Cloud workload protection
Runtime protection for virtual machines, containers, Kubernetes and serverless functions.
5 vendors · alphabetical, never ranked
- Aqua SecurityAqua Security sells a cloud native application protection platform that scans code, images and cloud workloads before deployment and enforces policy on running containers, virtual machines and serverless functions at runtime, along with a separate module for AI usage governance.Privately held
- Orca SecurityOrca Security sells a cloud security platform covering cloud posture, AI system discovery, code scanning, workload protection and cloud threat detection and response.Ownership not established
- PlerionPlerion sells a cloud and AI security platform that maps cloud assets, identities, permissions and workloads into a single graph across AWS, Azure and GCP, with an AI agent that prioritizes exploitable risks and carries out fixes.Ownership not established
- UptycsUptycs sells a cloud-native application protection platform that correlates telemetry from cloud services, Kubernetes, containers and endpoint laptops to detect threats, misconfigurations and vulnerabilities from a single data model, with a separate module for agentless workload scanning.Ownership not established
- WizWiz sells a cloud and AI security platform that connects code, cloud and runtime data into a single graph, with separate modules for cloud posture and workload scanning, code and pipeline scanning, and runtime threat detection.Owned by Google since 2026
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.