(--muted); font-size: 0.95rem; margin-top: 16px; }<\/p>\n<p>.cc-wrap .why-blurb {\n  background: var(--navy); color: #e6edf5; border-radius: 12px; padding: 32px;\n  display: flex; flex-wrap: wrap; gap: 16px; align-items: center; justify-content: space-between;\n}\n.cc-wrap .why-blurb h2 { color: #fff; margin: 0 0 8px; }\n.cc-wrap .why-blurb p { margin: 0; max-width: 620px; color: #e6edf5; }\n.cc-wrap .why-blurb a.more {\n  color: #fff; font-weight: 600; text-decoration: none;\n  border-bottom: 2px solid var(--teal); padding-bottom: 2px; white-space: nowrap;\n}<\/p>\n<p>@media (max-width: 600px) {\n  .cc-wrap h1 { font-size: 1.9rem; }\n  .cc-wrap .why-blurb { padding: 24px; }\n  .cc-wrap .cloud { padding: 28px 16px; }\n}\n<\/style>\n<div class=\"cc-wrap\">\n<section class=\"hero\" id=\"top\">\n<p class=\"eyebrow\">Security consulting and advisory<\/p>\n<h1>Security programs you own, built to pass audit and scale with you.<\/h1>\n<p class=\"lead\">Covenant Cloud Security helps organizations build and mature their own security programs. We bring practical, sustainable processes and the audit know-how to back them up, so your team can keep the program running after we step away.<\/p>\n<p>    <a class=\"button\" href=\"#services\">Our services<\/a><br \/>\n    <a class=\"button outline\" href=\"#about\">About Joseph Eddings<\/a><br \/>\n  <\/section>\n<section id=\"services\">\n<h2>What we offer<\/h2>\n<div class=\"grid\">\n<div class=\"card\">\n<h3>SOC 2 Readiness<\/h3>\n<p>Gap assessment, control mapping, and a prioritized roadmap to audit.<\/p>\n<p class=\"benefit\"><strong>Benefit:<\/strong> Fewer surprises at audit time and a clear path to a clean report.<\/p>\n<\/p><\/div>\n<div class=\"card\">\n<h3>FedRAMP and HIPAA Gap Analyses<\/h3>\n<p>We map the requirements against what you already have and rank what matters most.<\/p>\n<p class=\"benefit\"><strong>Benefit:<\/strong> You know exactly what stands between you and compliance.<\/p>\n<\/p><\/div>\n<div class=\"card\">\n<h3>Fractional CISO<\/h3>\n<p>Executive-level security leadership on a monthly retainer, scaled to your stage.<\/p>\n<p class=\"benefit\"><strong>Benefit:<\/strong> CISO judgment and board-ready reporting without a full-time hire.<\/p>\n<\/p><\/div>\n<div class=\"card\">\n<h3>Application and Cloud Security<\/h3>\n<p>Secure SDLC guidance, threat modeling, and cloud and identity architecture reviews.<\/p>\n<p class=\"benefit\"><strong>Benefit:<\/strong> Fewer vulnerabilities reach production, and security is built into engineering rather than bolted on.<\/p>\n<\/p><\/div>\n<div class=\"card\">\n<h3>Security Program Build-Out<\/h3>\n<p>Policies, governance, risk intake, and metrics designed from the ground up for your organization.<\/p>\n<p class=\"benefit\"><strong>Benefit:<\/strong> Processes your team understands and can run without outside help.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section>\n<h2>Why organizations choose us<\/h2>\n<div class=\"grid\">\n<div class=\"card\">\n<h3>Capability, not dependence<\/h3>\n<p>We are a consulting firm, not a managed security provider. We build your team&#8217;s ability to run security, rather than handing it off.<\/p>\n<\/p><\/div>\n<div class=\"card\">\n<h3>Compliance you can defend<\/h3>\n<p>Controls designed to hold up under audit, drawn from frameworks like SOC 2, FedRAMP, HIPAA, ISO 27001, and PCI-DSS.<\/p>\n<\/p><\/div>\n<div class=\"card\">\n<h3>Engagements sized to fit<\/h3>\n<p>Time-boxed projects with clear deliverables, or ongoing advisory when you need it. No open-ended commitments.<\/p>\n<\/p><\/div>\n<div class=\"card\">\n<h3>Experience at scale<\/h3>\n<p>Two decades of security work on large, complex products, applied to organizations at your stage.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"about\">\n<p class=\"eyebrow\">About Us<\/p>\n<h2>Joseph Eddings, CISSP<\/h2>\n<p class=\"lead\">Founder of Covenant Cloud Security. I have spent about twenty years in cybersecurity and ten of those leading security teams and programs. I started Covenant to help organizations build security they can run for themselves, not to sell them an outsourced service.<\/p>\n<p>My work centers on application security, cloud security, and compliance programs. I have built and led security programs at large technology companies, where I owned strategy and roadmaps, managed security engineers, and worked across engineering and product teams to make secure practices stick.<\/p>\n<p>I&#8217;m strongest where security meets the way software is built: secure development lifecycles, threat modeling, identity and access management, and translating regulatory requirements into controls that engineering teams can actually implement.<\/p>\n<h3 style=\"margin-top:28px;\">Experience<\/h3>\n<ul class=\"timeline\">\n<li>\n        <strong>Sr. Security and Compliance Product Manager<\/strong>, SAS Institute<br \/>\n        <span class=\"dates\">2023 to present<\/span><br \/>\n        Compliance requirements for a Kubernetes-based SaaS product, mapped across FedRAMP, PCI-DSS, HIPAA, SOX, and ISO 27001. Continuous control benchmarking and SOC 2 Type II evidence collection.\n      <\/li>\n<li>\n        <strong>Manager, IT Security and Risk<\/strong>, Dropbox<br \/>\n        <span class=\"dates\">2019 to 2022<\/span><br \/>\n        Led IT cybersecurity strategy and roadmap, including the company&#8217;s &#8220;Secure by Design&#8221; program and a Zero Trust program with microsegmentation policy.\n      <\/li>\n<li>\n        <strong>Cybersecurity Program Manager<\/strong>, Sony PlayStation<br \/>\n        <span class=\"dates\">2016 to 2019<\/span><br \/>\n        Corporate security governance and architecture review, reporting to the CIO and CISO.\n      <\/li>\n<\/ul>\n<h3 style=\"margin-top:28px;\">Certifications<\/h3>\n<div class=\"badges\">\n<div class=\"badge\">\n        <strong>CISSP<\/strong><br \/>\n        <span>ISC2. Credential ID 499337<\/span>\n      <\/div>\n<div class=\"badge\">\n        <strong>CSPO<\/strong><br \/>\n        <span>Certified Scrum Product Owner, Scrum Alliance<\/span>\n      <\/div>\n<\/p><\/div>\n<h3 style=\"margin-top:28px;\">Frameworks I work in<\/h3>\n<p>SOC 2 &nbsp;|&nbsp; FedRAMP Moderate and High &nbsp;|&nbsp; HIPAA &nbsp;|&nbsp; ISO 27001 &nbsp;|&nbsp; PCI-DSS &nbsp;|&nbsp; NIST 800-53 &nbsp;|&nbsp; CSA Cloud Controls Matrix &nbsp;|&nbsp; OWASP SAMM &nbsp;|&nbsp; IRS Publication 1075<\/p>\n<h3 style=\"margin-top:28px;\">Companies where I&#8217;ve built security programs<\/h3>\n<p>    <!-- Text bubbles for now. Check trademark and permission rules before using logos. --><\/p>\n<div class=\"cloud\">\n      <span class=\"bubble\">SAS Institute<\/span><br \/>\n      <span class=\"bubble\">Dropbox<\/span><br \/>\n      <span class=\"bubble\">Sony PlayStation<\/span>\n    <\/div>\n<p class=\"cloud-caption\">Prior and current employers where I worked on security.<\/p>\n<\/section>\n<section>\n<div class=\"why-blurb\">\n<div>\n<h2>Ready to talk about your security program?<\/h2>\n<p>Two decades of security leadership, backed by CISSP certification and hands-on work across application, cloud, and compliance.<\/p>\n<\/p><\/div>\n<p>      <a class=\"more\" href=\"#top\">Back to top &uarr;<\/a>\n    <\/div>\n<\/section>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Security consulting and advisory Security programs you own, built to pass audit and scale with you. Covenant Cloud Security helps organizations build and mature their own security programs. We bring practical, sustainable processes and the audit know-how to back them up, so your team can keep the program running after we step away. Our services [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":1,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-10","page","type-page","status-publish","hentry"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/covenantcloudsec.ai\/index.php?rest_route=\/wp\/v2\/pages\/10","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/covenantcloudsec.ai\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/covenantcloudsec.ai\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/covenantcloudsec.ai\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/covenantcloudsec.ai\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10"}],"version-history":[{"count":6,"href":"https:\/\/covenantcloudsec.ai\/index.php?rest_route=\/wp\/v2\/pages\/10\/revisions"}],"predecessor-version":[{"id":27,"href":"https:\/\/covenantcloudsec.ai\/index.php?rest_route=\/wp\/v2\/pages\/10\/revisions\/27"}],"wp:attachment":[{"href":"https:\/\/covenantcloudsec.ai\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}