Cloud Security (CSPM/CNAPP)
13 providers in this category.
Cloud security posture management (CSPM) and cloud-native application protection platforms (CNAPP) continuously scan cloud accounts for misconfigurations, risky entitlements, exposed data, and workload vulnerabilities. They suit teams running multi-cloud or Kubernetes estates that need posture, runtime, and identity risk in one view. Agentless coverage and CSPM/CWPP/CIEM breadth separate the field.
Companies
Neutral ordering. Not a recommendation.
Aqua Security
www.aquasec.com
Aqua Security is a CNAPP that secures cloud-native apps from code to cloud, combining CSPM, CWPP, CIEM, IaC scanning, and Kubernetes security posture management (KSPM) with both agent and agentless technology.
CrowdStrike Falcon
www.crowdstrike.com
CrowdStrike Falcon is a cloud-delivered endpoint protection platform combining endpoint detection and response (EDR), extended detection and response (XDR), and threat intelligence through a lightweight agent.
Lacework FortiCNAPP
www.fortinet.com/products/forticnapp
Lacework FortiCNAPP is Fortinet's cloud-native application protection platform, built on Lacework technology and integrated into the Fortinet Security Fabric.
Microsoft Defender for Cloud
azure.microsoft.com/en-us/products/defender-for-cloud
Microsoft Defender for Cloud is a CNAPP delivering CSPM, CWPP, and DevSecOps posture management natively across Azure, AWS, and GCP.
Orca Security
orca.security
Orca Security is an agentless-first CNAPP built on patented SideScanning technology that combines CSPM, CWPP, CIEM, DSPM, Kubernetes, and API security in one platform.
Prisma Cloud
www.paloaltonetworks.com/prisma/cloud
Prisma Cloud is Palo Alto Networks' code-to-cloud CNAPP covering CSPM, CWPP, CIEM, IaC scanning, and data and API security across multicloud and hybrid environments.
Qualys
www.qualys.com
Qualys delivers the cloud-based Enterprise TruRisk platform, with VMDR for vulnerability management, detection, and response.
Rapid7
www.rapid7.com
Rapid7 InsightVM is a vulnerability-management platform spanning endpoint to cloud, using a single Insight Agent plus agentless scan engines.
SentinelOne Singularity
www.sentinelone.com
SentinelOne Singularity is an AI-driven endpoint protection platform providing EDR and XDR with autonomous detection and response across Windows, macOS, and Linux.
Sysdig
www.sysdig.com
Sysdig Secure is a runtime-powered CNAPP combining CSPM, KSPM, CWPP, CIEM, IaC scanning, and vulnerability management, with real-time threat detection built on the open-source Falco engine that Sysdig created.
Tenable
www.tenable.com
Tenable is the vulnerability-management pioneer behind Nessus, serving enterprises and government with an asset-priced subscription portfolio.
