Skip to content
Find Cloud Security

What cloud security vendors publish about price: nine vendors checked

By The Cloud Map Desk. Published , updated .

Desk research from public vendor pages. Vendor facts read September 2026, updated 2026-11-03. Profiles follow our published method; we did not run the products.

Pricing, 4 min read.

What did we find?

From pages read in September 2026 and on 11 October 2026:

  • Microsoft Defender for Cloud: Foundational CSPM is free. Defender CSPM is $5.11 per billable resource per month (8 functions or web apps count as 1 resource). Defender for Servers is $4.906 per server per month for Plan 1 and $14.60 for Plan 2. Defender for Containers is $6.8693 per vCore per month. USD list prices, East and Central US; free for the first 30 days.
  • Wiz: Wiz's own pages we read publish no price. AWS Marketplace, 12-month contract: Wiz Essential (protect 100 cloud workloads) $24,000.00; Wiz Advanced (protect 100 cloud workloads) $38,000.00; add-ons: Wiz Sensor (100 sensors, for Wiz Advanced) $28,000.00, Wiz Code (100 licenses) $58,500.00, Wiz Defend (ingest 300 GB of logs per month, for Wiz Advanced) $18,000.00. The listing also offers 24-month and 36-month contracts, and a free trial on terms set by the vendor.
  • Orca Security: Orca's own site publishes no price (orca.security/pricing returned a 404 on 27 September 2026). An AWS Marketplace contract listing (Unique Expansion) shows Small, up to 100 concurrent workloads (EC2) per month, $7,000.00; Small-medium (300) $12,000.00; Medium (500) $17,000.00; Large (1,000) $30,000.00. These are monthly prices under the listing's 1-month contract, checked on 4 November 2026. The listing also offers a 12-month contract.
  • CrowdStrike Falcon Cloud Security: AWS Marketplace pay-as-you-go listing that combines Falcon Cloud Security with Next-Gen SIEM: runtime host protection (EC2, WorkSpaces) $0.023 per hour per running host; container cluster and node protection $0.054 per hour per running worker node; Fargate container protection $0.01 per hour per Fargate instance; 30-day free trial with up to $500 in usage credits. CrowdStrike's own pricing page lists endpoint bundles only.
  • Upwind: No price on upwind.io. AWS Marketplace, 12-month contract: Upwind Cloud Security Platform $30,000.00 and Upwind Managed Detection and Response 24/7 Service $6,000.00; the unit basis is not described in our notes. 24-month and 36-month contracts are listed as saving up to 8% and 11%.
  • Sysdig Secure: No list prices on its own site; CNAPP licensing is based on the number of hosts. AWS Marketplace (Sysdig Cloud Security and Observability), 1-month contract: CNAPP Enterprise $72.00 per unit per month; the unit is not described in our notes. 12-month contracts are listed as saving up to 17%.
  • Aqua Security: No list prices. Cloud Security is priced by number of workloads (EC2 instances, Fargate containers, Lambda functions) and Dev Security by number of code repositories; request a trial or demo.
  • Cortex Cloud and SentinelOne: no public price found; contact sales.

How should you read marketplace prices?

A marketplace price is a public figure for one listing, not a quote. Units differ: Wiz prices per 100 cloud workloads, Orca per tier of concurrent workloads, CrowdStrike per running host or node per hour, and the Sysdig and Upwind listings do not describe their unit in our notes. Contract terms differ too, from pay as you go to 12-month contracts. Compare like with like, and ask each vendor what one unit covers.

Why do so few publish prices?

Platform deals are usually priced on a unit (resources, workloads, hosts) with discounts by volume and term, and bundles differ by which categories are included. Vendors prefer to quote. That is common in enterprise security, and it is not a sign of anything wrong. It does mean a buyer cannot compare cost from public pages.

What should you ask for instead?

  1. The pricing unit: per resource, per workload, per host, per account, per vCPU, or a platform fee.
  2. What counts as one unit, with examples. Microsoft's eight-functions-per-unit rule is the kind of detail that changes a bill.
  3. Which categories are in the quoted bundle and which are add-ons.
  4. How the price changes when the estate grows or shrinks mid-term.
  5. What a trial or proof of concept costs, if anything.

How does price enter the finder?

Only for small teams. If you answer one or two people, the finder adds a check called Price you can check without a sales call: a match for Defender for Cloud, a partial match for vendors with a public marketplace price or a published pricing unit, and Not in our sources for Cortex Cloud and SentinelOne. For larger teams price is left out, because a procurement process will get quotes anyway. The rules are published.

Sources