It's in fact NOT serverless (Week 2)

 

In theory, serverless computers is an interesting concept… that is until you find out that they are in fact NOT serverless. Which in hindsight makes sense, a computer kind of needs some type of server to be able to access resources over a network. It’s similar to how we use the cloud and ‘renting’ storage space, but instead, the consumer is ‘renting’ time used on someone else’s server.

As an IT major, it had me thinking… security is a big topic when it comes to technology, and sometimes it’s easy to overlook that aspect. Are serverless computers secure?  Well, in this aspect the security falls on both sides, the consumer and the person or company you are ‘renting’ server time from. Interestingly, Advait Patel wrote an article about security risks related to this and noted that “Over 70% of companies still lack dedicated serverless security controls” (Patel, 2025). Statistics like this add a perspective the shared responsibility. If only one side is using best practices, it leads to vulnerabilities and less security overall.

With that said, serverless computers can be if following best practices. Patel talks about various ways to secure serverless applications. But remember, security doesn’t guarantee an attacker will not gain access, but it will make it harder for them!

Patel, A. (2025, October 6). Isaca now blog 2025 serverless security risks are real and Hackers know it. ISACA. https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2025/serverless-security-risks-are-real-and-hackers-know-it