# Best Cloud Security Posture Management (CSPM) Software for Medium-Sized Businesses - Page 2

## How Many Cloud Security Posture Management (CSPM) Software Products Does G2 Track?

**Total Products under this Category:** 109

### Category Stats (Aug 2026)

- **Average Rating:** 4.61/5 (↓0.01 vs Jul 2026) The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** Orca Security (+0.66%) - Among all products in this category, Orca Security recorded the largest rating increase compared to last month

_Last updated: August 05, 2026_

## How Does G2 Rank Cloud Security Posture Management (CSPM) Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 6,900+ Authentic Reviews
- 109+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Cloud Security Posture Management (CSPM) Software
 ![G2 Grid® for Cloud Security Posture Management (CSPM) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/cloud-security-posture-management-cspm/grids.png?focus%5B%5D=146504&focus%5B%5D=52233&focus%5B%5D=151443&focus%5B%5D=164907&focus%5B%5D=112863&focus%5B%5D=167976&focus%5B%5D=20460&focus%5B%5D=56001)

Highlighted products: Wiz, Microsoft Defender for Cloud, CrowdStrike Falcon Cloud Security, Torq AI SOC Platform, Forward Enterprise, Scrut Automation, Sysdig Secure, and Cymulate.

Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-security-posture-management-cspm/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=torq-ai-soc-platform&focus%5B%5D=forward-enterprise&focus%5B%5D=scrut-automation&focus%5B%5D=sysdig-sysdig-secure&focus%5B%5D=cymulate&segment=mid-market)

**Sponsored**

### Google Security Operations

Google Security Operations offers a unified experience across SIEM, SOAR, and threat intelligence to drive better detection, investigation, and response. Collect security telemetry data, apply threat intel to identify high priority threats, drive response with playbook automation, case management, and collaboration. It also provides Gemini-native agentic defense to help autonomously handle workflows like alert triage, threat hunting, and detection engineering. Google Security Operations also supports AI Threat Defense to monitor, detect, and respond to threats from code you do not own or cannot patch.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2647&secure%5Bchosen_at%5D=2026-08-06T13%3A16%3A59Z&secure%5Bdisplayable_resource_id%5D=2647&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=2647&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=30500&secure%5Bresource_id%5D=2647&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fcloud-security-posture-management-cspm%2Fmid-market%3Fpage%3D2%26segment%3Dmid-market&secure%5Btoken%5D=82abfc7c8e2847824aebd56d837e7da85c2c093a23a472c18249611217bfe8e8&secure%5Burl%5D=https%3A%2F%2Fcloud.google.com%2Fsecurity%2Fproducts%2Fsecurity-operations%3Futm_source%3DG2%26utm_medium%3Ddisplay%26utm_campaign%3DCloud-SS-DR-GCP-1713658-GCP-DR-NA-US-en-G2-Display-Banner-All-%2525epid%21-%2525ecid%21-securityops%26utm_content%3D%257Bdevice%257D-%257Badgroupid%257D-%257Bnetwork%257D-%257Btargetid%257D-%257Bloc_physical_ms%257D-%257Bcampaignid%257D&secure%5Burl_type%5D=custom_url)

### [Plerion](https://www.g2.com/products/plerion/reviews)

Plerion is a cloud security platform designed to assist organizations in managing and mitigating risks within their cloud environments. Unlike traditional security tools that inundate users with alerts, Plerion focuses on actionable insights, enabling teams to address vulnerabilities effectively. By streamlining the risk management process, Plerion transforms the way organizations approach cloud security, ensuring that the most critical threats are prioritized and resolved. The platform is tailored for IT security teams and cloud administrators across various industries that utilize cloud services such as AWS, Azure, and Google Cloud Platform (GCP). Plerion’s unique approach allows users to visualize their cloud infrastructure, identities, workloads, and code as a cohesive graph. This visualization helps users identify the approximately 1% of risks that are genuinely exploitable, eliminating the noise typically associated with security alerts. By presenting a concise, ranked list of vulnerabilities, Plerion empowers teams to focus their efforts where they matter most. At the heart of the Plerion platform is Pleri, an AI-driven cloud security engineer that mimics the investigative capabilities of a human security expert. Pleri assesses findings, verifies their exploitability in context, and traces risks back to the underlying code responsible for them. This automated process culminates in the creation of pull requests or Jira tickets for remediation, ensuring that every proposed change awaits human approval. This feature not only enhances accountability through full audit trails but also allows for easy rollbacks if necessary. Plerion’s comprehensive coverage includes cloud configuration, workloads, identity and permissions, data, code, and AI workloads, making it a versatile solution for diverse cloud environments. The platform also offers compliance mapping against a wide range of frameworks, linking each identified failure to specific corrective actions rather than merely generating reports. This capability significantly reduces the time and effort required for compliance management. Organizations using Plerion have reported substantial improvements in their security operations. For instance, Deputy achieved an 80% reduction in alerts and decreased their time-to-remediation from 30 days to just 4 hours. Similarly, Basis eliminated 40 hours of manual review each week, illustrating the platform's efficiency. With ISO 27001 certification, SOC 2 attestation, and the AWS Security Software Competency, Plerion ensures a high standard of security and reliability. By deploying in minutes rather than months, Plerion allows organizations to put their cloud security on autopilot while maintaining a human touch in the decision-making process.

**Average Rating:** 4.7/5.0

**Total Reviews:** 28

#### How Do G2 Users Rate Plerion?

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.3/10)
- **Configuration Monitoring:** 8.8/10 (Category avg: 8.8/10)
- **Vulnerability Scanning:** 9.7/10 (Category avg: 8.7/10)
- **Threat Hunting:** 9.7/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Plerion?

- **Seller:** [Plerion](https://www.g2.com/sellers/plerion)
- **Company Website:** plerion.com
- **Year Founded:** 2021
- **HQ Location:** Sydney, AU
- **Twitter:** @PlerionHQ  
141 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=66e803ab8dbef91e2779b22043f8f4ae54806808c49472588d1c7efbd3345c29&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fplerion&secure%5Burl_type%5D=linkedin_company_website)  
31 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Financial Services
- **Company Size:** 57% Medium, 30% Small

#### What Do G2 Reviewers Say About Plerion?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **centralized security management** of Plerion, providing clear risk visibility and actionable insights.
- Users love the **ease of use** of Plerion, appreciating its seamless integration and practical guidance for security management.
- Users praise the **exceptional customer support** of Plerion, noting their responsiveness and genuine commitment to customer success.
- Users appreciate the **immediate visibility and actionable advice** provided by Plerion, enhancing their security management efforts.
- Users value the **effective prioritization** in Plerion, allowing focus on critical security issues without distraction.

##### Cons

- Users note that **improvements are needed** in ongoing measurement tools and Jira ticket creation for better long-term value.
- Users feel that Plerion needs **improvement in ongoing measurement** and enhanced features to maintain visible long-term value.
- Users find the **missing features** in Plerion limit customization and cloud support, impacting their overall experience.
- Users find the **limited support for Google Cloud** challenging, wishing for better integration with all cloud providers.
- Users face **integration issues** due to manual updates and deployment friction with the new features in Plerion.

#### What Are Recent G2 Reviews of Plerion?

**["Centralized Cloud Security & Compliance Made Simple with Plerion"](https://www.g2.com/survey_responses/plerion-review-13209518)**

**Rating:** 4.5/5.0 stars

_— Atharva S._

[Read full review](https://www.g2.com/survey_responses/plerion-review-13209518)

**["Continuous Cloud Misconfiguration Detection That Strengthened Our Google Cloud Security"](https://www.g2.com/survey_responses/plerion-review-13216854)**

**Rating:** 4.0/5.0 stars

_— Muhammed A._

[Read full review](https://www.g2.com/survey_responses/plerion-review-13216854)

### [Aikido Security](https://www.g2.com/products/aikido-security/reviews)

Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido helps teams of any size ship secure software faster, automate protection, and simulate real-world attacks with AI-driven precision. The platform’s proprietary AI cuts noise by 95%, delivers one-click fixes, and saves developers 10+ hours per week. Aikido Intel proactively uncovers vulnerabilities in open source packages before disclosure, helping secure more than 50,000 organizations worldwide, including Revolut, Niantic, Visma, Montblanc, and GoCardless.

**Average Rating:** 4.6/5.0

**Total Reviews:** 255

#### How Do G2 Users Rate Aikido Security?

- **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.3/10)
- **Configuration Monitoring:** 7.8/10 (Category avg: 8.8/10)
- **Vulnerability Scanning:** 8.8/10 (Category avg: 8.7/10)

#### Who Is the Company Behind Aikido Security?

- **Seller:** [Aikido Security](https://www.g2.com/sellers/aikido-security)
- **Company Website:** aikido.dev
- **Year Founded:** 2022
- **HQ Location:** Ghent, Belgium
- **Twitter:** @AikidoSecurity  
11,770 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=79406802efc597500b142b19f023ee80eb82879906d7e1e458900293346529a9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Faikido-security%2F&secure%5Burl_type%5D=linkedin_company_website)  
241 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Founder, CTO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 80% Small, 13% Medium

#### What Do G2 Reviewers Say About Aikido Security?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of Aikido Security, benefiting from its clear, actionable insights and seamless integration.
- Users praise Aikido Security for its **fast and user-friendly identification of security issues** in codebases, enhancing development practices.
- Users appreciate the **robust features of Aikido Security** , valuing its usability and effectiveness in enhancing security workflows.
- Users value the **easy integrations** with GitLab, allowing for quick start and effective tracking of security issues.
- Users commend the **easy setup** of Aikido Security, simplifying integration and enhancing their security workflow significantly.

##### Cons

- Users note the **missing features** in Aikido Security, wishing for more integration and advanced configuration options.
- Users find the **pricing excessive** , particularly for startups, despite acknowledging the product's value.
- Users find Aikido Security has **limited features** , particularly in advanced customization and reporting for complex environments.
- Users find the **entry-level pricing** of Aikido Security too high for startups, limiting adoption and experimentation.
- Users are frustrated by the **lack of features** , especially with local scanning and branch handling limitations.

#### What Are Recent G2 Reviews of Aikido Security?

**["Seamless GitHub Integration with Solid Security Findings and Smart False-Positive Analysis"](https://www.g2.com/survey_responses/aikido-security-review-13109689)**

**Rating:** 4.5/5.0 stars

_— Jordan B._

[Read full review](https://www.g2.com/survey_responses/aikido-security-review-13109689)

**["Enterprise Security Without an Enterprise Security Team"](https://www.g2.com/survey_responses/aikido-security-review-13108704)**

**Rating:** 4.0/5.0 stars

_— Ian M._

[Read full review](https://www.g2.com/survey_responses/aikido-security-review-13108704)

### [Cloudanix](https://www.g2.com/products/cloudanix/reviews)

Cloudanix is a Ycombinator-backed security platform for your code, cloud, identities, and workloads. Cloudanix provides solutions for your multi-environments which may include multi-clouds, multi-accounts, multi-regions, multi-runtimes, etc. Cloudanix enables organizations across industries and geographies from startups to enterprises to not just identify and mitigate, but also remediate risks and threats. Onboarding takes less than 30 minutes and just 1 click.

**Average Rating:** 4.9/5.0

**Total Reviews:** 18

#### How Do G2 Users Rate Cloudanix?

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.3/10)
- **Configuration Monitoring:** 10.0/10 (Category avg: 8.8/10)
- **Vulnerability Scanning:** 10.0/10 (Category avg: 8.7/10)
- **Threat Hunting:** 10.0/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Cloudanix?

- **Seller:** [Cloudanix](https://www.g2.com/sellers/cloudanix)
- **Year Founded:** 2020
- **HQ Location:** Sunnyvale, CA
- **Twitter:** @cloudanix  
101 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9198ebf49a4054ab23712b20db8511f3bcbd746a37f0cae737d4810f54c250cc&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcloudanix%2F&secure%5Burl_type%5D=linkedin_company_website)  
21 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software
- **Company Size:** 68% Medium, 26% Small

#### What Do G2 Reviewers Say About Cloudanix?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **seamless cloud integration** of Cloudanix, which simplifies deployment and enhances oversight across platforms.
- Users appreciate the **ease of use** of Cloudanix, highlighting its simple onboarding and seamless integration across environments.
- Users appreciate the **user-friendly interface and quick deployment** of Cloudanix, enhancing efficiency and simplifying access management.
- Users value the **quick deployment and user-friendly interface** of Cloudanix, streamlining security management effortlessly.
- Users praise the **responsive and knowledgeable customer support** of Cloudanix, ensuring prompt assistance and resolution of issues.

##### Cons

- Users desire **auto remediation** in Cloudanix, as the lack of it complicates management and support efforts.
- Users express a desire for **report customization options** , indicating a lack of flexibility in Cloudanix.
- Users note a **lack of remediation** in Cloudanix, expressing a desire for support despite potential workload risks.
- Users desire **greater customization** for reports in Cloudanix, as the out-of-the-box options are insufficient.
- Users express frustration over the **lack of auto remediation** , wishing for better support to manage workloads effectively.

#### What Are Recent G2 Reviews of Cloudanix?

**["Cloudanix: One-Stop Cloud Governance, Compliance, Access Management and more"](https://www.g2.com/survey_responses/cloudanix-review-13134384)**

**Rating:** 5.0/5.0 stars

_— Okesh B._

[Read full review](https://www.g2.com/survey_responses/cloudanix-review-13134384)

**["Effortless Unified Cloud Security Visibility with Cloudanix"](https://www.g2.com/survey_responses/cloudanix-review-12923522)**

**Rating:** 5.0/5.0 stars

_— Akshay A._

[Read full review](https://www.g2.com/survey_responses/cloudanix-review-12923522)

### [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews)

FortiCNAPP (formerly Lacework) is an AI-powered Cloud-Native Application Protection Platform that delivers unified security across your multi-cloud and hybrid environments. Built to protect the entire application lifecycle—from development to runtime—it combines posture management, workload protection, identity security, and threat detection into one integrated platform. By leveraging machine learning and behavioral analytics, FortiCNAPP helps security teams detect unknown threats, reduce noise, and accelerate response. Integrated with the Fortinet Security Fabric, it provides full-stack visibility across cloud, network, and endpoint environments—empowering teams to operate with confidence, reduce complexity, and scale securely.

**Average Rating:** 4.4/5.0

**Total Reviews:** 383

#### How Do G2 Users Rate FortiCNAPP?

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.3/10)
- **Configuration Monitoring:** 8.7/10 (Category avg: 8.8/10)
- **Vulnerability Scanning:** 8.9/10 (Category avg: 8.7/10)
- **Threat Hunting:** 8.2/10 (Category avg: 8.6/10)

#### Who Is the Company Behind FortiCNAPP?

- **Seller:** [Fortinet](https://www.g2.com/sellers/fortinet)
- **Year Founded:** 2000
- **HQ Location:** Sunnyvale, CA
- **Twitter:** @Fortinet  
151,422 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3d5f38bd4746b6501ce1c8f305fccf1b4a457b722a14dc3b74f43b2d5156111e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F6460%2F&secure%5Burl_type%5D=linkedin_company_website)  
16,279 employees on LinkedIn®
- **Ownership:** NASDAQ: FTNT

#### Who Uses This Product?

- **Who Uses This:** Security Engineer, Security Analyst
- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 62% Medium, 26% Large

#### What Do G2 Reviewers Say About FortiCNAPP?

_AI-generated summary from verified user reviews_

##### Pros

- Users favor the **robust security features** of FortiCNAPP, ensuring comprehensive protection across multi-cloud environments.
- Users value the **vulnerability detection capabilities** of FortiCNAPP, enhancing security monitoring and deployment efficiency.
- Users admire the **effective alerting for misconfigurations** and appreciate its seamless integration with Fortinet products.
- Users value the **excellent visibility and integration** of FortiCNAPP, enhancing cloud security management effortlessly.
- Users find Lacework FortiCNAPP's **ease of use** enhances their experience, making setup and navigation straightforward and efficient.

##### Cons

- Users find the **difficult setup** of FortiCNAPP challenging, particularly for those lacking cloud security expertise.
- Users struggle with **poor documentation** , making setup and configuration difficult, particularly for new users.
- Users find the **complex setup** challenging, particularly for new users without extensive cloud security knowledge.
- Users find the **setup difficulty** of FortiCNAPP challenging due to complex configuration and insufficient documentation.
- Users find the **complex configuration** challenging due to overwhelming features and insufficient documentation for newcomers.

#### What Are Recent G2 Reviews of FortiCNAPP?

**["Effortless Setup with Stellar Features"](https://www.g2.com/survey_responses/forticnapp-review-11878517)**

**Rating:** 5.0/5.0 stars

_— Karan B._

[Read full review](https://www.g2.com/survey_responses/forticnapp-review-11878517)

**["Unified Cloud Security Visibility with Smart Risk Prioritization"](https://www.g2.com/survey_responses/forticnapp-review-12375470)**

**Rating:** 4.0/5.0 stars

_— Ashenafi M._

[Read full review](https://www.g2.com/survey_responses/forticnapp-review-12375470)

#### What Are G2 Users Discussing About FortiCNAPP?

- [How much does lacework cost?](https://www.g2.com/discussions/how-much-does-lacework-cost)
- [Who uses lacework?](https://www.g2.com/discussions/who-uses-lacework)
- [Is lacework a SIEM?](https://www.g2.com/discussions/is-lacework-a-siem) - 1 comment
- [What is lacework software?](https://www.g2.com/discussions/what-is-lacework-software)

### [OX Security](https://www.g2.com/products/ox-security/reviews)

OX rewires your security program for the Mythos Age: the era where AI writes the code, chains the exploits, and moves faster than human-built defenses can track. OX is an AI Native Application Protection Platform (AINAPP) unifying security from Prompt to Runtime. It moves your control surface upstream to the prompt, preventing and governing risk at the source instead of chasing it downstream in runtime. OX Mind and OX AI Context Lake connect AI-user governance, code security, cloud and runtime enforcement, and agentic pentesting into one system that shares context across the entire Agentic Development Lifecycle (ADLC), replacing fragmented point tools with a single platform. The platform runs on four connected pillars: OX VibeSec: Prevents unsafe AI decisions at the point of creation and governs every AI user in the organization, not just developers using coding assistants. Full visibility into which agents, MCPs, skills, and packages run, with what permissions, against what data. OX Code: Separates exploitable risk from theoretical noise using evidence from your actual deployment, threat model, and threat intelligence. OX Cloud: Prevents misconfigurations and enforces runtime boundaries that code and agents cannot cross, watching what actually runs in production. OX Agentic Pentester: Continuously simulates adversarial agent behavior to prove exploit paths back to their exact source, feeding what it finds back into OX VibeSec to sharpen governance. OX connects to your existing stack and traces every finding back to its origin (the prompt, the AI user, or the endpoint that created it), then fixes issues at the source rather than flagging them after the fact. For new deployments, OX consolidates governance, code security, cloud enforcement, and pentesting into one platform. For existing stacks, OX layers governance on top and makes current tools smarter through continuous learning, so the same issue never gets created twice. Visit https://ox.security for more information.

**Average Rating:** 4.8/5.0

**Total Reviews:** 51

#### How Do G2 Users Rate OX Security?

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.3/10)

#### Who Is the Company Behind OX Security?

- **Seller:** [OX Security](https://www.g2.com/sellers/ox-security)
- **Year Founded:** 2021
- **HQ Location:** New York, USA
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=ee8e1fc166aedd5d2f8edd57605f86ae8eec3007f5eee8810871f0e4645b4f4d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fox-security%2F&secure%5Burl_type%5D=linkedin_company_website)  
199 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Security Engineer
- **Top Industries:** Financial Services, Information Technology and Services
- **Company Size:** 63% Medium, 25% Large

#### What Do G2 Reviewers Say About OX Security?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **intuitive dashboard and seamless integration** of OX Security, enhancing their security management and workflow efficiency.
- Users value the **seamless collaboration** enabled by OX Security, enhancing their focus on critical development tasks.
- Users commend the **responsive customer support** of OX Security, enhancing their overall operational efficiency and satisfaction.
- Users value the **seamless integrations** with existing tools, enhancing workflows and boosting overall development efficiency.
- Users appreciate the **speed** of OX Security, enabling faster remediation of vulnerabilities and cloud misconfigurations.

##### Cons

- Users find the **complexity** of OX Security daunting, facing a steep learning curve and inadequate documentation.
- Users find the **interface overwhelming** , with a steep learning curve and insufficient documentation to guide new users.
- Users find the **complex setup** challenging, especially due to inadequate documentation and overwhelming UI for new users.
- Users find the **executive dashboard limiting** , impacting effective reporting on product security enhancements to management.
- Users find OX Security's **difficult learning curve** challenging, particularly due to its complex interface and lacking documentation.

#### What Are Recent G2 Reviews of OX Security?

**["A powerful and comprehensive tool that meets most best practices for web app security testing"](https://www.g2.com/survey_responses/ox-security-review-10961361)**

**Rating:** 4.5/5.0 stars

_— Verified User in Gambling & Casinos_

[Read full review](https://www.g2.com/survey_responses/ox-security-review-10961361)

**["Holistic Security Solution with Seamless Integration"](https://www.g2.com/survey_responses/ox-security-review-10487561)**

**Rating:** 4.5/5.0 stars

_— Sharon S._

[Read full review](https://www.g2.com/survey_responses/ox-security-review-10487561)

### [Tenable Cloud Security](https://www.g2.com/products/tenable-tenable-cloud-security/reviews)

Tenable Cloud Security is an actionable cloud security platform that exposes and closes priority security gaps caused by misconfigurations, risky entitlements and vulnerabilities. Organizations use its intuitive UI to unify siloed tools to secure the full cloud stack, achieving end-to-end visibility, prioritization and remediation across infrastructure, workloads, identities, data and AI services. Users can access the extensive knowledgebase of Tenable Research, reducing the risk of breaches with advanced prioritization that understands resource, identity and risk relationships. Tenable uses this context to pinpoint toxic combinations of risk most likely to be exploited. Take action, even if you only have 5 minutes, with guided remediations and code snippets that significantly reduce MTTR. With one click, report on compliance with industry benchmarks and regulatory requirements, e.g. SOC 2, GDPR & HIPAA. TCS is part of Tenable’s AI-powered exposure management platform, Tenable One.

**Average Rating:** 4.6/5.0

**Total Reviews:** 40

#### How Do G2 Users Rate Tenable Cloud Security?

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.3/10)
- **Configuration Monitoring:** 9.2/10 (Category avg: 8.8/10)
- **Vulnerability Scanning:** 9.3/10 (Category avg: 8.7/10)
- **Threat Hunting:** 9.2/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Tenable Cloud Security?

- **Seller:** [Tenable](https://www.g2.com/sellers/tenable)
- **Company Website:** www.tenable.com
- **HQ Location:** Columbia, MD
- **Twitter:** @TenableSecurity  
87,752 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=029266d223c06e6b09e6d209209f15aad3bbad59d05069b38d5ec2757e74adef&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F25452%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,350 employees on LinkedIn®
- **Ownership:** NASDAQ: TENB

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 57% Medium, 38% Large

#### What Do G2 Reviewers Say About Tenable Cloud Security?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **comprehensive compliance capabilities** of Tenable Cloud Security, effectively managing risks and misconfigurations.
- Users value the **comprehensive visibility** Tenable Cloud Security provides into misconfigurations and compliance risks across cloud platforms.
- Users value the **seamless integration with security tools** , enhancing their cloud security management and visibility.
- Users value the **unified visibility** Tenable Cloud Security provides, simplifying monitoring and managing cloud misconfigurations and compliance.
- Users value the **effective vulnerability detection** capabilities of Tenable Cloud Security for enhanced cloud environment protection.

##### Cons

- Users find the **complex setup** of Tenable Cloud Security time-consuming and in need of technical expertise for effective use.
- Users find the **pricing structure concerning** , especially for smaller organizations and teams looking for flexibility.
- Users often face a **difficult setup** process with Tenable Cloud Security, requiring significant technical expertise for integration.
- Users find the **implementation difficulty** of Tenable Cloud Security can be time-consuming and requires technical expertise.
- Users point out the **reporting and analytics limitations** in Tenable Cloud Security, indicating a need for clearer summaries.

#### What Are Recent G2 Reviews of Tenable Cloud Security?

**["Effective automation for security and compliance failures in the cloud"](https://www.g2.com/survey_responses/tenable-cloud-security-review-13139485)**

**Rating:** 4.0/5.0 stars

_— oscar R._

[Read full review](https://www.g2.com/survey_responses/tenable-cloud-security-review-13139485)

**["Clear, Actionable Cloud Risk with Accurate Visibility and Prioritized Findings"](https://www.g2.com/survey_responses/tenable-cloud-security-review-13158563)**

**Rating:** 5.0/5.0 stars

_— Soumyajit D._

[Read full review](https://www.g2.com/survey_responses/tenable-cloud-security-review-13158563)

#### What Are G2 Users Discussing About Tenable Cloud Security?

- [What is Ermetic used for?](https://www.g2.com/discussions/what-is-ermetic-used-for) - 1 comment

### [F5 Distributed Cloud App Infrastructure Protection (AIP)](https://www.g2.com/products/f5-distributed-cloud-app-infrastructure-protection-aip/reviews)

Distributed Cloud AIP, formerly known as Threat Stack, is the leader in cloud security and compliance for application infrastructures, helping companies securely leverage the business benefits of the cloud with proactive risk identification and high-efficacy threat detection across cloud workloads. Distributed Cloud AIP’s application infrastructure protection helps organizations improve operational efficiency by delivering full stack security observability across the cloud management console, host, container, orchestration, managed containers, and serverless layers. Distributed Cloud AIP helps organizations efficiently detect known risks at scale and quickly uncover anomalies throughout the environment. Distributed Cloud AIP helps organizations stay secure through comprehensive security monitoring with a combination of industry-leading telemetry collection, a robust ruleset for known threats, and ThreatML for vulnerability and anomaly detection. Security Services Customers also have the option of leveraging our human expertise with Distributed Cloud AIP Insights and Managed Security Services, our in-house Security Operations Center (SOC) that provides 24/7/365 monitoring of your cloud environment. Through both options, Distributed Cloud AIP aims to deliver visibility and response capabilities across the full stack, allowing organizations to leverage the benefits of modern computing environments, securely. Coupled with other F5 Distributed Cloud Services, customers get application and infrastructure protection. Because applications and APIs are only as secure as the infrastructure they run on. To learn more, visit https://www.f5.com/cloud/products/app-infrastructure-protection

**Average Rating:** 4.4/5.0

**Total Reviews:** 44

#### How Do G2 Users Rate F5 Distributed Cloud App Infrastructure Protection (AIP)?

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.3/10)

#### Who Is the Company Behind F5 Distributed Cloud App Infrastructure Protection (AIP)?

- **Seller:** [F5](https://www.g2.com/sellers/f5-f6451ada-8c47-43f5-b017-58663a045bc5)
- **HQ Location:** Seattle, Washington
- **Twitter:** @F5Networks  
1,385 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=c7f11d476d00d2f94515d8841a7c9d683a4303902a44318177a444690ba1c225&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F4841%2F&secure%5Burl_type%5D=linkedin_company_website)  
6,165 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 70% Medium, 20% Small

#### What Are Recent G2 Reviews of F5 Distributed Cloud App Infrastructure Protection (AIP)?

**["Works, but slight annoyances"](https://www.g2.com/survey_responses/f5-distributed-cloud-app-infrastructure-protection-aip-review-7966850)**

**Rating:** 4.0/5.0 stars

_— Brad S._

[Read full review](https://www.g2.com/survey_responses/f5-distributed-cloud-app-infrastructure-protection-aip-review-7966850)

**["With Threat Stack, its relatively easy to accelerate our compliance & streamline security audits"](https://www.g2.com/survey_responses/f5-distributed-cloud-app-infrastructure-protection-aip-review-7393980)**

**Rating:** 4.0/5.0 stars

_— Shreya B._

[Read full review](https://www.g2.com/survey_responses/f5-distributed-cloud-app-infrastructure-protection-aip-review-7393980)

#### What Are G2 Users Discussing About F5 Distributed Cloud App Infrastructure Protection (AIP)?

- [Is ThreatStack an ids?](https://www.g2.com/discussions/is-threatstack-an-ids)
- [What does a Cspm do?](https://www.g2.com/discussions/what-does-a-cspm-do)
- [Is Threat stack a SIEM?](https://www.g2.com/discussions/is-threat-stack-a-siem)
- [What does Threat Stack do?](https://www.g2.com/discussions/what-does-threat-stack-do)

- [&lsaquo; Prev‹ Prev](/categories/cloud-security-posture-management-cspm/mid-market?order=g2_score#product-list)
- [1](/categories/cloud-security-posture-management-cspm/mid-market?order=g2_score#product-list)
- 2
- Next &rsaquo;Next ›

Spotlight Categories

[Corporate Performance Management (CPM) Software](https://www.g2.com/categories/corporate-performance-management-cpm)

[Video Conferencing Software](https://www.g2.com/categories/video-conferencing)

[Security Awareness Training Software](https://www.g2.com/categories/security-awareness-training)

[Employer of Record (EOR) Software](https://www.g2.com/categories/employer-of-record-eor)

[Corporate Learning Management Systems](https://www.g2.com/categories/corporate-learning-management-systems)

Similar Categories

- [API Security](/categories/api-security)
- [Application Security Posture Management (ASPM)](/categories/application-security-posture-management-aspm)
- [Cloud Compliance](/categories/cloud-compliance)
- [Cloud Data Security](/categories/cloud-data-security)
- [Cloud Detection and Response (CDR)](/categories/cloud-detection-and-response-cdr)

- [Cloud Edge Security](/categories/cloud-edge-security)
- [Cloud File Security](/categories/cloud-file-security)
- [Cloud Infrastructure Entitlement Management (CIEM)](/categories/cloud-infrastructure-entitlement-management-ciem)
- [Cloud-Native Application Protection Platform (CNAPP)](/categories/cloud-native-application-protection-platform-cnapp)
- [Cloud Security Monitoring and Analytics](/categories/cloud-security-monitoring-and-analytics)

- [Cloud Workload Protection Platforms](/categories/cloud-workload-protection-platforms)
- [Extended Detection and Response (XDR) Platforms](/categories/extended-detection-and-response-xdr-platforms)
- [SaaS Security Posture Management (SSPM) Solutions](/categories/saas-security-posture-management-sspm-solutions)
- [Secure Access Service Edge (SASE) Platforms](/categories/secure-access-service-edge-sase-platforms)
- [Secure Service Edge (SSE) Solutions](/categories/secure-service-edge-sse-solutions)

[Browse Cloud Security Posture Management (CSPM) Themes](/categories/cloud-security-posture-management-cspm/themes)