Hybrid cloud protection