Skip to content
ITSecureOps

Network, Email & Cloud Security

Cloud Security software

CSPM, CNAPP and workload protection tools that find misconfigurations and threats across AWS, Azure and Google Cloud.

Vendors to know
10
Reviews
0
Comparisons
0
Guides and articles
0
Build a shortlistSee vendors

Cloud Security vendors to know

Established leaders, challengers, newer entrants and the tools practitioners recommend to each other. Being listed is not a ranking or an endorsement, and no vendor paid to appear.

  • Wiz

    Wiz (Google Cloud)

    Established leader

    Agentless multi-cloud CNAPP now owned by Google after its $32 billion acquisition; named a Leader in the Forrester Wave for CNAPP, Q1 2026.

    Official site

  • Cortex Cloud

    Palo Alto Networks

    Established leader

    Successor to Prisma Cloud, merging CNAPP with cloud detection and response on the Cortex platform; named a 2025 KuppingerCole CNAPP Leadership Compass Leader.

    Official site

  • CrowdStrike Falcon Cloud Security

    Established leader

    Extends Falcon EDR's single-agent architecture into runtime cloud workload protection; named a 2025 KuppingerCole CNAPP Leadership Compass Leader.

    Official site

  • Microsoft Defender for Cloud

    Established leader

    Free foundational CSPM tier with paid Defender workload plans, strongest for Azure-heavy estates; named a 2025 KuppingerCole CNAPP Leadership Compass Leader.

    Official site

  • Orca Security

    Challenger

    Agentless multi-cloud CNAPP using patented SideScanning technology, positioned as the main agentless alternative to Wiz.

    Official site

  • Sysdig Secure

    Challenger

    Container and Kubernetes-first CNAPP built on open-source Falco with eBPF sensors; named a Leader in the Forrester Wave for CNAPP, Q1 2026.

    Official site

  • Lacework FortiCNAPP

    Fortinet

    Challenger

    Behavioral anomaly-based CNAPP acquired by Fortinet in 2024 and integrated with the Fortinet Security Fabric; a 2025 KuppingerCole Leadership Compass Leader.

    Official site

  • Aqua Security

    Emerging

    Container lifecycle security pioneer built on the open-source Tracee engine, now repositioning around agentic remediation tools like Aqua Compass.

    Official site

  • Tenable Cloud Security

    Emerging

    Identity-first CNAPP built from the 2023 Ermetic acquisition, emphasizing CIEM alongside vulnerability and exposure management.

    Official site

  • Prowler

    Prowler (open source)

    Community favourite

    Open-source CSPM CLI covering AWS, Azure, GCP and Kubernetes against CIS, NIST and PCI-DSS benchmarks, widely used by practitioners for free multi-cloud audits.

    Official site

Reviews for this category are in progress.