Top Free Cloud-Native Application Protection Platform (CNAPP)

How Many Cloud-Native Application Protection Platform (CNAPP) Products Does G2 Track?

Total Products under this Category: 38

Category Stats (Oct 2026)

  • Average Rating: 4.55/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: CrowdStrike Falcon Cloud Security (+0.6%) - Among all products in this category, CrowdStrike Falcon Cloud Security recorded the largest rating increase compared to last month

Last updated: October 01, 2026

How Does G2 Rank Cloud-Native Application Protection Platform (CNAPP) Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 3,500+ Authentic Reviews
  • 38+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Cloud-Native Application Protection Platform (CNAPP)

G2 Grid® for Cloud-Native Application Protection Platform (CNAPP) plotting products by satisfaction and market presence

Highlighted products: Wiz, CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, SentinelOne Singularity Cloud Security, Sysdig Secure, Cortex Cloud, and Aikido Security.

Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=orca-security&focus%5B%5D=sentinelone-singularity-cloud-security&focus%5B%5D=sysdig-sysdig-secure&focus%5B%5D=cortex-cloud&focus%5B%5D=aikido-security)

Wiz

Wiz transforms cloud security for customers – including more than 50% of the Fortune 100 – by enabling a new operating model. With Wiz, organizations can democratize security across the development lifecycle, empowering them to build fast and securely. Its Cloud Native Application Protection Platform (CNAPP) consolidates CSPM, KSPM, CWPP, Vulnerability management, IaC scanning, CIEM, DSPM into a single platform. Wiz drives visibility, risk prioritization, and business agility. Protecting Your Cloud Environments Requires a Unified, Cloud Native Platform. Wiz connects to every cloud environment, scans every layer, and covers every aspect of your cloud security - including elements that normally require installing agents. Its comprehensive approach has all of these cloud security solutions built in. Hundreds of organizations worldwide, including 50 percent of the Fortune 100, to rapidly identify and remove critical risks in cloud environments. Its customers include Salesforce, Slack, Mars, BMW, Avery Dennison, Priceline, Cushman & Wakefield, DocuSign, Plaid, and Agoda, among others. Wiz is backed by Sequoia, Index Ventures, Insight Partners, Salesforce, Blackstone, Advent, Greenoaks, Lightspeed and Aglaé. Visit https://www.wiz.io for more information.

Average Rating: 4.7/5.0

Total Reviews: 841

Who Is the Company Behind Wiz?

  • Seller: Wiz
  • Company Website:
  • Year Founded: 2020
  • HQ Location: New York, US
  • Twitter: @wiz_io
    24,733 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3,147 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CISO, Security Engineer
  • Top Industries: Financial Services, Computer Software
  • Company Size: 53% Large, 39% Medium

What Do G2 Reviewers Say About Wiz?

AI-generated summary from verified user reviews

Pros
  • Users value the robust APIs and user-friendly UI, appreciating ongoing improvements and a wealth of insightful issues.
  • Users value the continuous enhancement of security features by Wiz, appreciating the support and innovation in their tool.
  • Users appreciate the ease of use of Wiz, benefiting from its user-friendly interface and seamless integration.
  • Users value the comprehensive visibility Wiz provides, enhancing security and prioritizing essential aspects of their cloud environment.
  • Users appreciate the easy setup of Wiz, enabling a quick and seamless integration into their workflows.
Cons
  • Users find a significant learning curve in mastering Wiz's extensive features, which can hinder initial usage.
  • Users find the feature limitations of Wiz frustrating, especially with complex management and reporting challenges.
  • Users note that improvement is needed for laggy query responses and better dashboard reporting capabilities.
  • Users identify improvements needed in dashboard reporting and feature streamlining for better usability and budgeting.
  • Users find the interface overwhelming initially, facing a steep learning curve and complex licensing issues.

What Are Recent G2 Reviews of Wiz?

Orca Security

The Orca Cloud Security Platform identifies, prioritizes, and remediates risks and compliance issues in workloads, configurations, and identities across your cloud estate spanning AWS, Azure, Google Cloud, Kubernetes, Alibaba Cloud, and Oracle Cloud. Orca offers the industry’s most comprehensive cloud security solution in a single platform — eliminating the need to deploy and maintain multiple point solutions. Orca is agentless-first, and connects to your environment in minutes using Orca’s patented SideScanning™ technology that provides deep and wide visibility into your cloud environment, without requiring agents. In addition, Orca can integrate with third-party agents for runtime visibility and protection for critical workloads. Orca is at the forefront of leveraging Generative AI for simplified investigations and accelerated remediation – reducing required skill levels and saving cloud security, DevOps, and development teams time and effort, while significantly improving security outcomes. As a Cloud Native Application Protection Platform (CNAPP), Orca consolidates many point solutions in one platform, including: CSPM, CWPP, CIEM, Vulnerability Management, Container and Kubernetes Security, DSPM, API Security, CDR, Multi-cloud Compliance, Shift Left Security, and AI-SPM.

Average Rating: 4.7/5.0

Total Reviews: 313

Who Is the Company Behind Orca Security?

  • Seller: Orca Security
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Portland, Oregon
  • Twitter: @orcasec
    4,835 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    523 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Engineer, Senior Security Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 54% Large, 36% Medium

What Do G2 Reviewers Say About Orca Security?

AI-generated summary from verified user reviews

Pros
  • Users highly value the ease of use of Orca Security, enabling quick setup and intuitive navigation.
  • Users value the great visibility provided by Orca Security, enabling effective vulnerability management and prioritization of alerts.
  • Users value the agentless feature and intuitive interface of Orca Security, enhancing their security management experience.
  • Users praise the visibility provided by Orca Security, gaining comprehensive insights into their cloud environment effortlessly.
  • Users praise Orca Security for its comprehensive security features, offering great visibility and ease of implementation.
Cons
  • Users express concerns about security vulnerabilities, especially regarding API security and detection of vulnerable packages.
  • Users experience dashboard issues like clutter, slow performance, and quirks that hinder efficient navigation and usability.
  • Users face challenges with delayed detection of vulnerabilities, impacting timely response and troubleshooting efforts in Orca Security.
  • Users report many false positives, complicating the assessment of actual vulnerabilities in Orca Security.
  • Users note that the reporting capabilities and customization options of Orca Security need significant improvement.

What Are Recent G2 Reviews of Orca Security?

What Are G2 Users Discussing About Orca Security?

SentinelOne Singularity Cloud Security

Singularity Cloud Security is SentinelOne’s comprehensive, cloud-native application protection platform (CNAPP). It combines the best of agentless insights with AI-powered threat protection, to secure and protect your multi-cloud infrastructure, services, and containers from build time to runtime. SentinelOne’s CNAPP applies an attacker’s mindset to help security practitioners better prioritize their remediation tasks with evidence-backed Verified Exploit Paths™. The efficient and scalable runtime protection, proven over 5 years and trusted by many of the world’s leading cloud enterprises, harnesses local, autonomous AI engines to detect and thwart runtime threats in real-time. CNAPP data and workload telemetry is recorded to SentinelOne’s unified security lake, for easy access and investigation.

Average Rating: 4.9/5.0

Total Reviews: 122

Who Is the Company Behind SentinelOne Singularity Cloud Security?

  • Seller: SentinelOne
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Mountain View, CA
  • Twitter: @SentinelOne
    57,863 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    6,571 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 59% Medium, 30% Large

What Do G2 Reviewers Say About SentinelOne Singularity Cloud Security?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the real-time threat alerts of SentinelOne Singularity Cloud Security, enhancing proactive protection against vulnerabilities.
  • Users appreciate the intuitive and user-friendly interface of SentinelOne Singularity, enhancing security management for everyone.
  • Users value the automated vulnerability detection of PingSafe, enabling proactive security and swift threat identification.
  • Users praise PingSafe for its comprehensive cloud security solutions that enhance threat detection and proactive risk management.
  • Users value the strong visibility and protection offered by SentinelOne Singularity Cloud Security, enhancing their operational efficiency.
Cons
  • Users note the complexity of configuring SentinelOne Singularity Cloud Security, requiring time and experience for effective use.
  • Users find that ineffective alerts require tuning, complicating setup and alignment with organizational workflows.
  • Users find the complex setup of SentinelOne Singularity Cloud Security can be time-consuming and challenging to navigate.
  • Users find the difficult configuration of SentinelOne Singularity Cloud Security can complicate setup and usage experience.
  • Users feel the UI of SentinelOne Singularity is clunky, making the platform harder to navigate and set up.

What Are Recent G2 Reviews of SentinelOne Singularity Cloud Security?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

Cortex Cloud

Cortex Cloud by Palo Alto Networks, the next version of Prisma Cloud, understands a unified security approach is essential for effectively addressing AppSec, CloudSec, and SecOps. Connecting cloud security and SOC workflows enables teams to achieve holistic visibility, trace risk across the lifecycle, and correlate real-time threat activity with development and runtime contexts. Cortex Cloud is a unified platform built on three core pillars: data integration, AI-driven intelligence, and automation. Now you can safeguard applications, data, and infrastructure across multicloud and hybrid environments with a unified data model that consolidates telemetry from code, runtime, identity, and endpoints, all into a single data source. Empower teams with precise, AI-powered insights and 2200+ machine learning models to identify and stop zero-day threats with real-time advanced threat detection and response. And automate with 1000+ prebuilt playbooks across your cloud stack to reduce manual workloads, accelerate remediations, and cut response times tenfold. Cortex Cloud delivers more than tools—it transforms how organizations secure their cloud environments.

Average Rating: 4.1/5.0

Total Reviews: 125

Who Is the Company Behind Cortex Cloud?

  • Seller: Palo Alto Networks
  • Company Website:
  • Year Founded: 2005
  • HQ Location: Santa Clara, CA
  • Twitter: @PaloAltoNtwks
    128,951 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    23,492 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 38% Large, 32% Medium

What Do G2 Reviewers Say About Cortex Cloud?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Cortex Cloud, benefiting from its streamlined interface and centralized management.
  • Users value the user-friendly interface and seamless integrations of Cortex Cloud, enhancing efficiency and incident management.
  • Users value the comprehensive security overview of Cortex Cloud, enhancing protection across all environments and stages.
  • Users value the comprehensive visibility provided by Cortex Cloud, enhancing efficiency and simplifying incident management.
  • Users appreciate the secure and centralized cloud integration of Cortex Cloud, enhancing efficiency and organization in their processes.
Cons
  • Users find Cortex Cloud to be expensive, particularly challenging for smaller teams with limited budgets.
  • Users find the difficult learning curve of Cortex Cloud frustrating, especially for beginners navigating its features.
  • Users face a steep learning curve with Cortex Cloud, as some features are not intuitive for beginners.
  • Users find the pricing issues with Cortex Cloud significant, especially affecting smaller teams considering affordability.
  • Users find the complex setup of Cortex Cloud challenging, especially for newcomers without prior experience.

What Are Recent G2 Reviews of Cortex Cloud?

Aikido Security

Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido helps teams of any size ship secure software faster, automate protection, and simulate real-world attacks with AI-driven precision. The platform’s proprietary AI cuts noise by 95%, delivers one-click fixes, and saves developers 10+ hours per week. Aikido Intel proactively uncovers vulnerabilities in open source packages before disclosure, helping secure more than 50,000 organizations worldwide, including Revolut, Niantic, Visma, Montblanc, and GoCardless.

Average Rating: 4.6/5.0

Total Reviews: 266

Who Is the Company Behind Aikido Security?

  • Seller: Aikido Security
  • Company Website:
  • Year Founded: 2022
  • HQ Location: Ghent, Belgium
  • Twitter: @AikidoSecurity
    11,770 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    320 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Founder, CTO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 78% Small, 15% Medium

What Do G2 Reviewers Say About Aikido Security?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Aikido Security, thanks to its clear insights and seamless integration.
  • Users appreciate Aikido Security's robust security capabilities, providing a comprehensive and seamless integration in their workflow.
  • Users value the intuitive dashboard of Aikido Security, which simplifies security issue identification and management.
  • Users value the easy integrations of Aikido Security, enhancing workflows with seamless connections to existing GitLab repositories.
  • Users find Aikido's easy setup highly efficient, enabling quick implementation and immediate usability for security assessments.
Cons
  • Users note the lack of advanced features in Aikido Security, such as dark mode and in-depth analysis options.
  • Users find the pricing structure expensive for micro businesses, making upgrades difficult to justify.
  • Users note the limited features of Aikido Security, wishing for more customization and advanced options.
  • Users find the pricing issues challenging, especially for micro businesses, due to the steep upgrade costs.
  • Users feel Aikido Security is lacking features like advanced reporting and deeper compliance analysis compared to competitors.

What Are Recent G2 Reviews of Aikido Security?

Cloud Defense AI

Step Out of the Silos and Into the Future of Cybersecurity with CloudDefense.AI! Hackers never limit themselves to siloed attacks, so why should your cybersecurity approach? At CloudDefense.AI, we've reinvented security by adopting the ingenuity of a hacker's mindset. Our groundbreaking platform offers a unified understanding of risks in code, cloud and dark web. Building this unified attack graph leads to an astounding 90%+ noise reduction, ensuring you stay steps ahead of cyber threats. Experience the Ultimate Protection with Our Comprehensive Suite - From Code-to-Cloud-to-Recon: - Static Application Security Testing (SAST) - Dynamic Application Security Testing (DAST) - Software Composition Analysis (SCA) - Infrastructure as Code (IaC) Analysis - Advanced API Security - Container Security - Cloud Security Posture Management (CSPM) - Cloud Workload Protection Platform (CWPP) - Cloud Infrastructure Entitlement Management (CIEM) - Cloud Detection and Response (CDR) - And our exclusive HackerView™ technology. Why Choose CloudDefense.AI? - Drastically Reduce Noise: Say goodbye to overwhelming alerts. Our integrated ‘Code + Cloud + Recon’ approach cuts through the clutter, reducing noise by over 90%. - Expand Your Defense Horizons: Increase your defense surface area significantly with our all-encompassing solution. - AI-Powered Auto-Remediation: Harness the power of Artificial Intelligence and Machine Learning for robust, automated threat resolution. Recognized as a 'CNAPP' Solution: Join our global clientele, including top-tier banks, fintech unicorns, and insurtech pioneers, in experiencing next-gen cybersecurity. Take the First Step Towards Unparalleled Security - For Free! Get started with our DevSecOps tool today at no cost: Start Your Free Trial Want to Dive Deeper? Contact us for a personalized exploration of how CloudDefense.AI can fortify your digital landscape. Email: sales@clouddefense.ai

Average Rating: 5.0/5.0

Total Reviews: 36

Who Is the Company Behind Cloud Defense AI?

Who Uses This Product?

  • Who Uses This: CEO, Director
  • Top Industries: Computer Software
  • Company Size: 89% Medium, 26% Small

What Do G2 Reviewers Say About Cloud Defense AI?

AI-generated summary from verified user reviews

Pros
  • Users value the comprehensive security features of Cloud Defense AI, ensuring robust protection for IoT and cloud systems.
  • Users value the automation capabilities of Cloud Defense AI, enhancing security and reducing response times for IT teams.
  • Users value the effective risk management of Cloud Defense AI, ensuring comprehensive security across diverse cloud environments.
  • Users value the comprehensive security of Cloud Defense AI, effectively managing risks across IoT devices and cloud systems.
  • Users value the proactive cloud management of Cloud Defense AI, ensuring comprehensive security for their digital transactions.
Cons
  • Users highlight the inadequate security of Cloud Defense AI, suggesting improvements for better protection during data transfers.
  • Users experience a steep learning curve due to early adoption and missing features during onboarding.
  • Users find the limited reporting capabilities of Cloud Defense AI hinder progress in presenting management-level summaries.
  • Users highlight the need for improved customer support as a significant concern with Cloud Defense AI.
  • Users find the poor documentation frustrating, making it difficult to resolve issues independently or explore options.

What Are Recent G2 Reviews of Cloud Defense AI?

What Are G2 Users Discussing About Cloud Defense AI?

Plerion

Plerion is a cloud security platform designed to assist organizations in managing and mitigating risks within their cloud environments. Unlike traditional security tools that inundate users with alerts, Plerion focuses on actionable insights, enabling teams to address vulnerabilities effectively. By streamlining the risk management process, Plerion transforms the way organizations approach cloud security, ensuring that the most critical threats are prioritized and resolved. The platform is tailored for IT security teams and cloud administrators across various industries that utilize cloud services such as AWS, Azure, and Google Cloud Platform (GCP). Plerion’s unique approach allows users to visualize their cloud infrastructure, identities, workloads, and code as a cohesive graph. This visualization helps users identify the approximately 1% of risks that are genuinely exploitable, eliminating the noise typically associated with security alerts. By presenting a concise, ranked list of vulnerabilities, Plerion empowers teams to focus their efforts where they matter most. At the heart of the Plerion platform is Pleri, an AI-driven cloud security engineer that mimics the investigative capabilities of a human security expert. Pleri assesses findings, verifies their exploitability in context, and traces risks back to the underlying code responsible for them. This automated process culminates in the creation of pull requests or Jira tickets for remediation, ensuring that every proposed change awaits human approval. This feature not only enhances accountability through full audit trails but also allows for easy rollbacks if necessary. Plerion’s comprehensive coverage includes cloud configuration, workloads, identity and permissions, data, code, and AI workloads, making it a versatile solution for diverse cloud environments. The platform also offers compliance mapping against a wide range of frameworks, linking each identified failure to specific corrective actions rather than merely generating reports. This capability significantly reduces the time and effort required for compliance management. Organizations using Plerion have reported substantial improvements in their security operations. For instance, Deputy achieved an 80% reduction in alerts and decreased their time-to-remediation from 30 days to just 4 hours. Similarly, Basis eliminated 40 hours of manual review each week, illustrating the platform's efficiency. With ISO 27001 certification, SOC 2 attestation, and the AWS Security Software Competency, Plerion ensures a high standard of security and reliability. By deploying in minutes rather than months, Plerion allows organizations to put their cloud security on autopilot while maintaining a human touch in the decision-making process.

Average Rating: 4.7/5.0

Total Reviews: 31

Who Is the Company Behind Plerion?

  • Seller: Plerion
  • Company Website:
  • Year Founded: 2021
  • HQ Location: Sydney, AU
  • Twitter: @PlerionHQ
    141 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    30 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Financial Services
  • Company Size: 50% Medium, 38% Small

What Do G2 Reviewers Say About Plerion?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the centralized security data in Plerion, which enhances visibility and effective risk management.
  • Users appreciate the ease of use of Pleri, enhancing collaboration and simplifying cloud security management seamlessly.
  • Users commend Plerion's stellar customer support, highlighting responsiveness and commitment to customer success in security management.
  • Users appreciate the centralized security data of Plerion, benefiting from immediate visibility and actionable advice.
  • Users appreciate how Plerion's effective prioritization simplifies cloud security, focusing on critical issues without overwhelming alerts.
Cons
  • Users feel that improvements are needed in trend reporting and Jira ticket creation for better long-term value visibility.
  • Users note that while Plerion shows improvement needed in trend reporting and ongoing value visibility over time.
  • Users find the missing features of Plerion frustrating, particularly regarding customization and cloud support limitations.
  • Users note the limited support for Google Cloud, wishing for better feature parity with other providers.
  • Users experience integration issues due to manual updates and limited coverage, creating deployment challenges with Plerion.

What Are Recent G2 Reviews of Plerion?

MatosSphere

CloudMatos stands as a game-changing solution in the realm of cloud & cybersecurity, redefining how organizations protect their cloud-native applications and digital assets. As an agentless and effortlessly deployable Cloud Native Application Protection Platform (CNAPP), CloudMatos revolutionizes the landscape by swiftly identifying and mitigating security risks across cloud environments, web, API, and networks. With integrated SAST, DAST, API security, SCA, and comprehensive Attack Surface Management, it thoroughly assesses your security posture. CloudMatos also offers APIs for seamless data integration into existing systems, setting itself apart with its unique Attack Path Engine built on a graph-based foundation. CloudMatos extends its capabilities to cover AWS, Azure, GCP, and Kubernetes, providing a unified approach to security and compliance management. Advanced graph-based algorithms enable it to proactively assess, prioritize, and neutralize risks, bolstering an organization's security posture with speed and precision. In essence, CloudMatos reimagines cloud & cybersecurity by making it secure, accessible, efficient, and comprehensive, empowering organizations to navigate the dynamic world of cloud-native applications and digital assets with confidence and ease.

Average Rating: 4.9/5.0

Total Reviews: 24

Who Is the Company Behind MatosSphere?

  • Seller: CloudMatos
  • Year Founded: 2022
  • HQ Location: N/A
  • Twitter: @RestoLabs
    5 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    11 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Cloud Security Engineer
  • Top Industries: Computer Software
  • Company Size: 46% Medium, 46% Small

What Do G2 Reviewers Say About MatosSphere?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the comprehensive visibility of MatosSphere, making cloud security monitoring efficient and effortless.
  • Users value the automation capabilities of MatosSphere, simplifying cloud security and enhancing monitoring efficiency.
  • Users appreciate the automated remediation in MatosSphere, efficiently fixing vulnerabilities before they're even noticed.
  • Users value the ease of use of MatosSphere, simplifying cloud security management with an intuitive, unified dashboard.
  • Users value the streamlined cloud security management of MatosSphere, enhancing peace of mind with centralized monitoring.
Cons
  • Users struggle with integration issues in MatosSphere, finding it difficult to manage alerts and user access effectively.
  • Users highlight the need for improvement in alert tuning and IAM visibility for a more streamlined experience with MatosSphere.
  • Users note the missing features in MatosSphere, particularly in identity management and advanced configurations.
  • Users face difficulties with access control in MatosSphere, struggling with integrations and role management in multi-team setups.
  • Users find the alerts overwhelming and cumbersome to manage, affecting their overall experience with MatosSphere.

What Are Recent G2 Reviews of MatosSphere?

What Are G2 Users Discussing About MatosSphere?

Cloudanix

Cloudanix is a Cloud-Native Application Protection Platform (CNAPP) that delivers unified, code-to-cloud security for organizations running workloads on AWS, Azure, GCP, OCI, and DigitalOcean. Built on a single unified asset graph, Cloudanix connects Code Security, Cloud Security Posture Management (CSPM), Cloud Workload Protection Platform (CWPP), Cloud Infrastructure Entitlement Management (CIEM), Just-in-Time (JIT) Access, and AI Security Posture Management (AI-SPM) into one cohesive platform — replacing five to six fragmented point security solutions. At its core, Cloudanix ingests data from cloud environments and developer toolchains, correlates findings across code, cloud, identity, runtime, and data surfaces, and routes actionable context to where security and engineering teams already work. Every finding arrives with the asset owner, blast radius, and a fix path attached, enabling teams to act in minutes rather than quarters. **Code Security:** Cloudanix bakes security into the development workflow by scanning pull requests automatically, performing Static Application Security Testing (SAST) across 30+ languages and frameworks, running Software Composition Analysis (SCA) with SBOM generation, detecting secrets in repositories, and scanning Infrastructure-as-Code (IaC). It integrates one-click with GitHub, GitLab, Bitbucket, and Azure DevOps, and raises Jira tickets directly from findings. **Cloud Posture & Compliance:** Cloudanix detects and fixes misconfigurations across AWS, Azure, GCP, and OCI with agentless onboarding in under 30 minutes. It supports compliance frameworks including SOC 2, ISO 27001, PCI DSS, HIPAA, NIST, GDPR, and regional frameworks such as India's DPDPA, RBI, IRDAI, Saudi SAMA, UAE Federal DPL, and EU DORA/NIS2 — all authored once and continuously monitored. **Workload & Container Protection (CWPP):** Runtime protection is provided for hosts, containers, Kubernetes clusters (EKS, AKS, GKE), serverless functions, and virtual machines. Cloudanix supports edge and bare metal environments including k3s and VMware, and performs vulnerability scanning of VM and container images. **Identity & Just-in-Time Access (CIEM + JIT):** Cloudanix provides comprehensive identity governance across human admins, service accounts, CI/CD roles, SaaS integrations, and AI agents — all unified in the same identity graph. Its JIT Access engine replaces standing privileges with time-bound, identity-stamped access across cloud, databases, Kubernetes, and VMs, eliminating permanent access exposure. **AI Security:** Cloudanix extends its graph to cover AI-SPM, coding agent security (Coding Agent Guard and Coding Agent JIT for Claude Code, Kiro, and Cursor), model scanning, and an AI gateway — all on the same unified asset graph. **Database Activity Monitoring (DAM):** Cloudanix monitors database activity across RDS, Azure SQL, and Cloud SQL, providing visibility into data access patterns and anomalies. Cloudanix is available as a SaaS control plane with agentless deployment, and also offers private deployment options for customers with strict data residency requirements. It is available on AWS Marketplace, Azure Marketplace, and GCP Marketplace. Backed by Y Combinator and trusted by 130+ customers globally, Cloudanix operates with presence in the US, India, Middle East, and Singapore.

Average Rating: 4.8/5.0

Total Reviews: 24

Who Is the Company Behind Cloudanix?

  • Seller: Cloudanix
  • Company Website:
  • Year Founded: 2020
  • HQ Location: Sunnyvale, CA
  • Twitter: @cloudanix
    101 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    21 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 68% Medium, 24% Small

What Do G2 Reviewers Say About Cloudanix?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the simplicity and seamless integration of Cloudanix, enhancing efficiency across multi-cloud environments.
  • Users value the ease of use of Cloudanix, with simple onboarding and seamless integration across multi-cloud platforms.
  • Users value the user-friendly interface and quick deployment of Cloudanix, appreciating its simplicity and effectiveness.
  • Users value the user-friendly interface and quick deployment of Cloudanix, enhancing efficiency and simplifying management.
  • Users praise the exceptional customer support of Cloudanix for their responsiveness and proactive assistance in resolving issues.
Cons
  • Users find the absence of auto remediation in Cloudanix frustrating, wishing for better support to manage workloads.
  • Users desire greater customization options for reports in Cloudanix to enhance their experience significantly.
  • Users note the lack of auto remediation in Cloudanix, expressing a desire for support in workload management.
  • Users feel the need for limited customization in report generation, wishing for more flexible options from Cloudanix.
  • Users express frustration over the lack of auto remediation in Cloudanix, wishing for better assistance in managing workloads.

What Are Recent G2 Reviews of Cloudanix?

Calico

The Calico platform, built on the most trusted open-source technologies in Kubernetes — Calico Open Source, Istio, Envoy, and eBPF — provides a single management plane for secure networking and observability for AI workloads. It can be deployed as Calico Cloud, a fully-managed SaaS platform, or Calico Enterprise, a self-managed platform. Calico works with popular managed Kubernetes services such as AKS, EKS, and GKE, as well as self-managed Kubernetes distributions including Red Hat OpenShift, SUSE/Rancher, VMware Tanzu, and Mirantis. Calico is the only platform with a pluggable data plane architecture enabling support for multiple data planes, including eBPF, nftables, standard Linux, VPP, and Windows. Calico secures 1 million+ clusters daily, and is used by leading companies, including NVIDIA, RBC, Bloomberg, Chipotle, GoDaddy, and Upwork.

Average Rating: 4.5/5.0

Total Reviews: 42

Who Is the Company Behind Calico?

  • Seller: Tigera
  • Company Website:
  • Year Founded: 2016
  • HQ Location: San Jose, CA
  • Twitter: @tigeraio
    1,951 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    129 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 36% Large, 36% Medium

What Do G2 Reviewers Say About Calico?

AI-generated summary from verified user reviews

Pros
  • Users find Calico to be an easy and customizable cloud orchestration tool, enhancing their devsecops workflow effectively.
  • Users value Calico's comprehensive security features and simplified network policy management, enhancing Kubernetes cluster protection and visibility.
  • Users highlight the unmatched support from Calico's team, consistently going above and beyond for their needs.
  • Users value the comprehensive visibility and control Calico offers for Kubernetes networking, enhancing security and management efficiency.
  • Users value the easy network policy management in Calico, enhancing security and efficiency in Kubernetes environments.
Cons
  • Users find the initial setup complex, particularly those new to the platform or lacking Kubernetes experience.
  • Users find the complexity of Calico's dashboard and deployment process challenging for beginners and resource management.
  • Users find difficult configuration during initial setup of Calico, making the experience confusing for newcomers.
  • Users find the difficult learning curve of Calico challenging, especially for new users with less technical expertise.
  • Users find the difficult setup of Calico confusing, especially those new to Kubernetes, but support is helpful.

What Are Recent G2 Reviews of Calico?

Sonrai Security

Sonrai Security is a leading cloud privileged access management solutions provider. With a mission to empower enterprises of all sizes to innovate securely and confidently, Sonrai Security delivers identity, access, and privilege security for companies running on AWS, Azure, and Google Cloud platforms. The company is renowned for pioneering the Cloud Permissions Firewall, enabling one-click least privilege while supporting developer access needs without disruption. Trusted by Cloud Operations, Development, and Security Teams at leading companies across various industries, Sonrai Security is committed to driving innovation and excellence in cloud security. Sonrai’s Cloud Permissions Firewall, the leading cloud PAM solution, gets cloud access under control, slashes the privileged attack surface, and automates least privilege all without impeding DevOps. The Cloud Permissions Firewall uses privileged permission intelligence and usage monitoring to determine who needs what permissions in your cloud. Then, with one-click, it eliminates all unused sensitive privileges across your entire multi-cloud estate. Just-in-time access and exceptions are granted to roles on the fly as new needs come up so development goes uninterrupted. SecOps teams spend 97% less time achieving least privilege and slash the attack surface by 92%.

Average Rating: 4.5/5.0

Total Reviews: 26

Who Is the Company Behind Sonrai Security?

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 42% Medium, 38% Large

What Do G2 Reviewers Say About Sonrai Security?

AI-generated summary from verified user reviews

Pros
  • Users value the enhanced visibility and control Sonrai Security offers for effective cloud security management.
  • Users value the strong security features of Sonrai Security, enabling effective control over permissions and risk management.
  • Users commend Sonrai Security for its effective cloud management, streamlining permission controls and enhancing security effortlessly.
  • Users highlight the ease of use of Sonrai Security, appreciating its straightforward deployment and seamless integration.
  • Users value the cloud security solution of Sonrai Security for simplifying access management and minimizing permissions.
Cons
  • Users find Sonrai Security to have a complexity that requires significant tuning and deep learning for effective use.
  • Users find the pricing to be high, especially impacting smaller teams and businesses seeking security solutions.
  • Users find feature limitations of Sonrai Security frustrating, citing complexity and the need for manual intervention.
  • Users feel that improvement is needed in Sonrai Security's complexity, feature limitations, and dashboard customization options.
  • Users feel the limited customization options hinder their experience and functionality in Sonrai Security.

What Are Recent G2 Reviews of Sonrai Security?

ARMO Platform

ARMO Platform is the only runtime-driven, open-source first, cloud security platform. It is the only security platform that continuously minimizes cloud attack surface based on runtime insights, while actively detecting and responding to cyberattacks with real risk context. Using an eBPF-based runtime sensor to record application behavior and related activities, ARMO Platform enables DevOps, security, and platform teams to eliminate the security noise and go from thousands of irrelevant alerts to focus on the most important and exploitable threats. This allows those teams to shift from managing hypothetical security issues to mitigating actual risks and providing them with the means to remediate them. ARMO is an open-source-driven company and the creator of Kubescape, a leading open-source Kubernetes security project, now an official CNCF project. To learn more about ARMO Platform please visit: https://www.armosec.io/

Average Rating: 4.5/5.0

Total Reviews: 44

Who Is the Company Behind ARMO Platform?

  • Seller: ARMO
  • Year Founded: 2019
  • HQ Location: Tel Aviv, IL
  • Twitter: @armosec
    3,074 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    103 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 59% Small, 36% Medium

What Do G2 Reviewers Say About ARMO Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of ARMO Platform, as it simplifies security operations and streamlines workflows.
  • Users value the robust automation and integration capabilities of ARMO Platform, enhancing security and efficiency in Kubernetes environments.
  • Users commend ARMO Platform for its superior security capabilities, enhancing the protection of Kubernetes application clusters significantly.
  • Users value the deployment ease of ARMO Platform, enabling quick setup and seamless integration with existing tools.
  • Users value the easy setup and automation of ARMO Platform, enhancing security and compliance for cloud-native applications.
Cons
  • Users report integration issues with ARMO Platform that lead to disruptions and confusion during project workflows.
  • Users often experience missing features like upload issues and outdated updates, impacting workflow and causing confusion.
  • Users face a difficult configuration process on the ARMO Platform, requiring time and effort to master.
  • Users face a noticeable learning curve with ARMO Platform's complex interface, impacting efficiency and integration ease.
  • Users find the complex setup of ARMO Platform challenging, especially those with less experience in Kubernetes.

What Are Recent G2 Reviews of ARMO Platform?

What Are G2 Users Discussing About ARMO Platform?

Darktrace / HYBRID NETWORK

Darktrace / HYBRID NETWORK uses Adaptive AI to continuously learn behavior across your infrastructure, combining NDR, CDR, OT security, ITDR, exposure management, attack path modelling and forensic investigations into a single solution. - Unify visibility - Detect and contain known, novel and insider threats - AI-led triage and investigations - Increase resilience Named a Leader in the 2025 and 2026 Gartner® Magic Quadrant™ for NDR and the only Visionary in the 2025 Gartner® Magic Quadrant™ for CPS.

Average Rating: 4.4/5.0

Total Reviews: 47

Who Is the Company Behind Darktrace / HYBRID NETWORK?

  • Seller: Darktrace
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Cambridgeshire, England
  • Twitter: @Darktrace
    18,177 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    2,597 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 63% Medium, 31% Large

What Do G2 Reviewers Say About Darktrace / HYBRID NETWORK?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the excellent monitoring capabilities of Darktrace, offering impressive visibility and efficient network analysis.
  • Users appreciate the self-learning AI technology of Darktrace/Network, effectively adapting to threats without extensive configuration.
  • Users commend Darktrace's rapid threat detection, ensuring robust security with minimal manual intervention for maximum efficiency.
  • Users commend the responsive customer support of Darktrace/Network, enhancing learning and facilitating efficient troubleshooting.
  • Users highlight the autonomous AI-driven cybersecurity of Darktrace, which effectively detects and responds to threats in real time.
Cons
  • Users report a significant learning curve with Darktrace as the AI generates numerous alerts during initial setup.
  • Users note that the product can be expensive, particularly for smaller organizations with constrained budgets and significant training costs.
  • Users experience alert issues with Darktrace, needing extensive manual tuning to manage false positives during the learning phase.
  • Users find the complex setup of Darktrace challenging, requiring skilled teams for effective management and configuration.
  • Users experience false positives occasionally, requiring IT support to resolve issues affecting network connectivity.

What Are Recent G2 Reviews of Darktrace / HYBRID NETWORK?

What Are G2 Users Discussing About Darktrace / HYBRID NETWORK?

Uptycs

Uptycs unified CNAPP and XDR platform is a comprehensive security solution designed to protect the full spectrum of modern attack surfaces in your cloud, data centers, user devices, build pipelines, and containers. With a strong focus on DevSecOps, Uptycs offers a powerful combination of CNAPP capabilities, including Cloud Workload Protection Platform (CWPP), Kubernetes Security Posture Management (KSPM), Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), and Cloud Detection and Response (CDR). With Uptycs you also get industry-leading eXtended Detection and Response (XDR) across macOS, Windows, and Linux endpoints, ensuring comprehensive protection, detection, and investigation. Uptycs delivers real-time threat detection, context-rich alerts, and maps detections to the MITRE ATT&CK framework for improved security insights. Uptycs performs scanning of containers for vulnerabilities throughout the CI/CD pipeline, promoting agile DevOps workflows, and reducing risk in production environments. Uptycs seamlessly integrates with existing tools and processes, streamlining operations and improving overall efficiency. Customers also benefit from the flexibility to choose between agent-based and agentless scanning options tailored to their unique cloud workload needs. Discover how Uptycs can transform your security posture with a comprehensive, flexible, and powerful security solution designed to meet the needs of today's complex and rapidly evolving cloud environments. Shift up with Uptycs. KEY DIFFERENTIATORS: 1. Unified & Comprehensive Platform: Uptycs offers a holistic security solution with CNAPP capabilities (CWPP, KSPM, CSPM, CIEM, and CDR) across data centers, laptops, build pipelines, containers, and cloud environments, reducing tool sprawl. 2. Advanced XDR: Industry-leading eXtended Detection and Response for endpoint protection across macOS, Windows, and Linux systems. 3. DevSecOps Focus: Enhanced security for container-based workloads and Kubernetes, supporting agile DevOps workflows. 4. Real-Time Threat Detection: Context-rich alerts and threat detection mapped to the MITRE ATT&CK framework for improved insights. 5. CI/CD Integration: Efficiently scan containers for vulnerabilities throughout the CI/CD pipeline, reducing risk in production. 6. Both agent-based and agentless scanning. Deploy agentless scanning for rapid, friction-free coverage to keep your data secure, and gain continuous runtime security, real-time investigations, and remediation with agent-based telemetry. 7. Rich API & Compatibility: Seamless integration with existing security tools and platforms, powered by osquery for broad compatibility. 8. Expert Support & Flexibility: Dedicated support from security experts and the best of both worlds with agent-based and agentless scanning options tailored to your needs.

Average Rating: 4.4/5.0

Total Reviews: 13

Who Is the Company Behind Uptycs?

  • Seller: Uptycs
  • Year Founded: 2016
  • HQ Location: Waltham, US
  • Twitter: @uptycs
    1,483 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    132 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services
  • Company Size: 54% Medium, 38% Large

What Do G2 Reviewers Say About Uptycs?

AI-generated summary from verified user reviews

Pros
  • Users value the comparative analysis features of Uptycs, aiding in selecting the best cloud security tools.
  • Users appreciate the comparative analysis features of Uptycs, aiding them in selecting the best cloud security tools.
  • Users value the comparative analysis features of Uptycs for making informed decisions in cloud security tools.
  • Users value Uptycs for its compliance with CIS and PCI DSS standards, enhancing security monitoring capabilities.
  • Users value the compliance management of Uptycs, appreciating its adherence to CIS and PCI DSS standards.
Cons
  • Users regret the high fees of Uptycs, which impact their willingness to continue using the tool.
  • Users express concerns about high pricing, which makes continued use of Uptycs challenging for some.

What Are Recent G2 Reviews of Uptycs?

Cyscale Cloud Platform

Cyscale offers a unified cloud security platform (CNAPP) that constantly monitors your cloud for risks and compliance issues. It includes CSPM, KSPM, CWPP, vulnerability management, CIEM, DSPM, and Container security. Designed to prioritize remediations, it is a valuable tool for Security Teams, CISOs, and CTOs looking to strengthen their security posture. Customers rely on Cyscale to bring products to market faster and more securely, consolidating 4 or 5 point security solutions into a single platform. Headquartered in London, Cyscale was founded by a team of visionary security experts and researchers. The founders have worked to protect companies like Rolls Royce, ABB, and Lloyd’s Register. Visit https://cyscale.com to learn more.

Average Rating: 4.8/5.0

Total Reviews: 6

Who Is the Company Behind Cyscale Cloud Platform?

  • Seller: Cyscale
  • Year Founded: 2019
  • HQ Location: London, GB
  • Twitter: @cyscale
    52 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    5 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Small, 50% Medium

What Do G2 Reviewers Say About Cyscale Cloud Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the seamless cloud integration of Cyscale, enhancing visibility and efficiency across multiple environments.
  • Users commend the responsive customer support of Cyscale, enhancing their experience and ensuring effective use of the platform.
  • Users find Cyscale Cloud Platform to have an exceptionally easy interface, simplifying cloud management and enhancing security visibility.
  • Users value the ease of monitoring and compliance with Cyscale, significantly simplifying cloud security management.
  • Users value the streamlined monitoring of multiple cloud accounts with Cyscale, enhancing efficiency and compliance management.
Cons
  • Users desire additional features to manage CVEs, noting that the limited feature set hampers their experience.
  • Users find the lack of agent-based deployment features in Cyscale Cloud Platform limiting for their needs.
  • Users note compliance issues due to default settings requiring time to adjust connectivity options appropriately.
  • Users find the initial setup challenging due to default settings requiring adjustment for optimal use.
  • Users find the lack of agent-based deployment on Cyscale Cloud Platform limits flexibility and integration possibilities.

What Are Recent G2 Reviews of Cyscale Cloud Platform?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated April 23, 2025