The three categories of cloud security are infrastructure security, application security, and operational security. Infrastructure security protects the physical and virtual resources underpinning cloud services. Application security addresses the safeguarding of software and applications from threats. Operational security involves the processes and strategies for managing and securing cloud operations.