Sysdig Secure: cloud security profile and facts (2026)
Visit Sysdig's siteSysdig Secure
sysdig.com
* Not found on the pages we read; it may exist. Facts as the vendor states them on its own pages and marketplace listings, read September 2026, checked 3 Nov 2026. Not a measure of how well anything works.
Which categories does Sysdig describe?
- Described on the vendor's pages we read
- Not in our sources (it may exist; we did not find it on the pages we read)
- CNAPPDescribed
Sysdig describes Sysdig Secure as a CNAPP.
Source: Sysdig press release: Sysdig Secure AI, read .
- CSPMDescribed
CSPM is listed.
Source: Sysdig Secure, read .
- CWPPDescribed
Runtime threat detection for containers and Kubernetes through the agent.
Source: Sysdig Secure, read .
- CIEMDescribed
Basic CIEM and Advanced CIEM are named.
Source: Sysdig docs: connect cloud accounts, read .
- DSPMDescribed
DSPM is listed.
Source: Sysdig Secure, read .
- Vulnerability managementDescribed
Agentless vulnerability host scanning and agent-based scanning, with in-use prioritization.
Source: Sysdig pricing (re-read), read .
The map shows what each vendor's own pages describe. It is not a measure of how well a feature works.
How does Sysdig deploy?
| Fact | Sysdig |
|---|---|
| Agent approach | Agentless parts, agent for depth Agentless posture covers vulnerabilities, misconfigurations, permissions and threats; process-level analysis needs the agent. Source: Sysdig Secure, read . |
| Runtime sensor | The Sysdig agent with Falco-based detection, showing which packages are in use. Source: Sysdig Secure, read . |
| Clouds named | AWS, Azure, GCP, OCI AWS, GCP and Azure support all of Sysdig's agentless cloud features; Oracle Cloud supports agentless CSPM only. Source: Sysdig docs: connect cloud accounts, read . |
| Private cloud or on-premises | Not in our sources |
| Disconnected environments | Not in our sources |
What else does Sysdig cover?
| Fact | Sysdig |
|---|---|
| Code security | Vulnerability management covers images and workloads; source-code scanning is not a stated focus on the pages we read. Source: Sysdig Secure, read . |
| AI security | AI workload security, integrated into Sysdig's CNAPP, covers AI engines such as Amazon Bedrock, OpenAI and Vertex AI, and AI coding agents. Source: AI Workload Security | Sysdig, read . |
| Kubernetes runtime | Runtime detection for containers and Kubernetes built on Falco. Source: Sysdig Secure, read . |
| Compliance reporting | Out-of-the-box compliance policies include NIST CSF v2.0, NIST SP 800-53 Rev 5, CIS benchmarks, PCI DSS v4.0, HIPAA, ISO/IEC 27001:2022, SOC 2, GDPR, DORA and NIS2. Source: Sysdig docs: compliance, read . |
| Public-sector authorization | Not in our sources |
| Open source | Falco (created by Sysdig, CNCF graduated project) |
What does Sysdig cost?
Not published No list prices on its own site; CNAPP licensing is based on the number of hosts. AWS Marketplace (Sysdig Cloud Security and Observability), 1-month contract: CNAPP Enterprise $72.00 per unit per month; the unit is not described in our notes. 12-month contracts are listed as saving up to 17%.
Source: AWS Marketplace: Sysdig Cloud Security and Observability, read .
Where is Sysdig strong, and where are its limits?
Strengths and limits come from the vendor's own pages and our sources; a limit can be something we did not find.
Strengths
- Runtime detection built on Falco, the CNCF graduated project Sysdig created.
- Uses runtime insight into which packages are in use to filter vulnerabilities in code that never runs.
- Publishes its licensing unit (hosts), so you know what a quote will be based on.
Limits
- Process-level depth needs the agent, and on Oracle Cloud only agentless CSPM is supported.
- List prices are by quote.
What does Sysdig say about itself?
Sysdig says compliance results are displayed about 5 to 10 minutes after connection, varying by the scale of the resources.
Source: Sysdig docs: compliance, read .
What has Sysdig announced recently?
4 Aug 2026
Launched Sysdig Secure AI, an AI-based investigation and response offering that works with the Sysdig Secure CNAPP.
Source: Sysdig press release: Sysdig Secure AI, read .
16 Jun 2026
Named Hatem Naguib CEO; founder Loris Degioanni remains CTO.
Source: Sysdig press release: Hatem Naguib named CEO, read .
6 May 2026
Introduced Headless Cloud Security: CNAPP capabilities delivered as agent skills inside AI coding agents such as Claude Code and Cursor.
Source: Sysdig press release: Headless Cloud Security, read .
Who should shortlist Sysdig?
Consider Sysdig if you run Kubernetes at scale and already know Falco, or if you want vulnerability lists filtered by what actually runs.
In our example finder profiles, Sysdig is in the first group for: AWS and Azure, VMs and containers.
Run the finder with your answersHow does Sysdig compare with each other vendor?
Frequently asked questions
Does Sysdig need an agent?
Agentless parts, agent for depth. Agentless posture covers vulnerabilities, misconfigurations, permissions and threats; process-level analysis needs the agent.
Which clouds does Sysdig name?
AWS, Azure, GCP and OCI. AWS, GCP and Azure support all of Sysdig's agentless cloud features; Oracle Cloud supports agentless CSPM only.
Does Sysdig publish its prices?
No list prices on its own site; CNAPP licensing is based on the number of hosts. AWS Marketplace (Sysdig Cloud Security and Observability), 1-month contract: CNAPP Enterprise $72.00 per unit per month; the unit is not described in our notes. 12-month contracts are listed as saving up to 17%.