"Cloud-Based means that you give information to others, but the question is who owns the system and who pays for its maintenance. We do our pro checks against on-premise and cloud systems alike. There’s absolutely no difference if the data is hosted on your own server or on Amazon’s. The vulnerabilities can live in the cloud or on-premise. The security issue with the cloud is that you give permission to 3rd parties, however, its more than likely that Amazon’s engineers will do a better job maintaining and protecting their cloud environment than you would on your own private server."