Security category

Cloud Security & CNAPP

Unify posture, workload, and entitlement protection across multi-cloud environments.

What this category includes

  • Discovery and inventory of the assets, identities, or data in scope
  • Policy and control enforcement aligned to your risk appetite
  • Detection, prioritization, and response workflows
  • Reporting and evidence for audit and executive stakeholders
  • Integration with your existing security and IT stack

Why it matters now

Buying pressure in this category is rising as environments change faster than control coverage. Teams that define requirements before engaging vendors move faster and negotiate from a stronger position.

Common buyer triggers

  • An audit finding or regulatory deadline
  • A security incident or near miss
  • Tool consolidation or renewal pressure
  • A major platform, cloud, or AI adoption program
  • Headcount constraints driving automation or managed coverage

Key capabilities to evaluate

  • Coverage breadth across your actual environment, not the demo environment
  • Accuracy and tuning effort in the first 90 days
  • Workflow fit with your ticketing and ownership model
  • Deployment effort and time to first measurable value
  • Commercial model that scales predictably with growth

Questions to ask vendors

  • What does a realistic 90-day rollout look like for an organization our size?
  • Which of these capabilities are generally available today versus on the roadmap?
  • How is pricing metered, and what causes it to increase?
  • What do we lose if we leave — and how portable is our data and configuration?

Featured vendors

Adaptive Shield logo

Adaptive Shield

Cloud Security & CNAPP

Businesses today run nearly every facet of their operations using a wide array of interconnected cloud services.

adaptive-shield.comopens in a new tab
EstablishedSaaS Security Posture ManagementSaaS Security Posture Management (SSPM)
View Vendor Profile
Aqua Security logo

Aqua Security

Cloud Security & CNAPP

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction.

aquasec.comopens in a new tab
EstablishedCloud SecurityCloud Infrastructure Security
View Vendor Profile
BitGlass (has joined Forcepoint) logo

BitGlass (has joined Forcepoint)

Cloud Security & CNAPP

Bitglass’ Total Cloud Security Platform is the only secure access service edge offering that combines a Gartner-MQ-Leading cloud access security broker, the world’s only on-device secure web gateway, and zero-trust netwo…

bitglass.comopens in a new tab
EstablishedCASBCloud Access Security Broker
View Vendor Profile
Cato Networks logo

Cato Networks

Cloud Security & CNAPP

Cato is the world’s first SASE platform, converging SD-WAN and network security into a global, cloud-native service.

catonetworks.comopens in a new tab
EstablishedSecure Access Service Edge (SASE)SD-WAN
View Vendor Profile
Clearedin logo

Clearedin

Cloud Security & CNAPP

Clearedin’s Cloud Security platform delivers 4 channels of phishing protection for all popular B2B software platforms: chat, email, collaboration, and file sharing.

clearedin.comopens in a new tab
EstablishedCloud SecurityCollaboration App Security
View Vendor Profile
Cyber Observer logo

Cyber Observer

Cloud Security & CNAPP

Cyber Observer is the premier critical controls monitoring (CCM) solution that simplifies the way cybersecurity tools are monitored and managed.

cyber-observer.comopens in a new tab
EstablishedContinuous Controls Monitoring (CCM)
View Vendor Profile
Devo logo

Devo

Cloud Security & CNAPP

Devo is the only cloud-native logging and security analytics platform that releases the full potential of your data to empower bold, confident action.

devo.comopens in a new tab
EstablishedSIEMLog Management
View Vendor Profile
Grip Security logo

Grip Security

Cloud Security & CNAPP

Grip brings the industry’s most comprehensive visibility across all enterprise SaaS applications--known or unknown for apps, users, and their basic interactions with extreme accuracy to minimize false positives.

grip.securityopens in a new tab
EstablishedSaaS Security Posture ManagementSaaS Security Posture Management (SSPM)
View Vendor Profile
Orca Security logo

Orca Security

Cloud Security & CNAPP

Orca Security, the cloud security innovation leader, provides cloud-wide, workload-deep security and compliance for AWS, Azure, and GCP ?

orca.securityopens in a new tab
EstablishedCloud SecurityCloud Infrastructure Security
View Vendor Profile
Palo Alto Networks logo

Palo Alto Networks

Cloud Security & CNAPP

Palo Alto Networks, the global cybersecurity leader, is shaping the cloud-centric future with technology that is transforming the way people and organizations operate.

paloaltonetworks.comopens in a new tab
EstablishedEndpoint Protection PlatformSecurity Operating Platform
View Vendor Profile
Palo Alto Networks logo

Palo Alto Networks

Cloud Security & CNAPP

Palo Alto Networks, the global cybersecurity leader, is shaping the cloud-centric future with technology that is transforming the way people and organizations operate.

paloaltonetworks.comopens in a new tab
EstablishedCloud SecurityCloud Infrastructure Security
View Vendor Profile
Sumo Logic logo

Sumo Logic

Cloud Security & CNAPP

Sumo Logic is the pioneer in continuous intelligence, a new category of software, which enables organizations of all sizes to address the data challenges and opportunities presented by digital transformation, modern appl…

sumologic.comopens in a new tab
EstablishedSecurity Information and Event ManagementSIEM
View Vendor Profile
Vanta logo

Vanta

Cloud Security & CNAPP

Our mission at Vanta is to be a layer of trust on top of cloud services, to secure the internet, increase trust in software companies, and keep consumer data safe.

vanta.comopens in a new tab
EstablishedCloud Based Compliance Management SolutionSOC 2
View Vendor Profile
Vectra logo

Vectra

Cloud Security & CNAPP

Vectra® enables enterprises to immediately detect and respond to cyberattacks across cloud, data center, IT and IoT networks.

vectra.aiopens in a new tab
EstablishedNetwork Detection & ResponseNetwork Threat Detection and Response
View Vendor Profile
Vectra logo

Vectra

Cloud Security & CNAPP

Vectra® enables enterprises to immediately detect and respond to cyberattacks across cloud, data center, IT and IoT networks.

vectra.aiopens in a new tab
EstablishedIntrusion Detection System (IDS)Network Detection & Response
View Vendor Profile
Wiz logo

Wiz

Cloud Security & CNAPP

Wiz is a new approach to cloud security that finds the most critical risks and infiltration vectors with complete coverage across the full stack of multi-cloud environments.

wiz.ioopens in a new tab
EstablishedCloud SecurityCloud Infrastructure Security
View Vendor Profile
Zscaler logo

Zscaler

Cloud Security & CNAPP

Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud first world.

zscaler.comopens in a new tab
EstablishedSecure Web GatewaysCloud Internet Security
View Vendor Profile
AppOmni logo

AppOmni

Cloud Security & CNAPP

AppOmni is a leading provider of SaaS Security Management software.

appomni.comopens in a new tab
EstablishedSaaS Security Posture ManagementSaaS Security Posture Management (SSPM)
View Vendor Profile
Obsidian Security logo

Obsidian Security

Cloud Security & CNAPP

Protect your business-critical applications by mitigating threats and reducing risk with Obsidian, the first truly comprehensive security solution for SaaS.

obsidiansecurity.comopens in a new tab
EstablishedSaaS Security Posture ManagementSaaS Security Posture Management (SSPM)
View Vendor Profile
Imperva logo

Imperva

Cloud Security & CNAPP

Imperva is the comprehensive digital security leader on a mission to help organizations protect their data and all paths to it.

imperva.comopens in a new tab
EstablishedApplication SecurityCloud Security
View Vendor Profile
DoControl logo

DoControl

Cloud Security & CNAPP

Modernizing DLP and CASB to secure SaaS data, DoControl is a No-Code SaaS Security Platform, giving organizations the automated, self-service tools they need for SaaS applications data access monitoring, orchestration, a…

docontrol.ioopens in a new tab
EstablishedSaaS Security Posture ManagementSaaS Security Posture Management (SSPM)
View Vendor Profile
Wing Security logo

Wing Security

Cloud Security & CNAPP

SaaS fuels modern organizations and is considered as the new cyber security perimeter.

wing.securityopens in a new tab
EstablishedSaaS Security Posture ManagementSaaS Security Posture Management (SSPM)
View Vendor Profile
Valence Security logo

Valence Security

Cloud Security & CNAPP

Valence is the first SaaS security company to combine SSPM and advanced remediation with business user collaboration to find and fix SaaS security risks.

valencesecurity.comopens in a new tab
EstablishedSaaS SecuritySaaS Security Posture Management - SSPM
View Vendor Profile
AccuKnox logo

AccuKnox

Cloud Security & CNAPP

AccuKnox (www.accuknox.com) provides Zero Trust CNAPP (Cloud Native Application Protection) Platform.

accuknox.comopens in a new tab
EstablishedCloud Native Application Protection Platform - CNAPPZero Trust CNAPP
View Vendor Profile
CYCL CLOUD powered by BugSec logo

CYCL CLOUD powered by BugSec

Cloud Security & CNAPP

At CYCL, we merge cloud security experts with AI-based behavioral detection to form our Cloud Native Managed CDR solution.

cycl.cloudopens in a new tab
EstablishedManaged Cloud Detection and ResponseManaged Wiz
View Vendor Profile
Spin.AI logo

Spin.AI

Cloud Security & CNAPP

Spin.AI is a leading SaaS security company dedicated to protecting mission-critical SaaS applications data, including Google Workspace, Microsoft 365, Salesforce, and Slack.

spin.aiopens in a new tab
EstablishedData Loss Prevention - DLPBackup
View Vendor Profile
Nudge Security logo

Nudge Security

Cloud Security & CNAPP

Nudge Security helps modern organizations manage SaaS security at scale by working with employees, not against them.

nudgesecurity.comopens in a new tab
EstablishedSaaS SecuritySaaS Security Posture Management - SSPM
View Vendor Profile
Chainguard logo

Chainguard

Cloud Security & CNAPP

Founded by the industry's leading experts on open source software, security and cloud native development, we provide secure container images with low-to-no CVEs.

chainguard.devopens in a new tab
EstablishedContainer SecurityOpen Source Security
View Vendor Profile
Veracode logo

Veracode

Cloud Security & CNAPP

Gartner defines the Application Security Testing (AST) market as tools and services that analyze and test applications for vulnerabilities.

veracode.comopens in a new tab
EstablishedApplication Security - AppSecAppSec
View Vendor Profile
Risk Ledger logo

Risk Ledger

Cloud Security & CNAPP

Risk Ledger is a pioneering third-party risk management platform that revolutionises supply chain security through a powerful, unified solution.

riskledger.comopens in a new tab
EstablishedThird Party Risk Management - TRPMGRCSPM - GRC Security Posture Management
View Vendor Profile

Emerging vendors from Breach Tank

Early-stage companies surfaced through Breach Tank pitch sessions. Inclusion is for discovery, not endorsement.

Featured Breach Tank startups will appear here soon. Visit breachtank.com to see the latest pitches.

Get a Cloud Security & CNAPP buying roadmap.

We will map the category, shortlist vendors matched to your environment, and coordinate evaluations.