Skip to content
Find Cloud Security

Cloud security tools for AI security (2026): which vendors' facts fit

The vendor states AI security coverage.

How we match

By The Cloud Map Desk. Published , updated .

Desk research from public vendor pages. Vendor facts read September 2026, updated 2026-11-03. Profiles follow our published method; we did not run the products.

Aqua Security

aquasec.com

Categories described4 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMNot found*
DSPMNot found*
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI, Alibaba
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedYes
On-premisesYes
Open sourceTrivy
Public priceBy quote

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Aqua Security

GenAI application security from code to runtime, and detection of unsanctioned AI usage.

Source: Aqua cloud native security platform, read .

CrowdStrike Falcon Cloud Security

crowdstrike.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI
Code scanningPartly
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

CrowdStrike Falcon Cloud Security

AI-SPM covers AI infrastructure.

Source: CrowdStrike Falcon Cloud Security, read .

Orca Security

orca.security

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP, OCI, Alibaba, Tencent
Code scanningYes
AI securityYes
FedRAMPModerate
Air-gappedNot stated
On-premisesYes
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Orca Security

AI-SPM inventory of models, pipelines, training datasets and AI packages, shadow AI discovery, MCP server monitoring and AI AppGen Security.

Source: Orca AI security, read .

Palo Alto Networks Cortex Cloud

paloaltonetworks.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI, Alibaba
Code scanningYes
AI securityYes
FedRAMPNot stated
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceNot published

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Palo Alto Networks Cortex Cloud

AI-SPM maps models, datasets and agents, flags model poisoning and supply chain risk, and classifies data used for RAG.

Source: Cortex Cloud AI-SPM, read .

SentinelOne Singularity Cloud

sentinelone.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceNot published

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

SentinelOne Singularity Cloud

AI-SPM for AI models, services and data pipelines.

Source: SentinelOne Singularity Cloud, read .

Sysdig Secure

sysdig.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI
Code scanningPartly
AI securityYes
FedRAMPNot stated
Air-gappedNot stated
On-premisesNot stated
Open sourceFalco
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Sysdig Secure

AI workload security, integrated into Sysdig's CNAPP, covers AI engines such as Amazon Bedrock, OpenAI and Vertex AI, and AI coding agents.

Source: AI Workload Security | Sysdig, read .

Upwind

upwind.io

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI
Code scanningYes
AI securityYes
FedRAMPIn progress
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Upwind

AI inventory, AI-BOM, AI-SPM, an AI sensor, AI detection and response, and offensive testing for models, agents and MCP servers.

Source: Upwind AI security platform, read .

Wiz

wiz.io

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP, OCI, Alibaba
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Wiz

Agentless AI-BOM across SageMaker, OpenAI, Bedrock and Vertex AI, AI attack paths, and runtime detection of prompt injection and rogue agents.

Source: Wiz AI-SPM, read .

Not stated by

Microsoft Defender for Cloud

Not stated in our sources does not mean the capability is unavailable.