Even Cloud-first Companies Need to Protect On-prem Applications