Best Cloud-Native Application Protection Platforms (CNAPP) Software & Tools

CNAPP reviews rated on breadth versus depth against point tools, alert consolidation, runtime protection and licensing complexity.

4 products

Aqua Security
Aqua Security

by Aqua Security

No reviews yet

Aqua Security secures enterprise code, pipelines, containers, Kubernetes and serverless from one cloud native application protection platform, sold by quote.

Features

Missing Posture, workload and entitlement modules in one platform
Has Agentless workload vulnerability scanning
Has Runtime threat detection with a workload sensor
Has Container and Kubernetes runtime protection
Has Container image scanning in CI pipelines and registries
Has Code-to-cloud tracing of findings
Has Secrets detection in code and workloads
Missing Unified security graph across cloud resources
Has Toxic combination detection
Missing Cloud detection and response (CDR)
Missing Data security posture management (DSPM) module
Has Software composition analysis for open-source dependencies
Has Serverless function protection
Missing API security discovery
Has AI workload and model posture checks
Has Developer-facing fixes in pull requests
Missing Modular licensing by capability
Visit Profile
Sysdig
Sysdig

by Sysdig

No reviews yet

Sysdig Secure is a cloud-native application protection platform (CNAPP) for containers, Kubernetes and cloud accounts, built on runtime data and sold by quote.

Features

Has Posture, workload and entitlement modules in one platform
Has Agentless workload vulnerability scanning
Has Runtime threat detection with a workload sensor
Has Container and Kubernetes runtime protection
Has Container image scanning in CI pipelines and registries
Missing Code-to-cloud tracing of findings
Missing Secrets detection in code and workloads
Has Unified security graph across cloud resources
Has Toxic combination detection
Has Cloud detection and response (CDR)
Has Data security posture management (DSPM) module
Has Software composition analysis for open-source dependencies
Missing Serverless function protection
Missing API security discovery
Has AI workload and model posture checks
Has Developer-facing fixes in pull requests
Has Modular licensing by capability
Visit Profile
Upwind
Upwind

by Upwind

No reviews yet

Upwind is a cloud-native application protection platform (CNAPP) pairing cloud posture management with an eBPF runtime sensor, sold by quote to security teams.

Features

Has Posture, workload and entitlement modules in one platform
Has Agentless workload vulnerability scanning
Has Runtime threat detection with a workload sensor
Has Container and Kubernetes runtime protection
Missing Container image scanning in CI pipelines and registries
Missing Code-to-cloud tracing of findings
Missing Secrets detection in code and workloads
Has Unified security graph across cloud resources
Missing Toxic combination detection
Has Cloud detection and response (CDR)
Has Data security posture management (DSPM) module
Has Software composition analysis for open-source dependencies
Has Serverless function protection
Has API security discovery
Has AI workload and model posture checks
Missing Developer-facing fixes in pull requests
Missing Modular licensing by capability
Visit Profile
Wiz
Wiz

by Google

No reviews yet

Wiz is a cloud security platform (CNAPP) that scans AWS, Azure and Google Cloud without agents. Part of Google Cloud, sold by quote to security teams.

Features

Has Posture, workload and entitlement modules in one platform
Has Agentless workload vulnerability scanning
Has Runtime threat detection with a workload sensor
Has Container and Kubernetes runtime protection
Has Container image scanning in CI pipelines and registries
Has Code-to-cloud tracing of findings
Has Secrets detection in code and workloads
Has Unified security graph across cloud resources
Has Toxic combination detection
Has Cloud detection and response (CDR)
Has Data security posture management (DSPM) module
Has Software composition analysis for open-source dependencies
Has Serverless function protection
Has API security discovery
Has AI workload and model posture checks
Has Developer-facing fixes in pull requests
Has Modular licensing by capability
Visit Profile
0 selected