CSPM Tools

Compare 158 cspm tools tools to find the right one for your needs

📂 Subcategories

🔧 Tools

Compare and find the best cspm tools for your needs

Cyscale

The Cloud Visibility and Control Platform.

A CSPM platform that provides visibility, security, and compliance for multi-cloud environments.

View tool details →

Drata

Automate your compliance. Build trust.

A leading security and compliance automation platform with a focus on continuous monitoring.

View tool details →

JupiterOne

The Cyber Asset Attack Surface Management Platform.

A CAASM platform that provides visibility and context into cyber assets.

View tool details →

Wiz

The Cloud Security Platform.

Agentless, graph-based cloud security platform for comprehensive risk assessment.

View tool details →

CrowdStrike Falcon Cloud Security

Modern Security From Code to Cloud.

A CNAPP that extends CrowdStrike's leading endpoint security to protect the entire cloud estate.

View tool details →

JupiterOne

The Cyber Asset Attack Surface Management (CAASM) Platform.

A CAASM platform that provides visibility and security for your entire cyber asset landscape.

View tool details →

Ermetic

The Cloud Native Application Protection Platform.

A CNAPP that focuses on cloud infrastructure security and identity governance.

View tool details →

JupiterOne

The Cyber Asset Attack Surface Management Platform.

A CAASM platform that provides a unified view of your cyber assets and their relationships.

View tool details →

Cyscale

The Cloud Visibility and Security Platform.

Automated cloud security and compliance for multi-cloud environments.

View tool details →

Orca Security

The agentless-first cloud security platform.

An agentless CNAPP that provides 100% coverage of cloud assets without the overhead of agents.

View tool details →

Runecast

Automated Proactive Audits for Your Hybrid Cloud.

A proactive hybrid cloud security and operations platform.

View tool details →

Ermetic

The Cloud Native Application Protection Platform.

A comprehensive cloud security platform that provides a holistic, multi-cloud protection with an identity-first approach.

View tool details →

Ermetic

The Cloud Infrastructure Security Platform.

A unified platform for cloud security, from permissions to posture.

View tool details →

Wiz

Secure everything you build and run in the cloud.

A CNAPP platform that provides full-stack visibility of cloud risks.

View tool details →

Lacework

The data-driven security platform for the cloud.

A CNAPP that uses a Polygraph Data Platform to automate cloud security and threat detection.

View tool details →

Runecast

Automated Hybrid Cloud Security and Compliance.

A proactive security and compliance platform for hybrid and multi-cloud environments.

View tool details →

CrowdStrike Falcon Horizon

Cloud Security Posture Management.

A CSPM solution that provides visibility and control over multi-cloud environments.

View tool details →

Wiz

Secure everything you build and run in the cloud.

A comprehensive CNAPP solution that provides full-stack visibility and security for cloud environments.

View tool details →

CrowdStrike Falcon Cloud Security

Total visibility and protection for your entire cloud estate.

A CNAPP that extends CrowdStrike's endpoint security leadership to the cloud.

View tool details →

Snyk

Developer security that works.

A developer-first security platform for finding and fixing vulnerabilities in code, open source dependencies, containers, and IaC.

View tool details →

Orca Security

The Agentless Cloud Security Platform.

An agentless CNAPP that provides 100% visibility into your cloud estate.

View tool details →

Wiz

Secure everything you build and run in the cloud.

A CNAPP platform that provides a unified view of risks across the entire cloud stack.

View tool details →

Vanta

The leading trust management platform.

Automates compliance for standards like SOC 2 and ISO 27001, with integrated CSPM.

View tool details →

CrowdStrike Falcon Cloud Security

Total protection for the cloud generation.

Unified agent-based and agentless protection for multi-cloud environments.

View tool details →

Trend Micro Cloud One - Conformity

Cloud security and compliance posture management.

A powerful CSPM tool focused on continuous compliance and automated remediation.

View tool details →

Orca Security

The Agentless Cloud Security Platform.

An agentless CNAPP that provides deep visibility into cloud environments.

View tool details →

CrowdStrike Falcon Cloud Security

Total visibility and protection for the entire cloud estate.

A comprehensive cloud security solution that provides visibility, threat detection, and response for multi-cloud environments.

View tool details →

Orca Security

Agentless Cloud Security. See everything. Secure everything.

Provides 100% agentless, full-stack visibility into your entire cloud estate.

View tool details →

Datadog Cloud Security Management

Unified security for your entire cloud environment.

A CNAPP that brings together security and observability in a single platform.

View tool details →

Prisma Cloud

The most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive CNAPP from Palo Alto Networks that provides security and compliance from code to cloud.

View tool details →

Sonrai Security

Secure Your Cloud.

A cloud security platform that focuses on identity, data, and workload security.

View tool details →

Orca Security

The Agentless Cloud Security Platform.

An agentless, comprehensive cloud security platform that provides deep visibility and risk analysis.

View tool details →

Sonrai Security

Secure your cloud, identities, and data.

A unified platform for cloud security, focused on identity and data.

View tool details →

Lacework

The data-driven cloud security platform.

A CNAPP that uses data and automation to secure cloud environments.

View tool details →

Check Point CloudGuard

Unified Cloud Native Security.

A unified cloud-native security platform that provides threat prevention and posture management.

View tool details →

Datadog Cloud Security Posture Management

See inside any stack, any app, at any scale, anywhere.

Continuous security and compliance for your cloud infrastructure.

View tool details →

Check Point CloudGuard

Unified Cloud Native Security.

A CNAPP that provides unified security for cloud-native applications and workloads.

View tool details →

Datadog Cloud Security Management

Unified security for your cloud, infrastructure, and applications.

A security and observability platform that provides unified visibility into cloud environments.

View tool details →

Secureframe

The all-in-one platform for security, privacy, and compliance.

Compliance automation platform that helps companies get and stay compliant.

View tool details →

Zscaler Posture Control

Integrated solution to secure cloud-native applications.

A CNAPP that correlates risks across misconfigurations, identities, and entitlements.

View tool details →

Sysdig

Secure and run containers, Kubernetes, and cloud.

A CNAPP that provides deep visibility and security for containers, Kubernetes, and cloud.

View tool details →

Snyk Cloud

Developer security for the cloud.

A developer-first cloud security solution that helps secure the entire SDLC.

View tool details →

Snyk Cloud

Developer security for the cloud.

A developer-focused CNAPP that finds and fixes misconfigurations from code to cloud.

View tool details →

Snyk Cloud (formerly Fugue)

Developer security for the cloud.

A developer-first CNAPP that helps you secure your cloud from code to cloud.

View tool details →

Lacework

The data-driven cloud security platform.

A CNAPP that uses data and machine learning to secure cloud environments.

View tool details →

Lacework

The data-driven cloud security platform.

A CNAPP that uses data and automation to provide visibility, threat detection, and compliance for cloud environments.

View tool details →

Lacework

The Data-Driven Cloud Security Platform.

Automated threat detection and compliance for multi-cloud environments.

View tool details →

Rapid7 InsightCloudSec

Unified cloud security and compliance.

A CNAPP that provides unified visibility, risk management, and compliance for multi-cloud environments.

View tool details →

Cloudanix

CNAPP for Code, Cloud, Workloads and IAM.

A CNAPP that provides a unified solution for securing your code, cloud, workloads, and identities.

View tool details →

Ermetic

The Cloud Infrastructure Security Platform.

A CNAPP that focuses on cloud infrastructure security, particularly identity and access.

View tool details →

Scrut Automation

Security-First GRC for Modern Risk & Compliance.

A compliance automation platform that helps businesses streamline security, risk, and compliance.

View tool details →

Cyscale

The Cloud Visibility and Control Platform.

A cloud security platform that helps organizations to manage their cloud security posture and compliance.

View tool details →

Ermetic

Identity-First Cloud Infrastructure Security.

Now part of Tenable. A comprehensive cloud security platform focused on identity and access governance.

View tool details →

Cyscale

The Cloud Visibility and Control Platform.

A CSPM platform focused on providing a contextualized view of cloud assets and security risks.

View tool details →

Wiz

Secure everything you build and run in the cloud.

A CNAPP platform that provides a unified view of security risks across clouds, containers, and workloads.

View tool details →

CrowdStrike Falcon Horizon

Cloud Security Posture Management. Stop breaches in the cloud.

CSPM solution that provides visibility, threat detection, and compliance for multi-cloud environments.

View tool details →

Sonrai Security

Cloud Security for the Enterprise.

An enterprise cloud security platform focused on identity, data, and workload security.

View tool details →

JupiterOne

The Cyber Asset Attack Surface Management (CAASM) Platform.

A CAASM platform that provides visibility and security analysis across the entire digital environment.

View tool details →

Wiz

Secure everything you build and run in the cloud.

A unified cloud security platform that enables security and development teams to build faster and more securely.

View tool details →

CrowdStrike Falcon Cloud Security

Modern Security From Code to Cloud.

A unified cloud-native application protection platform (CNAPP) that provides comprehensive protection for multi-cloud environments.

View tool details →

Sonrai Security

Secure your cloud.

A cloud security platform focused on identity, data, and workload security.

View tool details →

JupiterOne

The Cyber Asset Attack Surface Management (CAASM) Platform.

A CAASM platform that provides visibility and security for the entire cyber asset landscape, including cloud.

View tool details →

SentinelOne Singularity Cloud Security

AI-Powered Cloud Security.

A CNAPP that provides AI-powered protection, detection, and response for cloud workloads and services.

View tool details →

Rapid7 InsightCloudSec

Unified cloud and container security.

A CNAPP that provides unified visibility and control across multi-cloud environments.

View tool details →

Trend Micro Cloud One - Conformity

Cloud Security and Compliance.

A CSPM tool that provides continuous security, compliance, and governance for multi-cloud environments.

View tool details →

Orca Security

The agentless-first cloud security platform.

An agentless cloud security platform that provides comprehensive visibility and coverage across the entire cloud estate.

View tool details →

Lacework

The data-driven cloud security platform.

A platform that provides automated threat detection, configuration compliance, and vulnerability management.

View tool details →

SentinelOne Singularity Cloud Security

Autonomous security for the cloud.

A comprehensive, cloud-native application protection platform (CNAPP) that combines agentless insights with AI-powered threat protection.

View tool details →

Rapid7 InsightCloudSec

Unified cloud risk management.

A CNAPP that provides continuous security and compliance for multi-cloud environments.

View tool details →

Snyk

Developer security.

A developer-focused security platform that includes CSPM capabilities.

View tool details →

Datadog Cloud Security Management

Unified security for your cloud, applications, and infrastructure.

A security and observability platform that includes CSPM and CWP.

View tool details →

Trend Micro Cloud One - Conformity

Cloud security and compliance posture management.

A continuous security, compliance, and governance tool for your cloud infrastructure.

View tool details →

Datadog Cloud Security Management

Unified security for your entire cloud environment.

Combines security posture management, workload security, and observability in a single platform.

View tool details →

Rapid7 InsightCloudSec

Build cloud security that works for you.

A CNAPP that provides unified visibility, compliance, and threat prevention for multi-cloud environments.

View tool details →

Trend Micro Cloud One - Conformity

Real-time security for your cloud infrastructure.

A CSPM tool that provides continuous security, compliance, and governance for multi-cloud environments.

View tool details →

Snyk Cloud (formerly Fugue)

Developer-first cloud security.

A developer-first cloud security solution that helps you find and fix misconfigurations in your cloud environment.

View tool details →

Datadog Cloud Security Posture Management

Identify misconfigurations in your cloud environment in real time.

A CSPM solution that provides real-time visibility and security for your cloud infrastructure.

View tool details →

Fugue (by Snyk)

Developer security for the cloud.

A cloud security platform that helps developers build and deploy secure cloud infrastructure.

View tool details →

Horangi Warden

Your all-in-one cloud security platform.

A CSPM tool that helps organizations to secure their cloud infrastructure and comply with industry standards.

View tool details →

Trend Micro Cloud One - Conformity

Real-time security for your cloud infrastructure.

Automated compliance and security for your multi-cloud environment.

View tool details →

Rapid7 InsightCloudSec

Unified cloud security and compliance.

Provides continuous security and compliance for complex multi-cloud environments.

View tool details →

Snyk Cloud

Developer security for the cloud.

A developer-focused CNAPP that helps find and fix risks in cloud infrastructure and code.

View tool details →

Sophos Cloud Optix

See and secure your entire cloud infrastructure.

A CSPM and CNAPP that provides visibility, compliance, and threat response for multi-cloud environments.

View tool details →

Rapid7 InsightCloudSec

Unified cloud risk management.

A CNAPP that provides unified visibility, risk assessment, and real-time remediation.

View tool details →

Palo Alto Networks Prisma Cloud

The most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive CNAPP that secures applications from code to cloud across multi-cloud environments.

View tool details →

Tenable Cloud Security

Full lifecycle cloud-native security. From build to runtime.

A CNAPP from the creators of Nessus, focusing on unified visibility and risk assessment.

View tool details →

Sysdig Secure

Secure and run containers, Kubernetes, and cloud services with confidence.

A CNAPP with deep runtime threat detection capabilities powered by Falco.

View tool details →

Datadog Cloud Security Management

Detect threats in real time. Investigate security alerts with rich context.

A security solution integrated into the Datadog observability platform.

View tool details →

Palo Alto Networks Prisma Cloud

The most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive CNAPP that secures applications from code to cloud.

View tool details →

Fortinet FortiCWP

Cloud Workload Protection.

A cloud workload protection service that provides visibility and control over multi-cloud environments.

View tool details →

Sophos Cloud Optix

See more. Secure more.

An agentless CSPM and CNAPP solution that provides visibility, compliance, and threat response.

View tool details →

Tenable Cloud Security

See everything. Predict what matters. Act to address risk.

A CNAPP that provides unified visibility and security for the modern attack surface.

View tool details →

Aqua Security

The Cloud Native Security Platform.

A CNAPP that secures cloud-native applications from development to production.

View tool details →

Trend Micro Cloud One

All-in-one security services platform for cloud builders.

A security services platform that provides comprehensive protection for cloud environments.

View tool details →

Zscaler Posture Control

Comprehensive Cloud-Native Application Protection.

A CNAPP that helps organizations build, run, and secure cloud-native applications.

View tool details →

Microsoft Defender for Cloud

Protect your multi-cloud and hybrid environments.

A CNAPP that provides unified security management and advanced threat protection for hybrid and multi-cloud environments.

View tool details →

Fortinet FortiCWP

Comprehensive Cloud Workload Protection.

A CWPP that provides security and compliance for cloud workloads.

View tool details →

Palo Alto Networks Prisma Cloud

The most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive CNAPP that secures applications from code to cloud.

View tool details →

Zscaler Posture Control

Comprehensive Cloud-Native Application Protection.

A CNAPP that helps organizations secure their cloud-native applications.

View tool details →

Sysdig Secure

Cloud security powered by runtime insights.

A CNAPP that provides deep visibility and security for containers, Kubernetes, and cloud.

View tool details →

Tenable Cloud Security

Secure the entire cloud-native stack.

A CNAPP that provides comprehensive security for cloud-native environments.

View tool details →

Aqua Security

The Cloud Native Security Platform.

A CNAPP that provides full lifecycle security for cloud-native applications.

View tool details →

Varonis Data Security Platform

Automated Data Security.

A data security platform that protects data from the inside out.

View tool details →

Fortinet FortiCNP

Cloud-Native Protection, Simplified.

A CNAPP that provides simplified and automated cloud-native protection.

View tool details →

Sophos Cloud Optix

See and secure your public cloud.

A CSPM and CNAPP solution that provides visibility, compliance, and threat response.

View tool details →

Palo Alto Networks Prisma Cloud

The most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive CNAPP that secures applications from code to cloud.

View tool details →

Microsoft Defender for Cloud

Protect multicloud and hybrid environments with integrated security from Microsoft.

An integrated cloud-native application protection platform (CNAPP) that helps protect applications and infrastructure across hybrid and multicloud environments.

View tool details →

Zscaler Posture Control

Secure your cloud with a unified, 100% agentless platform.

A cloud-native application protection platform (CNAPP) that provides an agentless solution to prioritize and remediate cloud risks.

View tool details →

Sysdig Secure

Secure your cloud from source to run.

A CNAPP that delivers Cloud Detection & Response (CDR), vulnerability management, posture management, and identity & entitlement management.

View tool details →

Fortinet FortiCNP

Cloud-Native Protection, Simplified.

A CNAPP that provides unified visibility and control over cloud security risks.

View tool details →

Cisco Cloud Observability

Full-stack observability for cloud-native applications.

An observability platform that includes cloud security posture management capabilities.

View tool details →

Prisma Cloud by Palo Alto Networks

Complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive cloud security platform that provides security and compliance coverage for the entire cloud-native technology stack, applications, and data.

View tool details →

Palo Alto Networks Prisma Cloud

The most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive Cloud-Native Application Protection Platform (CNAPP) that secures applications from code to cloud.

View tool details →

Check Point CloudGuard

Total Cloud Native Security. From Code to Cloud.

A unified cloud-native security platform that automates security and compliance across multi-cloud environments.

View tool details →

Zscaler Posture Control

Eliminate cloud risk with a unified, 100% agentless platform.

A CNAPP that provides a unified solution for cloud security posture management, workload protection, and more.

View tool details →

Sysdig Secure

Secure and run containers, Kubernetes, and cloud services with confidence.

A cloud-native application protection platform (CNAPP) that provides deep visibility and security for containers, Kubernetes, and cloud.

View tool details →

Tenable Cloud Security

Secure the entire cloud native stack.

A comprehensive cloud security solution that provides visibility and control over cloud environments to reduce risk.

View tool details →

Aqua Security

The Cloud Native Security Platform.

A comprehensive CNAPP that provides full lifecycle security for cloud-native applications.

View tool details →

Prisma Cloud by Palo Alto Networks

The most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive CNAPP that provides security from code to cloud, across multi-cloud and hybrid environments.

View tool details →

Palo Alto Networks Prisma Cloud

The most complete Cloud-Native Application Protection Platform (CNAPP).

Comprehensive security for multi-cloud environments, from code to cloud.

View tool details →

Zscaler Posture Control

Secure your cloud with a unified platform.

A comprehensive CNAPP solution that correlates and prioritizes risks across your cloud.

View tool details →

Sysdig Secure

See, secure, and run your cloud with confidence.

A unified platform for cloud and container security, powered by runtime insights.

View tool details →

Sophos Cloud Optix

See more. Secure more.

AI-powered security and compliance for your public cloud environments.

View tool details →

Tenable Cloud Security

Secure your entire cloud native stack.

A unified platform for cloud security, from IaC to runtime.

View tool details →

Check Point CloudGuard

Unified Cloud Native Security.

A unified cloud native security platform that provides threat prevention and posture management.

View tool details →

Microsoft Defender for Cloud

Unified cloud-native application protection.

A comprehensive security solution for Azure, hybrid, and multi-cloud environments.

View tool details →

Google Cloud Security Command Center

Comprehensive security and risk management for Google Cloud.

A native security and risk management platform for Google Cloud.

View tool details →

Qualys Cloud Platform

The Power of One.

A unified platform for security, compliance, and IT.

View tool details →

Cisco Secure Cloud

Radically simplify cloud security.

A CNAPP that provides unified security for multi-cloud environments.

View tool details →

Check Point CloudGuard

Total Cloud-Native Security.

A comprehensive cloud security platform that provides threat prevention, posture management, and workload protection across multi-cloud environments.

View tool details →

Trend Micro Cloud One

Security for your hybrid cloud.

A unified security services platform for cloud builders.

View tool details →

Tenable Cloud Security

See everything. Predict what matters. Act to address risk.

A comprehensive cloud security solution that provides visibility and control over cloud risks.

View tool details →

Google Cloud Security Command Center

Unified risk management for your Google Cloud environment.

A centralized security and risk management platform for Google Cloud.

View tool details →

Microsoft Defender for Cloud

Protect multicloud and hybrid environments with Microsoft Defender for Cloud.

A comprehensive CNAPP that provides unified security management and advanced threat protection for hybrid and multi-cloud environments.

View tool details →

Google Security Command Center

Unified vulnerability and threat management for Google Cloud.

Google's native security and risk management platform for Google Cloud.

View tool details →

AWS Security Hub

Centrally view and manage security alerts and automate compliance checks.

AWS's native cloud security posture management (CSPM) service.

View tool details →

Tenable.cs

Secure your cloud-native stack.

A developer-friendly, cloud-native security platform that provides visibility and security for the entire software development lifecycle.

View tool details →

Check Point CloudGuard

Unified Cloud Native Security.

Automates security and compliance for multi-cloud environments.

View tool details →

Aqua Security

The Cloud Native Security Platform.

Secures applications from code to cloud, across VMs, containers, and serverless.

View tool details →

Qualys Cloud Platform

The Power of One.

A unified platform for security, compliance, and IT.

View tool details →

Prisma Cloud by Palo Alto Networks

The most complete Cloud-Native Application Protection Platform (CNAPP).

Secures applications from code to cloud across multicloud and hybrid environments.

View tool details →

Microsoft Defender for Cloud

Protect multi-cloud and hybrid environments with integrated security from Microsoft.

A native CNAPP for Azure that also provides CSPM and CWP for AWS and GCP environments.

View tool details →

Google Cloud Security Command Center

Comprehensive security management and data risk platform for Google Cloud.

A native security and risk management platform for Google Cloud, offering CSPM, threat detection, and more.

View tool details →

Qualys Cloud Platform

The single, unified platform for all your security and compliance needs.

A cloud-based platform that provides a unified solution for security and compliance.

View tool details →

Google Cloud Security Command Center

Unified security and risk management for your Google Cloud environment.

A security and risk management platform that provides centralized visibility and control over your Google Cloud resources.

View tool details →

AWS Security Hub

Centrally view and manage security alerts and automate compliance checks.

A cloud security posture management (CSPM) service that provides a comprehensive view of your security alerts and compliance status across your AWS accounts.

View tool details →

Aqua Security

Stop cloud native attacks.

A pioneer in container security, now a full CNAPP focused on the entire application lifecycle.

View tool details →

AWS Security Hub

Centrally view and manage security alerts and automate compliance checks.

A native cloud security posture management (CSPM) service for AWS environments.

View tool details →

AWS Security Hub

Centrally view and manage security alerts and automate compliance checks.

A cloud security posture management (CSPM) service for AWS.

View tool details →

Aqua Security

Stop cloud native attacks.

A comprehensive security platform for cloud-native applications, from code to cloud and back.

View tool details →

Sophos Cloud Optix

See and secure your public cloud.

A CSPM and compliance platform that provides visibility and threat response for cloud environments.

View tool details →

Qualys Cloud Platform

IT, Security and Compliance in a Single App.

A unified platform for IT, security, and compliance, including CSPM.

View tool details →

VMware Tanzu Guardrails

Automated cloud governance and security.

A CSPM solution that automates the enforcement of security and compliance policies.

View tool details →

AWS Security Hub

Centrally view and manage your security posture in AWS.

A cloud security posture management service for AWS.

View tool details →

Sophos Cloud Optix

See it. Secure it. The power of the cloud, secured by Sophos.

An agentless CSPM and security analytics platform for public cloud infrastructure.

View tool details →

Datadog Cloud Security

See inside any stack, any app, at any scale, anywhere.

A unified platform for monitoring, security, and compliance of cloud-native applications and infrastructure.

View tool details →

IBM Cloud Security and Compliance Center

Manage security and compliance for your hybrid multicloud.

A platform for managing security and compliance across hybrid and multi-cloud environments.

View tool details →

BMC Helix Cloud Security

Automated cloud security posture management.

A SaaS-based solution that automates security checks and remediation for cloud resources and containers.

View tool details →