Detecting security exceptions across multiple compute environments

A non-transitory computer-readable medium storing a set of instructions for applying cybersecurity policies across multiple computing environments, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a device, cause the device to:
• generate an inspectable disk from a disk of a first workload deployed in a first computing environment, the computing environment including a cybersecurity policy applicable to a cybersecurity object;
• detect the cybersecurity object on the inspectable disk;
• generate a policy exception based on the cybersecurity object and the first workload;
• generate a representation of the cybersecurity object and the first workload in a security database, wherein the security database includes a representation of the first computing environment and a representation of a second computing environment which is associated with the first computing environment;
• detect in the representation of the second computing environment a representation of a second workload associated with the representation of the first workload;
• and
• apply the policy exception to the second workload based on detecting that the second workload is associated with the first workload;
• traverse a security graph to find a first node representing the first workload, wherein the security graph is the representation in the security database;
• and
• traverse the security graph to find a second node representing the second workload.

A system for applying cybersecurity policies across multiple computing environments comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• generate an inspectable disk from a disk of a first workload deployed in a first computing environment, the computing environment including a cybersecurity policy applicable to a cybersecurity object;
• detect the cybersecurity object on the inspectable disk;
• generate a policy exception based on the cybersecurity object and the first workload;
• generate a representation of the cybersecurity object and the first workload in a security database, wherein the security database includes a representation of the first computing environment and a representation of a second computing environment which is associated with the first computing environment;
• detect in the representation of the second computing environment a representation of a second workload associated with the representation of the first workload;
• and
• apply the policy exception to the second workload based on detecting that the second workload is associated with the first workload;
• traverse a security graph to find a first node representing the first workload, wherein the security graph is the representation in the security database;
• and
• traverse the security graph to find a second node representing the second workload.