Skip to content
Find Cloud Security

Cloud security tools for Kubernetes (2026): which vendors' facts fit

The vendor states Kubernetes runtime coverage.

How we match

By The Cloud Map Desk. Published , updated .

Desk research from public vendor pages. Vendor facts read September 2026, updated 2026-11-03. Profiles follow our published method; we did not run the products.

Aqua Security

aquasec.com

Categories described4 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMNot found*
DSPMNot found*
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI, Alibaba
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedYes
On-premisesYes
Open sourceTrivy
Public priceBy quote

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Aqua Security

Runtime enforcement for containers that blocks attacks without killing the container.

Source: Aqua cloud native security platform, read .

CrowdStrike Falcon Cloud Security

crowdstrike.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI
Code scanningPartly
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

CrowdStrike Falcon Cloud Security

Workload protection for cloud workloads through the Falcon sensor and agentless scanning.

Source: CrowdStrike Falcon Cloud Security, read .

Orca Security

orca.security

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP, OCI, Alibaba, Tencent
Code scanningYes
AI securityYes
FedRAMPModerate
Air-gappedNot stated
On-premisesYes
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Orca Security

Container and Kubernetes security is listed as a module; the Orca Sensor runs on Kubernetes.

Source: Orca runtime sensor, read .

SentinelOne Singularity Cloud

sentinelone.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceNot published

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

SentinelOne Singularity Cloud

Cloud Workload Security covers running containers.

Source: SentinelOne Singularity Cloud, read .

Sysdig Secure

sysdig.com

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI
Code scanningPartly
AI securityYes
FedRAMPNot stated
Air-gappedNot stated
On-premisesNot stated
Open sourceFalco
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Sysdig Secure

Runtime detection for containers and Kubernetes built on Falco.

Source: Sysdig Secure, read .

Upwind

upwind.io

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless + agent
Clouds namedAWS, Azure, GCP, OCI
Code scanningYes
AI securityYes
FedRAMPIn progress
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Upwind

Container and Kubernetes security is listed, with eBPF sensors.

Source: Upwind homepage, read .

Wiz

wiz.io

Categories described6 of 6
CNAPPYes
CSPMYes
CWPPYes
CIEMYes
DSPMYes
Vulnerability managementYes
AgentsAgentless core
Clouds namedAWS, Azure, GCP, OCI, Alibaba
Code scanningYes
AI securityYes
FedRAMPHigh
Air-gappedNot stated
On-premisesNot stated
Open sourceNone named
Public priceMarketplace listing

* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.

Wiz

Kubernetes file integrity monitoring and drift detection in Wiz Defend.

Source: Wiz Defend and Wiz Sensor, read .

Not stated by

Microsoft Defender for Cloud, Palo Alto Networks Cortex Cloud

Not stated in our sources does not mean the capability is unavailable.