Skip to content
Find Cloud Security

Oracle, Alibaba and Tencent Cloud: which cloud security vendors name them

By The Cloud Map Desk. Published , updated .

Desk research from public vendor pages. Vendor facts read September 2026, updated 2026-11-03. Profiles follow our published method; we did not run the products.

Coverage, 3 min read.

Why does the cloud list matter?

A cloud security tool reads each provider through that provider's APIs. Supporting a cloud means building and maintaining that integration: its resource types, its permission model, its logs. A vendor that covers AWS well does not automatically cover Oracle Cloud or Alibaba Cloud. If you run a workload there, the cloud list is a filter before any other comparison.

What do the nine vendors' pages say?

From pages read in September 2026 and updated on 3 November 2026:

  • Orca Security: AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud and Tencent Cloud.
  • Aqua Security: AWS, Azure, GCP, Oracle and Alibaba Cloud, plus private cloud and disconnected environments.
  • Cortex Cloud: AWS, Azure, Google Cloud, OCI and Alibaba Cloud.
  • CrowdStrike: AWS, Azure, Google Cloud and OCI.
  • Sysdig: AWS, GCP and Azure for all agentless features; Oracle Cloud for agentless posture only.
  • Upwind: AWS, Google Cloud, Azure and OCI, named as partnerships.
  • Wiz: AWS, Azure, Google Cloud, OCI and Alibaba Cloud; Tencent Cloud is not named. Wiz states it remains multicloud after Google completed its acquisition on 11 March 2026.
  • Microsoft Defender for Cloud: Azure, AWS and Google Cloud, plus on-premises machines through Azure Arc.
  • SentinelOne: AWS, Azure, GCP "and many other cloud environments".

Where do the lists still differ?

Not necessarily. It means the pages we read do not say. The differences that remain are at the edges: only Orca names Tencent Cloud, Alibaba Cloud is named by Orca, Aqua, Cortex Cloud and Wiz, and Sysdig limits Oracle Cloud to posture. If you run one of those clouds, ask each vendor for a written list of what is covered there: posture only, or workloads, identities and data too.

How does the finder treat this?

The finder's first check compares the clouds you pick with the clouds each vendor names. All named is a match, some is a partial match, none is a mismatch, and a vendor whose pages do not list clouds gets Not in our sources, which counts zero rather than against it. Since every vendor now names the three largest clouds, the check mostly separates vendors when you pick Oracle, Alibaba or Tencent Cloud. The rules are published.

What to ask

  • Which clouds are supported, by name, and at which level: posture only, or workloads, identities and data too?
  • Are regions such as China regions or government clouds covered?
  • Is support for a smaller cloud on the same release cycle as AWS, Azure and Google Cloud?
  • Is it included in the price or an add-on?

If you run only one of the big three

The cloud list matters less, and other constraints, such as agents, existing products and price visibility, decide more. Run the finder with one cloud selected and the order changes.

Sources