System and method for analyzing network objects in a cloud environment

A non-transitory computer-readable medium storing a set of instructions for determining reachability of vulnerable network objects having cyber-threats, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a device, cause the device to:
• collect network object data on a plurality of network objects deployed in a cloud computing environment;
• construct a network graph based on the collected network object data, wherein the network graph includes a visual representation of network objects identified in the cloud computing environment;
• determine relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes descriptions of connections between the identified network objects;
• analyze the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between the identified network objects;
• and
• tag network objects in the network graph for which the insight is generated.

A system for determining reachability of vulnerable network objects having cyber-threats comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• collect network object data on a plurality of network objects deployed in a cloud computing environment;
• construct a network graph based on the collected network object data, wherein the network graph includes a visual representation of network objects identified in the cloud computing environment;
• determine relationships between the identified network objects in the network graph, wherein the determined relationships between the identified network objects includes descriptions of connections between the identified network objects;
• analyze the network graph and the determined relationships to generate insights, wherein the generated insights include at least a route between the identified network objects;
• and
• tag network objects in the network graph for which the insight is generated.