Skip to content
Find Cloud Security

Cloud security vendor profiles: facts, strengths and limits

By The Cloud Map Desk. Published , updated .

Desk research from public vendor pages. Vendor facts read September 2026, updated 2026-11-03. Profiles follow our published method; we did not run the products.

Which vendors are profiled?

  • A cloud native security platform built around kernel-layer runtime enforcement, with agentless posture visibility, for public, private and disconnected environments.

    Agentless parts, agent for depth

    Clouds named: AWS, Azure, GCP, OCI, Alibaba

    Partly published

  • CrowdStrike's cloud security module, which pairs agentless posture with the same Falcon sensor used on endpoints.

    Agentless parts, agent for depth

    Clouds named: AWS, Azure, GCP, OCI

    Partly published

  • Microsoft's cloud security product: a free posture tier, paid posture and server plans billed per resource, across Azure, AWS and Google Cloud.

    Agentless parts, agent for depth

    Clouds named: Azure, AWS, GCP

    Prices published

  • A cloud security platform built on agentless SideScanning, with an optional runtime sensor, covering posture, workloads, identity, data, vulnerabilities, code and AI.

    Agentless core

    Clouds named: AWS, Azure, GCP, OCI, Alibaba, Tencent

    Partly published

  • Palo Alto Networks' cloud security platform, formed by merging Prisma Cloud with Cortex CDR (announced 13 February 2025).

    Agentless parts, agent for depth

    Clouds named: AWS, Azure, GCP, OCI, Alibaba

    Not published

  • SentinelOne's cloud security line: an agentless CNAPP (Cloud Native Security) plus Cloud Workload Security for runtime.

    Agentless core

    Clouds named: AWS, Azure, GCP

    Not published

  • A cloud security platform with runtime detection built on Falco, the open-source project Sysdig created, plus agentless posture.

    Agentless parts, agent for depth

    Clouds named: AWS, Azure, GCP, OCI

    Partly published

  • A cloud security platform that combines agentless scanning with eBPF runtime sensors, from a company founded in October 2022.

    Agentless parts, agent for depth

    Clouds named: AWS, Azure, GCP, OCI

    Partly published

  • An agentless cloud security platform (Wiz Cloud, Wiz Code, Wiz Defend) built around the Security Graph, part of Google since 11 March 2026.

    Agentless core

    Clouds named: AWS, Azure, GCP, OCI, Alibaba

    Partly published

Which head-to-heads are available?

Aqua Security

CrowdStrike Falcon Cloud Security

Microsoft Defender for Cloud

Orca Security

Palo Alto Networks Cortex Cloud

SentinelOne Singularity Cloud

Sysdig Secure

Upwind

Frequently asked questions

Why are the vendors not ranked?

Because the right vendor depends on your clouds, workloads, agent tolerance and current tools. The finder applies those constraints; a single ranking would hide them.

Which vendors publish a price?

Microsoft Defender for Cloud publishes per-resource pricing; Aqua Security, CrowdStrike Falcon Cloud Security, Orca Security, Sysdig Secure, Upwind and Wiz publishes its licensing unit; the other two quote through sales.

How often are profiles updated?

When a vendor publishes a change that affects a fact we record. Every fact shows the date we read its source.