# Top Free Cloud-Native Application Protection Platform (CNAPP) - Page 2

## How Many Cloud-Native Application Protection Platform (CNAPP) Products Does G2 Track?

**Total Products under this Category:** 34

### Category Stats (Aug 2026)

- **Average Rating:** 4.57/5 (↓0.01 vs Jul 2026) The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** Orca Security (+0.62%) - Among all products in this category, Orca Security recorded the largest rating increase compared to last month

_Last updated: August 06, 2026_

## How Does G2 Rank Cloud-Native Application Protection Platform (CNAPP) Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 3,300+ Authentic Reviews
- 34+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Cloud-Native Application Protection Platform (CNAPP)
 ![G2 Grid® for Cloud-Native Application Protection Platform (CNAPP) plotting products by satisfaction and market presence](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp/grids.png?focus%5B%5D=146504&focus%5B%5D=123609&focus%5B%5D=151443&focus%5B%5D=52233&focus%5B%5D=20460&focus%5B%5D=1285967&focus%5B%5D=20461&focus%5B%5D=1259627)

Highlighted products: Wiz, Orca Security, CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Sysdig Secure, SentinelOne Singularity Cloud Security, Cortex Cloud, and Aikido Security.

Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=orca-security&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=sysdig-sysdig-secure&focus%5B%5D=sentinelone-singularity-cloud-security&focus%5B%5D=cortex-cloud&focus%5B%5D=aikido-security)

**Sponsored**

### Aikido Security

Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido helps teams of any size ship secure software faster, automate protection, and simulate real-world attacks with AI-driven precision. The platform’s proprietary AI cuts noise by 95%, delivers one-click fixes, and saves developers 10+ hours per week. Aikido Intel proactively uncovers vulnerabilities in open source packages before disclosure, helping secure more than 50,000 organizations worldwide, including Revolut, Niantic, Visma, Montblanc, and GoCardless.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=1004727&secure%5Bchosen_at%5D=2026-08-15T05%3A01%3A32Z&secure%5Bdisplayable_resource_id%5D=2647&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=neighbor_category&secure%5Bplacement_resource_ids%5D%5B%5D=2647&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1259627&secure%5Bresource_id%5D=1004727&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fcloud-native-application-protection-platform-cnapp%2Ffree%3Fpage%3D2&secure%5Btoken%5D=2e615208800216c270f4ca2c655656c42401b67469a7e065cca5554cf74959f7&secure%5Burl%5D=https%3A%2F%2Fwww.aikido.dev%2Fcloud%2Fcloud-posture-management-cspm%3Futm_source%3Dg2%26utm_campaign%3Dg2-promoted-listing-cspm%26utm_medium%3Dcpc&secure%5Burl_type%5D=custom_url)

### [Runecast](https://www.g2.com/products/runecast/reviews)

Runecast is an enterprise CNAPP platform which saves your Security and Operations teams time and resources by enabling a proactive approach to ITOM, CSPM, and compliance. It helps you proactively remediate vulnerabilities for continuous compliance, whether on-prem, cloud or containers. By proactively using our agentless scanning in real-time admins discover potential risks and remediation solutions before any issues can develop into a major outage. Runecast’s AI-RAIKA, leverages advanced natural language processing (NLP) capabilities to interpret a vast amount of information to provide automated audits for security compliance standards, vulnerabilities (such as KEVs, CVEs or VMSAs) and technology vendor best practices. The platform has been recognized with Frost & Sullivan's 2023 European New Product Innovation Award in the CNAPP industry for its strong overall performance and commitment to user experience. NAVIGATING YOUR COMPLEXITY Runecast helps teams with a simpler transition to cloud, enabling admins to fully understand their hybrid environments and Cloud Security Posture Management (CSPM) and Kubernetes Security Posture Management (KSPM). Running securely on-premises, it provides insights into what is happening both in the cloud and on-site. IMMEDIATE VALUE FOR TEAMS As Runecast helps teams to stabilize availability and ensure security compliance, it contributes also to greater ROI for both existing and future investments with AWS, Azure, Kubernetes and VMware. FULLY ON-PREM SECURE Operates fully on-prem to analyze your hybrid-cloud environment, so that your data remains safely on-site. To provide additional security, Runecast features a customizable, transparent rules engine. RUNECAST FOR SECURITY AND COMPLIANCE Vulnerability Management Regular automated scanning, recommendations, remediation, and the ability to set up vulnerability management policies are just some of the requirements many enterprises have. The Runecast platform is constantly updated to detect the latest vulnerabilities for all of the supported technologies. Container Security Runecast scans container images for known vulnerabilities and misconfigurations, and can also detect runtime issues such as exposed ports and running processes. It also provides a public API which can be used in your CI/CD platform to analyze the container images and whether they are vulnerable or not to known vulnerabilities, before deploying them in production. Compliance with Security Standards Runecast offers automated audits against security hardening guidelines and common industry standards like CIS Benchmarks, NIST 800-53, PCI DSS, HIPAA, DISA STIG 6, GDPR, KVKK (Turkey), ISO 27001, BSI IT-Grundschutz, Essential 8 and Cyber Essentials Security Standard. RUNECAST FOR IT OPERATIONS TEAMS Vendor Best Practices for Security Hardening Runecast continuously monitors your complex environment, reporting violations and providing recommendations against Vendor Best Practices. It maintains a database with Best Practices of the latest AWS, Azure, Kubernetes, GCP, VMware and Windows and Linux OS. It analyzes your environment to detect any configuration issues against Vendor Best Practices. This delivers valuable insights to improve the stability and security of your infrastructure. Configuration Vault Tracks your configuration to help you prevent drift. Reports your entire configuration and provides the ability to compare your configurations over time. Hardware Compatibility and Upgrade Stimulations Runecast has automated the process of validating the hardware compliance of hosts and clusters against a selected ESXi version, ensuring compliance with the VMware Compatibility Guide (VCG) and vSAN Hardware Compatibility List (vSAN HCL). The AI-powered platform runs a quick and automated analysis using the latest HCL for your servers, I/O devices, and vSAN controllers. For upgrade planning, admins can see the results of multiple HCL upgrade simulation scenarios within seconds, and the findings are presented in a comprehensive way with details about any non-compatibility and how to resolve it. Validates your hardware, drivers, and firmware against current and upstream releases of ESXi for faster upgrade planning. Remediation Scripts A growing number of findings in Runecast offer remediation actions – allowing you to download the customized script to perform the reconfiguration. Some rules offer more than one remediation option, for example PowerCLI and Ansible. SUPPORTED SERVICES SUPPORTED SYSTEMS: AWS, Azure GCP, Kubernetes (1.20 and above), VMware (VMware vSphere, NSX-V, NSX-T, VMware Horizon, VMware Cloud Director, AP HANA for VMware, VMware on Nutanix, Pure Storage), Windows (Microsoft Windows) and Linux OS (RHEL 8, CentOS 7). SECURITY STANDARDS: CIS Benchmarks, NIST 800-53, PCI DSS, HIPAA, DISA STIG 6, GDPR, KVKK (Turkey), ISO 27001, BSI IT-Grundschutz, Essential 8 and Cyber Essentials Security Standard. INTEGRATIONS: Jira, ServiceNow, vSphere Client Plugin, OpenID Connect, REST API, HPE Ezmeral. REMEDIATION TOOLS: Ansible (VMware), PowerCLI (VMware), AWS CLI (AWS), AWS Tools for PowerShell (AWS), GCP CLI

**Average Rating:** 4.8/5.0

**Total Reviews:** 21

#### Who Is the Company Behind Runecast?

- **Seller:** [Runecast Solutions](https://www.g2.com/sellers/runecast-solutions)
- **Year Founded:** 2014
- **HQ Location:** London, London
- **Twitter:** @Runecast  
1,093 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=a4b3474375a540f71d3c0c3aff017a1d6d8bc20cdfe6291f431ed8992c35f17e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F5226278&secure%5Burl_type%5D=linkedin_company_website)  
14 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 48% Large, 24% Medium

#### What Are Recent G2 Reviews of Runecast?

**["Runecast gives me great audit and security compliance insights immediately."](https://www.g2.com/survey_responses/runecast-review-5371828)**

**Rating:** 5.0/5.0 stars

_— Verified User in Telecommunications_

[Read full review](https://www.g2.com/survey_responses/runecast-review-5371828)

**["Runecast"](https://www.g2.com/survey_responses/runecast-review-7966299)**

**Rating:** 5.0/5.0 stars

_— Manolis F._

[Read full review](https://www.g2.com/survey_responses/runecast-review-7966299)

### [Saner Cloud](https://www.g2.com/products/saner-cloud/reviews)

Saner Cloud is an AI-fortified Cloud-Native Application Protection Platform (CNAPP) that moves beyond detection. It empowers organizations with intelligent, real-time, and automated attack prevention. Unlike traditional cloud security solutions that overwhelm security teams with alerts but fail to act, Saner Cloud automatically fixes vulnerabilities, misconfigurations, identity risks, and compliance violations across multicloud environments. Why choose Saner Cloud? - Unified dashboard with real-time updates and interactive visuals for a single source of truth - Complete asset visibility with watchlists, exposure detection, region-based categorization, deprecated services, and cost analysis - AI-driven anomaly detection with confidence levels, severity distribution, whitelisting options, and one-click remediation - Continuous posture management with built-in benchmarks, quick misconfiguration checks, trend tracking, and drift detection - Risk prioritization with scoring, top-risk lists, and context across assets, posture, and anomalies to focus on which risk to remediate first - Identity and entitlement governance with policy maps, RBAC, resource groups, excessive permission detection, and activity logging - Enhanced Remediation with scheduling and approval workflows, Top 10 patches, patch aging, most-impactful-patches charts, and grouped remediation - Multi-cloud coverage across AWS, GCP and Azure with a prevention-first workflow - Smart tagging for fast filtering across thousands of resources and audit logs with tool-specific job codes for full traceability

#### Who Is the Company Behind Saner Cloud?

- **Seller:** [SecPod](https://www.g2.com/sellers/secpod-b11d8014-d8ec-46e7-9e81-c0d14919fbfc)
- **Company Website:** www.secpod.com
- **Year Founded:** 2008
- **HQ Location:** Redwood City, California
- **Twitter:** @secpod  
542 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f07ec3fa959542d1d0e98b89f9d982d8570ca92b81b825c7e5167587e9c2e1eb&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsecpod-technologies%2F&secure%5Burl_type%5D=linkedin_company_website)  
168 employees on LinkedIn®

### [Stream Security](https://www.g2.com/products/stream-security/reviews)

SecOps deserve better than raw cloud telemetry. Most tools patch over noise, ignoring the state of your cloud. We fix the root cause. Stream turns raw cloud telemetry into a stateful real-time model, powering risk-based detection and response.

#### Who Is the Company Behind Stream Security?

- **Seller:** [Stream.Security](https://www.g2.com/sellers/stream-security)
- **Year Founded:** 2020
- **HQ Location:** Tel Aviv, IL
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f8fcaabb7f273d7f3f91c292bb19aadb2714645c9a03f56a42c42922f478bd28&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fstreamsecurity&secure%5Burl_type%5D=linkedin_company_website)  
76 employees on LinkedIn®

- [‹ Prev ‹ Prev](/categories/cloud-native-application-protection-platform-cnapp/free?order=g2_score#product-list)
- [1](/categories/cloud-native-application-protection-platform-cnapp/free?order=g2_score#product-list)
- 2
- Next › Next ›

Spotlight Categories

[Travel Management Solutions](https://www.g2.com/categories/travel-management)

[Digital Signage Software](https://www.g2.com/categories/digital-signage)

[Audit Management Software Solutions](https://www.g2.com/categories/audit-management)

[Accounts Payable Automation Software](https://www.g2.com/categories/ap-automation)

[Auto Dialer Software](https://www.g2.com/categories/auto-dialer)

Similar Categories

- [API Security](/categories/api-security)
- [Application Security Posture Management (ASPM)](/categories/application-security-posture-management-aspm)
- [Cloud Compliance](/categories/cloud-compliance)
- [Cloud Data Security](/categories/cloud-data-security)
- [Cloud Detection and Response (CDR)](/categories/cloud-detection-and-response-cdr)

- [Cloud Edge Security](/categories/cloud-edge-security)
- [Cloud File Security](/categories/cloud-file-security)
- [Cloud Infrastructure Entitlement Management (CIEM)](/categories/cloud-infrastructure-entitlement-management-ciem)
- [Cloud Security Monitoring and Analytics](/categories/cloud-security-monitoring-and-analytics)
- [Cloud Security Posture Management (CSPM)](/categories/cloud-security-posture-management-cspm)

- [Cloud Workload Protection Platforms](/categories/cloud-workload-protection-platforms)
- [Extended Detection and Response (XDR) Platforms](/categories/extended-detection-and-response-xdr-platforms)
- [SaaS Security Posture Management (SSPM) Solutions](/categories/saas-security-posture-management-sspm-solutions)
- [Secure Access Service Edge (SASE) Platforms](/categories/secure-access-service-edge-sase-platforms)
- [Secure Service Edge (SSE) Solutions](/categories/secure-service-edge-sse-solutions)

[Browse Cloud-Native Application Protection Platform (CNAPP) Themes](/categories/cloud-native-application-protection-platform-cnapp/themes)