Skip to content
Cloud Provider Benchmarks

Benchmarks

Cloud security capabilities compared: network isolation, identity and audit

Security is not reduced to a score here. This page compares documented capabilities, each linked to the provider’s documentation, and lists published certifications. A capability being present says nothing about how it is configured in a given account; the matrix is a starting point for due diligence.

Updated:

Direct answer

All providers tracked here document security groups or firewalls and private networking. They differ most in control-plane audit logging, identity attribution in those logs, and certifications. No numerical security scores are published because capabilities cannot be fairly reduced to one number.

What is measured

  • Documented network isolation controls
  • Control-plane audit logging and identity attribution
  • Published certifications

Provider capability matrix

Every value is based on provider documentation. Undocumented features are shown as unverified.

Documented capabilities
Criterion PortvMind AWS Azure Google Cloud DigitalOcean Vultr Hetzner
Data residency
Infrastructure located in Türkiye Generally available compute and storage capacity physically located in Türkiye (full region or local zone). Yes Full regions in İstanbul (tr-ist-01) and Ankara (tr-ank-01). Yes Istanbul Local Zone with a subset of services (GA May 2026); not a full region. No No announced or launched region in Türkiye. Planned Announced November 2025; not yet open. No No No
Networking
L4 load balancer (TCP/UDP) Transport-layer load balancing. Yes NetBalancer (TCP/UDP). Yes Yes Yes Yes Yes Partial TCP only (no UDP).
L7 load balancer (HTTP/HTTPS) Application-layer load balancing with HTTP health checks. Yes AppBalancer (HTTP/HTTPS). Yes Yes Yes Yes Yes Yes
Reassignable static public IP Static public addresses that can be moved between resources (Floating/Reserved/Elastic IP). Yes Yes Elastic IP addresses. Yes Static public IP resources re-associable between NICs. Yes Static external IP addresses. Yes Reserved IPs. Yes Reserved IPs. Yes
Private networks / VPC Isolated tenant networks with custom CIDR ranges. Yes Isolated networks with custom CIDR. Yes Yes Yes Yes Yes Yes
Virtual router with NAT Managed router or NAT gateway for egress and inter-subnet routing, including static routes. Yes Router with NAT option and static routes. Yes Route tables and NAT Gateway. Yes Route tables and NAT Gateway. Yes Cloud Router and Cloud NAT. Unverified Unverified No Network routes are supported; NAT requires a self-managed gateway server.
Security groups / cloud firewall Stateful, API-managed network access rules. Yes Yes Yes Yes VPC firewall rules and policies. Yes Cloud Firewalls. Yes Firewall groups. Yes Stateful firewalls.
Security & auditing
Control-plane audit logging A provider service that records management (API/console) operations against cloud resources. Yes vTrail (provider-supplied capability information). Yes AWS CloudTrail. Yes Azure Monitor Activity Log. Yes Cloud Audit Logs. Unverified Unverified Unverified
User identity attribution in audit events Each audit event identifies the authenticated principal that performed the operation. Yes vTrail records the authenticated user, project and scope (provider-supplied). Yes Yes Yes Unverified Unverified Unverified

Published certifications

Certifications
Provider Certifications
PortvMind Cloud ISO 9001ISO 10002ISO 20000-1ISO 22301ISO 27001ISO 27017ISO 27701ISO 37001ISO 45001
Amazon Web Services Not listed in profile
Microsoft Azure Not listed in profile
Google Cloud Not listed in profile
DigitalOcean Not listed in profile
Vultr Not listed in profile
Hetzner Not listed in profile