Cloud-native application protection (CNAPP)
Platforms that combine posture, workload, identity and code-to-cloud risk analysis for cloud environments in one product.
8 vendors · alphabetical, never ranked
- Aqua SecurityAqua Security sells a cloud native application protection platform that scans code, images and cloud workloads before deployment and enforces policy on running containers, virtual machines and serverless functions at runtime, along with a separate module for AI usage governance.Privately held · primary category
- Data TheoremData Theorem sells a set of application security products covering API discovery and runtime protection, code testing (SAST, SCA and SBOM management), cloud-native application testing, and mobile app testing and runtime protection.Ownership not established
- Orca SecurityOrca Security sells a cloud security platform covering cloud posture, AI system discovery, code scanning, workload protection and cloud threat detection and response.Ownership not established · primary category
- Palo Alto NetworksPalo Alto Networks sells network security, security operations, cloud security and identity security products, including firewalls, threat prevention, cloud posture and workload protection, and privileged access management.Public (NASDAQ: PANW)
- PlerionPlerion sells a cloud and AI security platform that maps cloud assets, identities, permissions and workloads into a single graph across AWS, Azure and GCP, with an AI agent that prioritizes exploitable risks and carries out fixes.Ownership not established · primary category
- Trend MicroTrend Micro sells TrendAI Vision One, an enterprise cybersecurity platform covering cloud, endpoint, email, identity and network security, alongside a separate consumer security line.Public (TSE: 4704)
- UptycsUptycs sells a cloud-native application protection platform that correlates telemetry from cloud services, Kubernetes, containers and endpoint laptops to detect threats, misconfigurations and vulnerabilities from a single data model, with a separate module for agentless workload scanning.Ownership not established · primary category
- WizWiz sells a cloud and AI security platform that connects code, cloud and runtime data into a single graph, with separate modules for cloud posture and workload scanning, code and pipeline scanning, and runtime threat detection.Owned by Google since 2026 · primary category
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.