Communicating trace information between security zones

A non-transitory, computer-readable medium storing instructions that when executed by a computer system cause the computer system to perform operations comprising:

• running, in a first security zone of the computer system, a first portion of an application, wherein a second, complementary portion of the application executes in a second security zone, wherein the first security zone is a secure zone of the computer system and the second security zone is a public cloud computing platform;
• storing, in the first security zone, trace information generated from running the first portion of the application;
• generating, in the first security zone, filtered trace information by removing specified information from the trace information, wherein the specified information is a subset of information in the trace information that is identified for filtering prior to the trace information being generated;
• storing, in a particular storage location within the first security zone, the filtered trace information;
• running, in the first security zone, an adapter application executable to access the particular storage location within the first security zone and to call a second security zone, wherein second trace information is generated from running the second portion of the application and is stored in a datastore of the second security zone;
• transmitting, from the first security zone to the datastore of the second security zone using the adapter application, the filtered trace information, wherein the filtered trace information and second trace information are useable by a trace analysis tool running outside the first security zone;
• blocking any messages sent from the second security zone to the first security zone;
• receiving, from the trace analysis tool, a trace analysis of the filtered trace information and the second trace information;
• and
• based on the trace analysis, generating a trace analysis report for the application indicative of a reliability of the first portion of the application and the second portion of the application.

A computer system comprising:

• a computer memory disposed within a first security zone;
• a network interface disposed within a first security zone and configured to send information to a second computer system in a second security zone, wherein the first security zone is a secure zone of the computer system and the second security zone is a public cloud computing platform, wherein the network interface is configured to block messages from the second security zone;
• and
• a processor circuit disposed within the first security zone, the processor circuit configured to:
• run a first portion of an application within the first security zone wherein a second, complementary portion of the application executes in the second security zone;
• collect trace information generated from running the first portion of the application;
• generate filtered trace information generated by removing specified information from the trace information, wherein the specified information is a subset of information in the trace information that is identified for filtering prior to the trace information being generated;
• storing the filtered trace information on the computer memory disposed within the first security zone;
• run an adapter application executable to access the computer memory and call the second security zone, wherein second trace information is generated from executing the second portion of the application;
• transmit, from the first security zone to a datastore of the second security zone using the adapter application, the filtered trace information;
• receive, from a trace analysis tool, a trace analysis of the filtered trace information and the second trace information;
• and
• based on the trace analysis, generate a trace analysis report for the application indicative of a reliability of the first portion of the application and the second portion of the application.