Microsoft Defender for Cloud is a CNAPP delivering CSPM, CWPP, and DevSecOps posture management natively across Azure, AWS, and GCP. Its agentless Foundational CSPM (free, on by default) covers asset inventory, security assessment, IaC/DevOps posture, and compliance, while paid Defender CSPM adds attack-path analysis, agentless vulnerability scanning, and a cloud security graph. Workload plans protect VMs, containers, databases, and serverless, and CIEM and Kubernetes (Defender for Containers) are included in the paid tiers. Pricing is pay-as-you-go metered per resource with commit-unit discounts.
cnappmicrosoftdefenderfree-tier
Overview
- Founded
- 2017
- Pricing tier
- Mid
- Startup-friendly
- Yes
- Enterprise-ready
- Yes
Cloud security (CSPM/CNAPP)
- Agentless scanning
- Yes
- CSPM (posture)
- Yes
- CWPP (workload)
- Yes
- CIEM (entitlements)
- Yes
- IaC scanning
- Yes
- Kubernetes security
- Yes
- Multi-cloud
- Yes
- Open-source
- No
- Free tier
- Yes: Foundational CSPM is free and on by default (asset inventory, security assessment, IaC/DevOps posture, compliance); Defender CSPM and workload plans are paid
Categories & compliance
Categories
Compliance
SOC2ISO27001FedRAMPPCI-DSSHIPAA