Cloud posture (CSPM/CNAPP)

Adaptive Shield

SSPM

1 product

Adaptive Shield is primarily known for SaaS Security Posture Management, but in a cloud security/CSPM evaluation it is not a native fit and should be treated as an adjacent vendor rather than a core CSPM platform.

Aikido Security

Software Supply Chain & SBOM

9 products

All the security tools we used were slow, confusing, overpriced and noisy. So we built better ones.

AlgoSec

NAC

2 products

AlgoSec provides a security policy management platform that automates the orchestration of connectivity and security policies across hybrid cloud and on-premise environments.

Anchore

Software Supply Chain & SBOM

2 products

Anchore is creating a more secure software supply chain for priceless peace of mind.

AppOmni

SSPM

4 products

AppOmni is positioned as a SaaS Security Posture Management (SSPM) platform, not a traditional multi-cloud CSPM vendor.

Aqua Security

CSPM

7 products

Aqua Security’s CSPM offering is a multi-cloud posture management product that uses cloud API access and agentless checks to inventory resources, detect misconfigurations, and map findings to compliance requirements.

ARMO Kubescape

CNAPP

1 product

Zero-day and every day protection for your cloud applications with the first runtime behavioral Cloud Application Detection and Response (CADR) solution.

Aryon

CSPM

1 product

We're Making it Possible for Everyone to Proactively Secure Complex Cloud Environments.

AvePoint

DSPM

4 products

AvePoint is the unifying Trust Layer for AI.

AWS

Encryption & Key Management

12 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications.

Bitdefender

EDR

8 products

At Bitdefender, cybersecurity isn't just what we do, it's who we are. For over two decades, we've been at the forefront of protecting individuals, businesses, and governments against sophisticated cyber threats and attacks.

Blast

CSPM

1 product

Blast is a preemptive cloud defense platform that shifts security from reactive monitoring to proactive prevention by leveraging native cloud infrastructure controls.

Blast Security

CSPM

1 product

Blast Security is a cloud security posture management vendor that positions its product as a preemptive cloud defense platform.

CalmaCloud

CSPM

1 product

Calma Cloud is a security and design platform for Azure that combines security posture management (CSPM), cost and savings analysis, Azure advisories and AI-assisted architecture design. It connects to an Azure subscription through a read-only Service Principal, inventories resources, and evaluates posture against security rules.

Chainguard

Software Supply Chain & SBOM

7 products

Chainguard provides minimal, distroless container images rebuilt daily from source, achieving 97.6% fewer CVEs than open source alternatives, with SLSA provenance, cryptographic signing, and verification enforcement at registry

Checkmarx

SAST

6 products

Checkmarx One is an application security software platform built to help enterprises secure every stage of the SDLC while reducing engineering costs and accelerating development.

Check Point

CSPM

7 products

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

Copperhelm

CNAPP

1 product

Copperhelm builds an agentic cloud security platform for enterprise security teams that replaces manual cloud security workflows with purpose-built AI agents.

CybrHawk

Agentic SOC & Investigations

6 products

CybrHawk is a leading provider of cybersecurity solutions. Our offerings help organizations to get their cyber-defences attuned to stall, manage, mitigate and prevent breaches.

Cynet 360 AutoXDR with MDR

MDR

8 products

At Cynet, we imagine a world where any company can have full cybersecurity protections.

Cyngular

Cloud Detection & Response (CDR)

2 products

The Agentic SOC of the AI era, a mesh of autonomous AI agents that detect, hunt, investigate, deceive, resolve and report, end-to-end.

Darktrace

NDR

7 products

Darktrace is a network detection and response vendor centered on self-learning behavioral analytics for north-south and east-west traffic.

Dawnguard

CSPM

5 products

Building the next-gen platform that makes security easy from day one

Echo

Vulnerability Management

5 products

Echo is creating the trusted source for agentic-ready software.

Edera

CNAPP

3 products

Edera is a container security vendor centered on hardened runtime isolation for Kubernetes workloads.

Elastic

SIEM

6 products

Elastic Security provides an open-source SIEM platform built on the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) for collecting, indexing, and analyzing security logs from endpoints, networks, clouds (AWS, Azure, Google

Fluid Attacks

SAST

6 products

Since 2001, Fluid Attacks has been committed to growing as a team and developing its own technology to contribute to global cybersecurity.

Fortinet

NGFW

8 products

Fortinet’s FortiGate line is the company’s Firewall/NGFW offering, covering stateful firewalling, application control, IPS, web filtering, SSL/TLS inspection, and threat-intelligence-backed blocking.

Garinym LDA

CNAPP

1 product

Iris is a runtime platform from Garinym that shows security and engineering teams what their cloud workloads and AI systems do in production. It maps its findings to DORA, NIS2, GDPR and EU AI Act controls. It reads the prompts and answers that applications exchange with language models, inside the customer's own environment.

Mesh Security

CSPM

1 product

Mesh Security provides a Cybersecurity Mesh Architecture (CSMA) platform that serves as a horizontal execution layer across the security stack.

M

Microsoft

CSPM

14 products

Microsoft Defender for Cloud is a unified cloud security platform that provides cloud security posture management (CSPM), cloud workload protection, DevOps security, and AI workload protection across hybrid and multicloud environments including Azure, AWS, and on-premises infrastructure.

M

Minimus

CNAPP

1 product

We're a team of security nerds and passionate innovators, committed to our customers.

M

Mitiga

Cloud Detection & Response (CDR)

2 products

Mitiga is a cloud detection and response vendor focused on detecting, investigating, and containing active threats across cloud, SaaS, identity, and AI environments.

N

Nullify

SAST

4 products

Nullify is an application security platform centered on SAST and DAST workflows, with continuous code scanning and live endpoint testing aimed at finding exploitable issues before merge or release.

O

Obsidian

SSPM

1 product

Obsidian is primarily a SaaS security vendor, but within cloud security it is not a CSPM-first provider.

O

Oligo Security

CWPP

7 products

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist.

O

Orca Security

CSPM

4 products

We're on a mission to provide the world's most comprehensive cloud security platform while adhering to what we believe in: frictionless security and contextual insights, so you can prioritize your most critical risks and operate

O

OX Security

Software Supply Chain & SBOM

7 products

OX Security is an enterprise software supply chain security platform that focuses on securing code, dependencies, build pipelines, and container artifacts across the SDLC.

P

Palo Alto Networks

NGFW

18 products

Palo Alto Networks is the world's leading cybersecurity company delivering AI-powered platform-based security solutions for networks, cloud, identities, and security operations across enterprises globally.

P

Parameter

Pentest & Red Team

5 products

Software is changing faster than ever. We're building security that evolves with it: continuous, autonomous, and always on.

P

Plerion

Cloud Detection & Response (CDR)

1 product

We simplify cloud security

P

Prowler

CSPM

1 product

Building a transparent, open, secure future.

Q

Qualys

Vulnerability Management

4 products

Qualys provides Vulnerability Management, Detection and Response (VMDR), a cloud-based platform that automatically discovers assets across on-premises, cloud, and mobile environments, including unmanaged devices.

R

Rapid7

Vulnerability Management

9 products

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience.

R

Reco

AI Runtime & Agent Security

4 products

Reco is the leader in Agentic Ecosystem Security, securing everything around the agent, not just the prompt.

R

Resourcely

CSPM

1 product

Resourcely enables platform, security, and DevOps engineering teams to offer simple self-service to their developers. Self-service allows developers to move at the speed of the cloud while ensuring that best practices are met.

S

Seceon

Agentic SOC & Investigations

5 products

Seceon is a cybersecurity platform vendor positioned for SOC operations, with its aiSOC/aiSIEM and SOC automation offerings used for alert triage, investigation, threat hunting, and response orchestration.

S

SentinelOne

EDR

4 products

At SentinelOne, we exist for those who protect what matters most. We believe security should be intelligent, unified, and always on.

S

Skyhawk Security

Cloud Detection & Response (CDR)

1 product

Skyhawk Security offers a cloud-native platform focused on preemptive threat detection and automated incident response through its AI-based 'Purple Team' engine.

S

Skyhigh Security CASB

SSE

8 products

Skyhigh Security CASB is a cloud-based, multi-tenant Cloud Access Security Broker that deploys via forward and reverse proxy modes for real-time control over sanctioned and unsanctioned cloud services.

S

Snyk

SAST

5 products

Snyk is an application security platform providing SAST (static code analysis), DAST (runtime testing), and SCA (software composition analysis) capabilities integrated into CI/CD pipelines.

S

Sophos

DLP

10 products

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

S

Spyderbat

Cloud Detection & Response (CDR)

1 product

Threat Detection, Investigation, and Response for Cloud, Kubernetes, and Linux

S

Stackrox by Red Hat (OpenShift Container Security)

CNAPP

1 product

We work alongside a global community of contributors, customers, and partners to bring the best ideas to life.

S

Stream.Security

Cloud Detection & Response (CDR)

1 product

StreamSecurity.com helps you spot risk, get matched with vetted security professionals, and harden what matters, without the jargon.

S

SubImage

CSPM

3 products

SubImage is an open-core cloud security graph product that maps infrastructure across cloud and on-prem environments and presents CSPM-style posture checks through a queryable graph.

S

Sweet Security

CNAPP

6 products

Sweet Security is redefining enterprise cloud protection. As the leading provider of Runtime CNAPP and AI Security solutions, Sweet unifies runtime context with advanced AI intelligence to protect the modern enterprise.

S

Sysdig

CNAPP

2 products

Cloud security with zero compromise.

T

Tigera Calico

CNAPP

2 products

Secure your Kubernetes workloads. Govern your AI agents.

T

Trend Micro

DLP

10 products

Trend Micro offers integrated Data Loss Prevention (DLP) functionality embedded within its broader endpoint security and email security platforms.

T

Tufin

CSPM

4 products

Tufin is best known for network security policy orchestration, but its cloud security offering extends that policy management model into public cloud environments.

T

Turbot

CSPM

2 products

Turbot offers an automated cloud governance and remediation platform that enforces real-time guardrails across AWS, Azure, and GCP.

U

Uptycs

CSPM

4 products

Uptycs offers CSPM as part of its broader cloud security platform, focused on continuously inventorying cloud assets, detecting misconfigurations, and mapping them to compliance requirements.

U

Upwind

CNAPP

1 product

Upwind is a runtime-powered Cloud Native Application Protection Platform (CNAPP) that consolidates vulnerability management, CSPM, DSPM, container security, CWPP, CDR, API security, and identity security into a unified platform.

V

Valence Security

SSPM

3 products

Valence Security offers a comprehensive SaaS Security Posture Management (SSPM) platform that extends into AI governance and identity threat detection.

V

Veracode

SAST

7 products

Veracode is a cloud-native application security platform providing SAST, DAST, SCA, and runtime analysis capabilities.

V

Veriti

Vulnerability Management

4 products

Veriti is an exposure assessment and remediation vendor that sits near the vulnerability management market, but its focus is broader than traditional scanning.

W

WatchGuard Technologies

NGFW

6 products

For 30 years, WatchGuard has delivered real-world cybersecurity built for constantly evolving threats and limited IT resources.

W

Wing Security

SSPM

5 products

Agent-based security for agent-based risk. By With Wings.

W

Wiz

CSPM

4 products

Wiz is a cloud security posture management (CSPM) platform that detects and remediates misconfigurations across multi-cloud environments (AWS, Azure, GCP) and infrastructure-as-code templates.

X

XM Cyber

EASM

5 products

XM Cyber is a leader in exposure management that uses attack path modeling to show how attackers can navigate hybrid cloud and on-prem environments.

Z

ZEST Security

CSPM

1 product

With ZEST, it’s not about opening tickets; it’s about closing them. ZEST offers an Agentic Exposure Management platform that redefines how security teams resolve vulnerabilities and misconfigurations.