Cloud detection and response
Detection, investigation and response built on cloud control-plane logs and runtime signals.
8 vendors · alphabetical, never ranked
- MitigaMitiga sells a breach prevention platform that captures activity across cloud, SaaS, AI and identity systems, reconstructs attacker behavior into a single attack sequence, and works to contain attacks before they cause impact, with separate detection and response modules for cloud, SaaS and AI.Ownership not established · primary category
- Orca SecurityOrca Security sells a cloud security platform covering cloud posture, AI system discovery, code scanning, workload protection and cloud threat detection and response.Ownership not established
- PermisoPermiso sells an identity security platform built on a graph that connects every human, non-human and AI identity to the credentials, machines and actions tied to it, used to inventory identities, assess their exposure and detect identity-driven attacks across cloud, SaaS and on-premises environments.Owned by Okta since 2026
- Skyhawk SecuritySkyhawk Security sells a cloud threat detection and response platform whose Autonomous Purple Team ingests findings from a customer's existing cloud security tools and tests them against a digital twin of the production environment to confirm which ones are actually exploitable.Privately held · primary category
- Stream.SecurityStream.Security sells an AI-native cloud detection and response platform that models a customer's cloud environment in real time and autonomously prevents, detects and remediates exposures and threats.Privately held · primary category
- UptycsUptycs sells a cloud-native application protection platform that correlates telemetry from cloud services, Kubernetes, containers and endpoint laptops to detect threats, misconfigurations and vulnerabilities from a single data model, with a separate module for agentless workload scanning.Ownership not established
- Vectra AIVectra AI sells the Vectra AI Platform, a network detection and response product that analyzes traffic, identity systems and cloud activity to surface attacker behavior such as lateral movement and compromised credentials.Ownership not established
- WizWiz sells a cloud and AI security platform that connects code, cloud and runtime data into a single graph, with separate modules for cloud posture and workload scanning, code and pipeline scanning, and runtime threat detection.Owned by Google since 2026
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.