PaaS security is normally reliant on the provider and the security of their IaaS, which is part of PaaS