# Best Cloud Security Posture Management (CSPM) Software - Page 5 ## How Many Cloud Security Posture Management (CSPM) Software Products Does G2 Track? **Total Products under this Category:** 109 ### Category Stats (Aug 2026) - **Average Rating:** 4.61/5 (↓0.01 vs Jul 2026) The average rating of products in this category, based on all submitted ratings - **Top Trending Product:** Orca Security (+0.66%) - Among all products in this category, Orca Security recorded the largest rating increase compared to last month _Last updated: August 05, 2026_ ## How Does G2 Rank Cloud Security Posture Management (CSPM) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 6,900+ Authentic Reviews - 109+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## G2 Grid® for Cloud Security Posture Management (CSPM) Software ![G2 Grid® for Cloud Security Posture Management (CSPM) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/cloud-security-posture-management-cspm/grids.png?focus%5B%5D=146504&focus%5B%5D=52233&focus%5B%5D=151443&focus%5B%5D=123609&focus%5B%5D=1333324&focus%5B%5D=167976&focus%5B%5D=112863&focus%5B%5D=20460) Highlighted products: Wiz, Microsoft Defender for Cloud, CrowdStrike Falcon Cloud Security, Orca Security, Oneleet, Scrut Automation, Forward Enterprise, and Sysdig Secure. Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-security-posture-management-cspm/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=orca-security&focus%5B%5D=oneleet&focus%5B%5D=scrut-automation&focus%5B%5D=forward-enterprise&focus%5B%5D=sysdig-sysdig-secure) **Sponsored** ### Google Security Operations Google Security Operations offers a unified experience across SIEM, SOAR, and threat intelligence to drive better detection, investigation, and response. Collect security telemetry data, apply threat intel to identify high priority threats, drive response with playbook automation, case management, and collaboration. It also provides Gemini-native agentic defense to help autonomously handle workflows like alert triage, threat hunting, and detection engineering. Google Security Operations also supports AI Threat Defense to monitor, detect, and respond to threats from code you do not own or cannot patch. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2647&secure%5Bchosen_at%5D=2026-08-08T13%3A02%3A17Z&secure%5Bdisplayable_resource_id%5D=2647&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=2647&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=30500&secure%5Bresource_id%5D=2647&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fcloud-security-posture-management-cspm%3Famp%25253Bpage%3D4%26amp%25253Bselected_view%3Dgrid%26page%3D5&secure%5Btoken%5D=aa4f2e23d7b192eb67e1baea21118ffecc2c1cf537a425030a81447be9f8e988&secure%5Burl%5D=https%3A%2F%2Fcloud.google.com%2Fsecurity%2Fproducts%2Fsecurity-operations%3Futm_source%3DG2%26utm_medium%3Ddisplay%26utm_campaign%3DCloud-SS-DR-GCP-1713658-GCP-DR-NA-US-en-G2-Display-Banner-All-%2525epid%21-%2525ecid%21-securityops%26utm_content%3D%257Bdevice%257D-%257Badgroupid%257D-%257Bnetwork%257D-%257Btargetid%257D-%257Bloc_physical_ms%257D-%257Bcampaignid%257D&secure%5Burl_type%5D=custom_url) ### [Cymptom](https://www.g2.com/products/cymptom/reviews) Cymptom's Network Security Posture Management platform is the only solution that provides continuous full visibility of the entire hybrid network threat landscape in real-time. Cymptom maps all misconfigurations, segmentation flaws, weaknesses and vulnerabilities, as well as open ransomware vectors in the hybrid network continuously in real-time. Unlike standard security tools, Cymptom identifies all open attack paths in the organizational network and alerts about critical risks as soon as they are enabled. Using data analytics, Cymptom leverages the entire MITRE ATT&CK framework, and prioritizes the risks (whether a it's a vulnerability, misconfiguration, permission, and more) based on the particular business and adversary context. Cymptom is deployed on a single machine and requires only a read-only user to the Active Directory. We do not install any agents. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 #### Who Is the Company Behind Cymptom? - **Seller:** [Cymptom](https://www.g2.com/sellers/cymptom) - **HQ Location:** Columbia, Maryland, United States - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=09e079125913f10cfc6547000d9b748693999f5d5bc75014a174f903bb7eed77&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftenableinc%2F&secure%5Burl_type%5D=linkedin_company_website) 2,281 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 100% Large #### What Are Recent G2 Reviews of Cymptom? **["Cymptom for Threat Hunting: a great experience"](https://www.g2.com/survey_responses/cymptom-review-4557907)** **Rating:** 5.0/5.0 stars _— Orel B._ [Read full review](https://www.g2.com/survey_responses/cymptom-review-4557907) #### What Are G2 Users Discussing About Cymptom? - [What is Cymptom used for?](https://www.g2.com/discussions/what-is-cymptom-used-for) ### [Darktrace / CLOUD](https://www.g2.com/products/darktrace-cloud/reviews) Darktrace / CLOUD is a Cloud-Native Application Protection Platform (CNAPP) with advanced real-time Cloud Detection and Response (CDR) to protect runtime environments from active threats. It secures modern hybrid and multi-cloud environments by combining posture management, runtime threat detection, cloud-native response, and automated cloud investigations in a single AI-driven platform. As organizations scale across AWS, Azure, Google Cloud, SaaS, containers, and serverless architectures, static posture checks and alert-heavy tools are no longer enough. Darktrace / CLOUD continuously understands how your cloud environment behaves and automatically stops threats as they unfold. 1. Stop Active Cloud Threats in Real Time with AI-Driven CDR Darktrace delivers true Cloud Detection and Response in live production environments. Its Self-Learning AI monitors identity behavior, workload activity, and network connections to detect the most subtle indicators of account compromise, privilege escalation, insider threats, ransomware, and novel attacks. When real threats emerge, it can take precise, proportionate action to contain them immediately, minimizing business disruption. 2. Maintain Continuous Cloud Visibility, Posture Assurance, and Risk Reduction Darktrace combines continuous cloud monitoring with Cloud Security Posture Management (CSPM) capabilities to dynamically map architecture, identities (human and non-human), services, containers, and configurations. It identifies misconfigurations, vulnerabilities, toxic combinations of privileges, and exploitable attack paths, not just static compliance gaps. This ensures organizations maintain real-time visibility and awareness of risk as cloud environments evolve. 3. Accelerate Incident Response with Automated Cloud Investigations at Scale Darktrace integrates with any detection source and your existing security stack to perform automated investigations at cloud speed and scale. When suspicious activity is detected, Darktrace automatically collects and analyzes forensic evidence across logs, configurations, disk, memory, and ephemeral workloads. Full attacker timelines are generated in minutes, enabling rapid root-cause analysis, confident remediation, and audit-ready evidence without manual data gathering. While many CNAPP solutions focus primarily on posture or fragmented point capabilities, Darktrace / CLOUD unifies prevention, real-time detection, response, and automated investigation in one continuous AI-driven workflow, delivering protection that adapts as fast as the cloud itself. AI-Driven Automation from Detection to Investigation Self-Learning AI detects known, unknown, and novel threats while autonomous response and automated investigations dramatically reduce analyst workload and stop threats automatically. Unmatched Cloud Coverage with Breadth and Depth Darktrace unifies CSPM, identity analytics, runtime CDR, and forensic depth across IaaS, PaaS, SaaS, containers, and serverless environments to deliver protection at cloud speed and scale. True Hybrid, Cross-Domain Protection The platform correlates live activity across cloud, SaaS, on-premises, and network environments to uncover and contain lateral, cross-domain attacks. Flexible Deployment for Enterprise Reality With agentless API integrations and optional agent-based telemetry, Darktrace supports SaaS, hosted, and on-prem deployments, delivering rapid time-to-value while meeting regulatory and operational requirements. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 #### Who Is the Company Behind Darktrace / CLOUD? - **Seller:** [Darktrace](https://www.g2.com/sellers/darktrace) - **Company Website:** www.darktrace.com - **Year Founded:** 2013 - **HQ Location:** Cambridgeshire, England - **Twitter:** @Darktrace 18,177 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=135b6c23b3a9e309b159fca717d84aafed8cc711e65da3de0cae9184091cd6d3&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F5013440%2F&secure%5Burl_type%5D=linkedin_company_website) 2,607 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 100% Medium #### What Are Recent G2 Reviews of Darktrace / CLOUD? **["Real-Time Cloud Visibility and Proactive Anomaly Detection"](https://www.g2.com/survey_responses/darktrace-cloud-review-12659218)** **Rating:** 4.5/5.0 stars _— Angel I._ [Read full review](https://www.g2.com/survey_responses/darktrace-cloud-review-12659218) ### [Fidelis Halo](https://www.g2.com/products/fidelis-halo/reviews) CloudPassage is a security and compliance automation platform designed to provide instant visibility and continuous protection for servers in any combination of data centers, private clouds and public clouds. **Average Rating:** 4.8/5.0 **Total Reviews:** 3 #### How Do G2 Users Rate Fidelis Halo? - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10) #### Who Is the Company Behind Fidelis Halo? - **Seller:** [Fidelis Cybersecurity](https://www.g2.com/sellers/fidelis-cybersecurity) - **Year Founded:** 2023 - **HQ Location:** Riverside, US - **Twitter:** @FidelisCyber 2,213 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=03cf187d663023796aeb66c4ba00369643ebb487f8fd9dd0b7bde41b5042cab8&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ffideliscybersecurity&secure%5Burl_type%5D=linkedin_company_website) 163 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 67% Large, 33% Small #### What Do G2 Reviewers Say About Fidelis Halo? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **real-time data intrusion detection** of Fidelis Halo, ensuring robust protection for critical assets and sensitive data. - Users value the **real-time data intrusion detection** of Fidelis Halo, ensuring robust protection for critical assets and sensitive data. - Users value the **real-time data intrusion detection** of Fidelis Halo, ensuring robust protection for critical assets. - Users appreciate the **real-time monitoring** of Fidelis Halo, ensuring robust protection for critical assets and sensitive data. - Users value the **real-time data intrusion detection** of Fidelis Halo, ensuring robust protection for critical assets and sensitive data. #### What Are Recent G2 Reviews of Fidelis Halo? **["I highly recommend CloudPassage Fidelis Halo - i believe it’s the best out there"](https://www.g2.com/survey_responses/fidelis-halo-review-8501439)** **Rating:** 5.0/5.0 stars _— Surya S._ [Read full review](https://www.g2.com/survey_responses/fidelis-halo-review-8501439) **["Real-time Security for your Data Houses"](https://www.g2.com/survey_responses/fidelis-halo-review-9167652)** **Rating:** 4.5/5.0 stars _— Verified User in Computer & Network Security_ [Read full review](https://www.g2.com/survey_responses/fidelis-halo-review-9167652) #### What Are G2 Users Discussing About Fidelis Halo? - [What is Fidelis Halo used for?](https://www.g2.com/discussions/what-is-fidelis-halo-used-for) ### [FireMon Cloud Defense](https://www.g2.com/products/firemon-cloud-defense/reviews) FireMon Cloud Defense is the only distributed cloud security operations platform with real-time cloud security posture management, threat detection and response, and enhanced identity protection. **Average Rating:** 4.3/5.0 **Total Reviews:** 3 #### How Do G2 Users Rate FireMon Cloud Defense? - **Configuration Monitoring:** 8.3/10 (Category avg: 8.8/10) - **Vulnerability Scanning:** 10.0/10 (Category avg: 8.7/10) - **Threat Hunting:** 10.0/10 (Category avg: 8.6/10) #### Who Is the Company Behind FireMon Cloud Defense? - **Seller:** [FireMon](https://www.g2.com/sellers/firemon) - **Year Founded:** 2004 - **HQ Location:** Overland Park, KS - **Twitter:** @FireMon 2,435 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=19ee18a27e99815aaca74f76d30e673d53d5db213d29a74df00b0f7a6848031b&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1850855&secure%5Burl_type%5D=linkedin_company_website) 272 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 67% Small, 33% Large #### What Are Recent G2 Reviews of FireMon Cloud Defense? **["Security for your operations, work in the cloud without vulnerability problems."](https://www.g2.com/survey_responses/firemon-cloud-defense-review-8367522)** **Rating:** 4.5/5.0 stars _— Ana M._ [Read full review](https://www.g2.com/survey_responses/firemon-cloud-defense-review-8367522) **["Simplifies communication during critical situations"](https://www.g2.com/survey_responses/firemon-cloud-defense-review-9792002)** **Rating:** 4.0/5.0 stars _— Abdullah S._ [Read full review](https://www.g2.com/survey_responses/firemon-cloud-defense-review-9792002) ### [Fluid Attacks](https://www.g2.com/products/fluid-attacks/reviews) Implement Fluid Attacks' comprehensive, AI-powered solution into your SDLC and develop secure software without delays. As an all-in-one solution, Fluid Attacks accurately finds and helps you remediate vulnerabilities throughout the SDLC and ensures secure software development. The solution integrates its AI, automated tool, and team of pentesters to perform SAST, SCA, DAST, CSPM, SCR, PtaaS and RE to help you improve your security posture. This way, Fluid Attacks delivers accurate knowledge of the security status of your application. This means security goes alongside innovation without hindering your speed. Fluid Attacks provides you with expert knowledge about vulnerabilities and support options that enable you to remediate the security issues in your application. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 #### How Do G2 Users Rate Fluid Attacks? - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.3/10) #### Who Is the Company Behind Fluid Attacks? - **Seller:** [Fluid Attacks](https://www.g2.com/sellers/fluid-attacks) - **Year Founded:** 2001 - **HQ Location:** San Francisco, US - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b1975d667eb318dd90eefda422e06b0be32f25507e44c307a8bb9e17d2dd60c0&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ffluidattacks%2F&secure%5Burl_type%5D=linkedin_company_website) 136 employees on LinkedIn® - **Phone:** +14154042154 #### Who Uses This Product? - **Company Size:** 100% Large #### What Are Recent G2 Reviews of Fluid Attacks? **["Easy integration with the ecosystem and very good support"](https://www.g2.com/survey_responses/fluid-attacks-review-13078718)** **Rating:** 4.5/5.0 stars _— Verified User in Banking_ [Read full review](https://www.g2.com/survey_responses/fluid-attacks-review-13078718) ### [Gauntlet](https://www.g2.com/products/gauntlet/reviews) Gauntlet mitigates risks like security breaches, data theft, and compliance violations with Generative AI (GenAI), enhancing efficiency by accelerating time-to-fix by 60%. Its core pillars include Cloud Security Posture Management (CSPM) for proactive vulnerability remediation, Software Supply Chain Security (SBOM) for component transparency, Secrets Scanning to safeguard sensitive credentials, and AI Security Posture Management (AISPM) to secure cloud-based AI services. Gauntlet ensures seamless compliance with over 20 global standards, including HIPAA, FDA, and GDPR, making regulatory adherence effortless for organizations. This powerful platform reduces human error and optimizes operational security at every level. Visit https://www.gauntlet.security for more information. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 #### How Do G2 Users Rate Gauntlet? - **Configuration Monitoring:** 10.0/10 (Category avg: 8.8/10) - **Vulnerability Scanning:** 10.0/10 (Category avg: 8.7/10) - **Threat Hunting:** 10.0/10 (Category avg: 8.6/10) #### Who Is the Company Behind Gauntlet? - **Seller:** [Gauntlet Technologies](https://www.g2.com/sellers/gauntlet-technologies) - **HQ Location:** N/A - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fc27669d92ecce33603ce9503f27e3e9b09f68d6470c2c83a3a2c48b646d4c37&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fgauntlet-security%2F&secure%5Burl_type%5D=linkedin_company_website) 1 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 100% Small #### What Do G2 Reviewers Say About Gauntlet? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **clear information and guidance** from Gauntlet, enhancing understanding and effective remediation. - Users value the **clear remediation guidance** from Gauntlet, finding it easy to understand and implement. - Users value the **clear reporting** provided by Gauntlet, which includes easy-to-read summaries and precise recommendations. ##### Cons - Users feel the **inefficient alert system** fails to address urgent issues and lacks proactive support for simple fixes. #### What Are Recent G2 Reviews of Gauntlet? **["A Much Needed Overview of AWS Posture"](https://www.g2.com/survey_responses/gauntlet-review-10653831)** **Rating:** 5.0/5.0 stars _— Jeremy B._ [Read full review](https://www.g2.com/survey_responses/gauntlet-review-10653831) ### [NetSPI](https://www.g2.com/products/netspi-2026-02-04/reviews) NetSPI PTaaS is a type of penetration testing as a service (PTaaS) solution designed to help organizations identify and remediate vulnerabilities within their systems, applications, and networks. This service utilizes a combination of skilled professionals, established processes, and advanced AI technology to provide contextualized security outcomes in real time, all accessible through a unified platform. By addressing the limitations of traditional penetration testing methods, NetSPI PTaaS offers a more efficient and comprehensive approach to security assessments. This service is targeted at businesses of all sizes, from startups to large enterprises, making it particularly beneficial for security teams looking to enhance their vulnerability management strategies. NetSPI PTaaS caters to a variety of use cases, including application security assessments, infrastructure testing, and evaluations of emerging technologies such as artificial intelligence. With over 50 different types of penetration tests available, including traditional point in time testing and our continuous offerings, organizations can customize their security evaluations to meet specific needs, ensuring thorough coverage across all potential attack surfaces. A key feature of NetSPI PTaaS is its commitment to delivering real-time findings through a single platform. This capability allows security teams to receive immediate insights into vulnerabilities, enabling them to act swiftly to mitigate risks based on role and priority, managing testing in just a few clicks. The platform's integration capabilities enhance its usability, allowing organizations to seamlessly incorporate findings into their existing security workflows. This streamlined approach not only saves time but also ensures that remediation efforts are based on high-fidelity, manually validated findings, thus improving overall security effectiveness. The expertise of NetSPI's team of over 350 in-house security professionals is another significant differentiator. Their extensive experience and knowledge in the field of cybersecurity ensure that the testing methodologies employed are rigorous and consistent, uncovering vulnerabilities, exposures, and misconfigurations that may be overlooked by other solutions. This white-glove approach to penetration testing emphasizes the importance of manual validation, providing organizations with reliable and actionable insights that can significantly enhance their security posture. NetSPI PTaaS stands out in the realm of penetration testing services by combining expert human analysis with advanced AI technology, delivering timely and accurate results. This empowers organizations to strengthen their defenses against evolving cyber threats, ensuring that they remain resilient in an increasingly complex security landscape. **Average Rating:** 4.9/5.0 **Total Reviews:** 13 #### How Do G2 Users Rate NetSPI? - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10) #### Who Is the Company Behind NetSPI? - **Seller:** [NetSPI](https://www.g2.com/sellers/netspi) - **Company Website:** www.netspi.com - **Year Founded:** 2001 - **HQ Location:** Minneapolis, MN - **Twitter:** @NetSPI 4,041 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fc40e8c9ea893c5c5cbba7c0e7c2c446fe731066e4e27af4d2a77540f7888797&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fnetspi%2F&secure%5Burl_type%5D=linkedin_company_website) 568 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 46% Large, 38% Medium #### What Do G2 Reviewers Say About NetSPI? _AI-generated summary from verified user reviews_ ##### Pros - Users commend the **expertise of NetSPI's team** , highlighting their exceptional project management and penetration testing capabilities. - Users commend the **top-notch team quality** at NetSPI, praising their exceptional support and effective engagement. - Users value the **effective communication** with NetSPI, ensuring they are always informed throughout the assessment process. - Users appreciate the **simple and easy-to-use interface** of NetSPI, facilitating smooth communication and project management. - Users commend the **exceptional service quality** of NetSPI, highlighting their strong leadership and effective tools for engagement. ##### Cons - Users find the **difficult navigation** in NetSPI frustrating, hindering their overall experience with the platform. - Users experience **false positives** in vulnerability reports, leading to confusion about affected devices and impacts. - Users noted that **clarity on impacted devices** in vulnerability reports is often lacking, causing confusion in risk assessment. - Users criticized the **lack of detail** in vulnerability reports, leading to confusion about affected devices. - Users face a **lack of clarity** regarding impacted devices in vulnerability reports, leading to confusion and uncertainty. #### What Are Recent G2 Reviews of NetSPI? **["Attentive, Knowledgeable NetSPI Specialists with a Truly Human Touch"](https://www.g2.com/survey_responses/netspi-review-12678851)** **Rating:** 5.0/5.0 stars _— Verified User in Transportation/Trucking/Railroad_ [Read full review](https://www.g2.com/survey_responses/netspi-review-12678851) **["Exceptional Pentesting and Seamless Collaboration"](https://www.g2.com/survey_responses/netspi-review-12705364)** **Rating:** 4.5/5.0 stars _— Jake B._ [Read full review](https://www.g2.com/survey_responses/netspi-review-12705364) ### [Skyhigh Cloud-Native Application Protection Platform](https://www.g2.com/products/skyhigh-cloud-native-application-protection-platform/reviews) Skyhigh Cloud Native Application Protection Platform CNAPP is the industry’s first platform to extend Cloud Access Security Broker CASB, bringing application and data context to converge Cloud Security Posture Management CSPM with IaaS Data Loss Prevention DLP for IaaS public clouds. Skyhigh CNAPP provides consistent data protection, threat prevention, governance, and compliance throughout the cloud-native application development lifecycle. Skyhigh CNAPP is consolidated into a fully converged platform and managed from the same single console as the rest of the Skyhigh SSE services. **Average Rating:** 4.8/5.0 **Total Reviews:** 2 #### How Do G2 Users Rate Skyhigh Cloud-Native Application Protection Platform? - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10) - **Configuration Monitoring:** 10.0/10 (Category avg: 8.8/10) - **Vulnerability Scanning:** 8.3/10 (Category avg: 8.7/10) - **Threat Hunting:** 6.7/10 (Category avg: 8.6/10) #### Who Is the Company Behind Skyhigh Cloud-Native Application Protection Platform? - **Seller:** [Skyhigh Security](https://www.g2.com/sellers/skyhigh-security) - **Year Founded:** 2022 - **HQ Location:** San Jose, CA - **Twitter:** @SkyhighSecurity 17,573 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=054a196f81bf518d12deba69ef25a874f9649ddec84a65ea195d46ddfc0b4847&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fskyhighsecurity%2F&secure%5Burl_type%5D=linkedin_company_website) 751 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 100% Medium #### What Are Recent G2 Reviews of Skyhigh Cloud-Native Application Protection Platform? **["A Comprehensive Analysis"](https://www.g2.com/survey_responses/skyhigh-cloud-native-application-protection-platform-review-9996125)** **Rating:** 4.5/5.0 stars _— Jhansi R._ [Read full review](https://www.g2.com/survey_responses/skyhigh-cloud-native-application-protection-platform-review-9996125) **["Best Security"](https://www.g2.com/survey_responses/skyhigh-cloud-native-application-protection-platform-review-9995507)** **Rating:** 5.0/5.0 stars _— Abhijit S._ [Read full review](https://www.g2.com/survey_responses/skyhigh-cloud-native-application-protection-platform-review-9995507) ### [ThreatLocker Zero Trust Platform](https://www.g2.com/products/threatlocker-zero-trust-platform/reviews) ThreatLocker is a global leading Zero Trust Platform designed to empower organizations by providing them with the ability to control which applications are permitted to run on their networks. This suite of security tools is tailored for a wide range of users, including businesses, government agencies, and academic institutions, all of whom face the increasing threat of cybercrime. By enabling users to manage application execution, ThreatLocker aims to create a secure environment where organizations can operate without the looming fear of malware and other cyber threats. The ThreatLocker suite stands out in the cybersecurity landscape due to its focus on application allowlisting, a proactive approach that allows organizations to define and enforce policies on what software can be executed. This feature is particularly beneficial for organizations that require stringent security measures, as it minimizes the risk of unauthorized applications compromising sensitive data. The solution is designed for IT administrators who seek to enhance their network security posture while maintaining operational efficiency. One of the key features of ThreatLocker is its ability to provide real-time visibility and control over application behavior. This allows organizations to monitor application usage and detect any suspicious activities that may indicate a potential threat. Additionally, ThreatLocker offers customizable policies that can be tailored to meet the specific needs of different departments or user groups within an organization, ensuring that security measures align with operational requirements. Another significant benefit of ThreatLocker is its user-friendly interface, which simplifies the management of security policies. This accessibility enables IT teams to implement and adjust security measures without extensive training or expertise in cybersecurity. Furthermore, ThreatLocker is backed by a team of experienced cybersecurity professionals who continuously update and enhance the platform to address emerging threats and vulnerabilities. In essence, ThreatLocker provides organizations with the tools they need to take control of their cybersecurity strategy. By focusing on application control and offering robust monitoring capabilities, ThreatLocker helps organizations mitigate risks associated with cyber threats while fostering a secure environment for their operations. This innovative approach to cybersecurity empowers users to navigate their digital landscape confidently, free from the influence of cybercriminals. **Average Rating:** 4.8/5.0 **Total Reviews:** 513 #### How Do G2 Users Rate ThreatLocker Zero Trust Platform? - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.3/10) #### Who Is the Company Behind ThreatLocker Zero Trust Platform? - **Seller:** [Threatlocker Inc](https://www.g2.com/sellers/threatlocker-inc) - **Company Website:** www.threatlocker.com - **Year Founded:** 2017 - **HQ Location:** Orlando, Florida, United States - **Twitter:** @ThreatLocker 2,764 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=03e47fc37804aa3e4c708b32a22a486387eb69a64688b6ee81bb1dc565ec69db&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F65512111%2F&secure%5Burl_type%5D=linkedin_company_website) 736 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** President, CEO - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 53% Small, 33% Medium #### What Do G2 Reviewers Say About ThreatLocker Zero Trust Platform? _AI-generated summary from verified user reviews_ ##### Pros - Users rave about the **fantastic customer support** provided by ThreatLocker, ensuring prompt resolutions and valuable assistance. - Users find ThreatLocker Zero Trust Platform to be extremely **easy to implement and manage** , enhancing their security effortlessly. - Users appreciate the **effective threat detection** of ThreatLocker, enhancing security and confidence in their environments. - Users value the **robust security** of ThreatLocker, enhancing control and minimizing risks in dynamic environments. - Users value the **comprehensive application control** features of ThreatLocker, enhancing security and simplifying policy management effectively. ##### Cons - Users find the **steep learning curve** of ThreatLocker challenging, particularly for those lacking dedicated IT support. - Users find the **difficult learning curve** of ThreatLocker challenging, especially with training and policy management complexities. - Users find the **configuration process challenging** , often requiring additional support to manage effectively within teams. - Users find the **system complicated** , often requiring expertise and support for effective configuration and use. - Users find the **training required** for ThreatLocker challenging and time-consuming, hindering user understanding and adoption. #### What Are Recent G2 Reviews of ThreatLocker Zero Trust Platform? **["Smooth, Easy-to-Use Platform with Game-Changing Cyber Heroes Support"](https://www.g2.com/survey_responses/threatlocker-zero-trust-platform-review-13170230)** **Rating:** 4.5/5.0 stars _— Justin F._ [Read full review](https://www.g2.com/survey_responses/threatlocker-zero-trust-platform-review-13170230) **["User-Friendly UI, Fast Portal, and Excellent Support"](https://www.g2.com/survey_responses/threatlocker-zero-trust-platform-review-13149982)** **Rating:** 5.0/5.0 stars _— Seth D._ [Read full review](https://www.g2.com/survey_responses/threatlocker-zero-trust-platform-review-13149982) #### What Are G2 Users Discussing About ThreatLocker Zero Trust Platform? - [Does ThreatLocker work on Mac?](https://www.g2.com/discussions/does-threatlocker-work-on-mac) - 2 comments, 1 upvote - [What is Application Control software?](https://www.g2.com/discussions/what-is-application-control-software) - [What is the function of application whitelisting?](https://www.g2.com/discussions/what-is-the-function-of-application-whitelisting) - 1 comment - [What does ThreatLocker do?](https://www.g2.com/discussions/what-does-threatlocker-do) - 1 comment ### [ARGOS Cloud Security](https://www.g2.com/products/argos-cloud-security/reviews) ARGOS Cloud Security is a comprehensive solution designed to streamline and enhance cloud security assessments across platforms such as Microsoft Azure, Entra ID, M365, and AWS. By automating the data gathering and analysis processes, ARGOS significantly reduces the time required for cloud assessments from days or weeks to mere minutes. It delivers detailed reports that include executive summaries, compliance heatmaps, remediation roadmaps, and architecture diagrams, enabling organizations to identify and address security vulnerabilities efficiently. Key Features and Functionality: - Automated Reports: Generates comprehensive assessment reports featuring executive summaries, compliance heatmaps, remediation roadmaps, and architecture diagrams. - Attack Path Analysis: Identifies potential attack paths and evaluates the blast radius of cloud vulnerabilities to assess risk exposure. - AI Investigation: Utilizes AI to analyze cloud environments, assisting in attack path discovery, interpretation, and remediation strategies. - API Integration: Offers seamless integration with existing systems, allowing data incorporation into SIEMs or cloud management portals. - Multi-Cloud Compliance: Assesses compliance across multiple cloud platforms, including AWS, Azure, M365, and Entra ID. - Multi-Tenant Management: Provides centralized management for multiple customers and tenants with role-based access control and comprehensive audit logging. Primary Value and Problem Solved: ARGOS Cloud Security addresses the challenges associated with manual cloud security assessments, which are often time-consuming and complex. By automating data collection and analysis, ARGOS reduces the initial data gathering time from days or weeks to approximately 10 minutes. This efficiency allows organizations to quickly identify and remediate security issues, enhancing overall cloud security posture and compliance. Additionally, ARGOS's AI capabilities and detailed reporting empower security professionals to make informed decisions, ultimately saving time and resources while improving security outcomes. #### Who Is the Company Behind ARGOS Cloud Security? - **Seller:** [ARGOS Cloud Security](https://www.g2.com/sellers/argos-cloud-security) - **Year Founded:** 2020 - **HQ Location:** Geelong, AU - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6a30f09e44fb6c64f98fe3d872104f6ab833a4f8b184e5cbb1d9e0bfb40cdcb9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fargos-cloud-security&secure%5Burl_type%5D=linkedin_company_website) 9 employees on LinkedIn® ### [Balbix](https://www.g2.com/products/balbix/reviews) The Balbix Security Cloud uses AI and automation to reinvent how the world’s leading organizations reduce breach risk. With Balbix, security teams can now accurately inventory their cloud and on-premise assets, conduct risk-based vulnerability management, and quantify their cyber risk in monetary terms. Security leaders can measure and improve SLA compliance and other metrics in real time, show ROI for their cybersecurity program, and confidently report on their security posture to the board of directors and other stakeholders. **Average Rating:** 4.8/5.0 **Total Reviews:** 2 #### How Do G2 Users Rate Balbix? - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10) #### Who Is the Company Behind Balbix? - **Seller:** [Balbix](https://www.g2.com/sellers/balbix) - **Year Founded:** 2015 - **HQ Location:** San Jose California ,United States - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=cfda3523d87b319503f5d240cb09dbff36bc97a34044f8ca5150f4d4c4f61d92&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbalbix%2F&secure%5Burl_type%5D=linkedin_company_website) 124 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 50% Large, 50% Medium #### What Do G2 Reviewers Say About Balbix? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **customizable and relevant dashboards** of Balbix, enhancing their ability to access tailored data insights. - Users value the **customizable and relevant dashboards** that fit their specific needs and provide valuable insights. ##### Cons - Users find that Balbix lacks **industry-tier separation** , making risk management less tailored to specific needs. #### What Are Recent G2 Reviews of Balbix? **["Best AI powered cyber security tool"](https://www.g2.com/survey_responses/balbix-review-8663732)** **Rating:** 4.5/5.0 stars _— Rahul W._ [Read full review](https://www.g2.com/survey_responses/balbix-review-8663732) **["AI models and data"](https://www.g2.com/survey_responses/balbix-review-9997061)** **Rating:** 5.0/5.0 stars _— Alan Salvador A._ [Read full review](https://www.g2.com/survey_responses/balbix-review-9997061) ### [bearhug](https://www.g2.com/products/bearhug/reviews) Bearhug is AWS security for teams that don't have a security team. Built on AWS Security Hub and GuardDuty, bearhug continuously monitors your AWS accounts for vulnerabilities, translates every finding into plain English, and lets you fix issues with one click - directly from the dashboard, no AWS console required. Setup takes under five minutes via AWS Marketplace. No installation, no configuration, no consultants. Key features: \* Plain English and technical views - switch between them depending on your audience \* One-click remediation with rollback included \* Real-time monitoring with email alerts as new issues emerge \* Multi-account dashboard for production, staging, and development environments \* Compliance alignment with GDPR, SOC 2, ISO 27001, PCI-DSS, and Cyber Essentials Pricing: $100/month per AWS account - flat rate, no per-asset pricing. Billed through your existing AWS Marketplace account. #### Who Is the Company Behind bearhug? - **Seller:** [bearhug](https://www.g2.com/sellers/bearhug) - **HQ Location:** London, GB - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=bf37e8c602c8d2d10b95acc23155cae2cb0eb19a661882921be640fcef4768a4&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbearhug-cloud%2F&secure%5Burl_type%5D=linkedin_company_website) 2 employees on LinkedIn® ### [Bionic](https://www.g2.com/products/bionic-bionic/reviews) Bionic is an agentless Application Security Posture Management (ASPM) platform that provides unique visibility into the security, data privacy, and operational risk of applications running in production at scale. Bionic operates continuously and in real-time at the speed of CI/CD so that no application change, drift, or risk goes unnoticed by security, DevOps, and engineering teams. Bionic is the only solution that provides customers with a complete security posture of their applications, services, dependencies, APIs, and data flows within hybrid cloud production environments. #### Who Is the Company Behind Bionic? - **Seller:** [Bionic](https://www.g2.com/sellers/bionic) - **Year Founded:** 2011 - **HQ Location:** Remote, Oregon, United States - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6033e2ec1e29c3a7a2792fd3b806446cc44c282208e7642da8ca5f01adff0119&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcrowdstrike&secure%5Burl_type%5D=linkedin_company_website) 10,347 employees on LinkedIn® ### [Cisco Multicloud Defense](https://www.g2.com/products/cisco-multicloud-defense/reviews) Cisco Multicloud Defense protects all of your cloud environments using a single software-as-a-service (SaaS) control plane, eliminating inefficient, complex, and costly point solutions. Simplify multicloud security Manage security across public and private clouds from one place. Create, enforce, and update policies across all your clouds in real time. Gain multidirectional protection Ingress, egress, and east-west protection stops inbound threats, blocks command and control, data exfiltration, and prevents lateral movement. Increase operational efficiency Automate underlying cloud network constructs and integrate with infrastructure as code (IaC) for greater agility, flexibility, and scale. #### Who Is the Company Behind Cisco Multicloud Defense? - **Seller:** [Cisco](https://www.g2.com/sellers/cisco) - **Year Founded:** 1984 - **HQ Location:** San Jose, CA - **Twitter:** @Cisco 720,366 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=476aeabc5a712d049453edd5c54ea0318890d9e60d93782e37fe028224df1cbd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcisco%2F&secure%5Burl_type%5D=linkedin_company_website) 95,545 employees on LinkedIn® - **Ownership:** NASDAQ:CSCO ### [Cisco Secure Network Analytics](https://www.g2.com/products/cisco-secure-network-analytics/reviews) Stealthwatch is the only solution that detects threats across your private network, public clouds, and even in encrypted traffic. **Average Rating:** 4.4/5.0 **Total Reviews:** 31 #### How Do G2 Users Rate Cisco Secure Network Analytics? - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.3/10) #### Who Is the Company Behind Cisco Secure Network Analytics? - **Seller:** [Cisco](https://www.g2.com/sellers/cisco) - **Year Founded:** 1984 - **HQ Location:** San Jose, CA - **Twitter:** @Cisco 720,366 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=476aeabc5a712d049453edd5c54ea0318890d9e60d93782e37fe028224df1cbd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcisco%2F&secure%5Burl_type%5D=linkedin_company_website) 95,545 employees on LinkedIn® - **Ownership:** NASDAQ:CSCO #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 52% Large, 33% Small #### What Are Recent G2 Reviews of Cisco Secure Network Analytics? **["Great network analytics tool by Cisco"](https://www.g2.com/survey_responses/cisco-secure-network-analytics-review-8647472)** **Rating:** 4.5/5.0 stars _— Verified User in Information Technology and Services_ [Read full review](https://www.g2.com/survey_responses/cisco-secure-network-analytics-review-8647472) **["Cisco Secure Network Review"](https://www.g2.com/survey_responses/cisco-secure-network-analytics-review-8728642)** **Rating:** 5.0/5.0 stars _— Harsh P._ [Read full review](https://www.g2.com/survey_responses/cisco-secure-network-analytics-review-8728642) - [‹ Prev‹ Prev](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score&page=4#product-list) - [1](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score#product-list) - [2](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score&page=2#product-list) - [3](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score&page=3#product-list) - [4](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score&page=4#product-list) - 5 - [6](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score&page=6#product-list) - [7](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score&page=7#product-list) - [8](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score&page=8#product-list) - [Next ›Next ›](/categories/cloud-security-posture-management-cspm?amp%253Bpage=4&%253Bselected_view=grid&order=g2_score&page=6#product-list) Spotlight Categories [Purchasing Software](https://www.g2.com/categories/purchasing-software) [Digital Adoption Platforms](https://www.g2.com/categories/digital-adoption-platform) [Network Monitoring Software](https://www.g2.com/categories/network-monitoring) [Professional Services Automation Software](https://www.g2.com/categories/professional-services-automation) [Webinar Platforms](https://www.g2.com/categories/webinar) Similar Categories - [API Security](/categories/api-security) - [Application Security Posture Management (ASPM)](/categories/application-security-posture-management-aspm) - [Cloud Compliance](/categories/cloud-compliance) - [Cloud Data Security](/categories/cloud-data-security) - [Cloud Detection and Response (CDR)](/categories/cloud-detection-and-response-cdr) - [Cloud Edge Security](/categories/cloud-edge-security) - [Cloud File Security](/categories/cloud-file-security) - [Cloud Infrastructure Entitlement Management (CIEM)](/categories/cloud-infrastructure-entitlement-management-ciem) - [Cloud-Native Application Protection Platform (CNAPP)](/categories/cloud-native-application-protection-platform-cnapp) - [Cloud Security Monitoring and Analytics](/categories/cloud-security-monitoring-and-analytics) - [Cloud Workload Protection Platforms](/categories/cloud-workload-protection-platforms) - [Extended Detection and Response (XDR) Platforms](/categories/extended-detection-and-response-xdr-platforms) - [SaaS Security Posture Management (SSPM) Solutions](/categories/saas-security-posture-management-sspm-solutions) - [Secure Access Service Edge (SASE) Platforms](/categories/secure-access-service-edge-sase-platforms) - [Secure Service Edge (SSE) Solutions](/categories/secure-service-edge-sse-solutions) [Browse Cloud Security Posture Management (CSPM) Themes](/categories/cloud-security-posture-management-cspm/themes) ![Lauren Worth](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Lauren Worth") LW Researched and written by [Lauren Worth](https://research.g2.com/insights/author/lauren-worth) Updated October 3, 2024 Cloud security posture management (CSPM) is an emerging market of vulnerability management and security compliance technologies designed to ensure protection for complex, modern hybrid computing environments. CSPM tools monitor cloud applications, services, containers, and infrastructure to detect and remediate misconfigurations, or incorrectly enforced policies. Cloud security posture management vendors create solutions that will typically remediate issues automatically when triggered by an anomaly or other misconfiguration based on rules set by the administrator. Companies use these tools because it is very difficult to map out and consistently visualize all the components of a complex cloud computing environment. New tools have been developed to enable AI-based, automated management of identities, networks, infrastructure, etc. However, only CSPM software has emerged to provide continuous monitoring and visibility of a company’s security posture, and pair it with automated detection and remediation for issues as they emerge across disparate computing environments. These tools are part of the emerging secure access service edge (SASE) technology market that also includes [software defined perimeter (SDP) software](https://www.g2.com/categories/software-defined-perimeter-sdp), [cloud access security brokers (CASB) software](https://www.g2.com/categories/cloud-access-security-broker-casb), [secure web gateways](https://www.g2.com/categories/secure-web-gateways), and [zero trust networking software](https://www.g2.com/categories/zero-trust-networking). Together, these tools are delivered virtually through [SD-WAN software](https://www.g2.com/categories/sd-wan) to provide an all-encompassing security solution for all components in any cloud environment. To qualify for inclusion in the Cloud Security Posture Management (CSPM) category, a product must: - Facilitate the automated detection and remediation of cloud misconfigurations - Monitor security policies and configurations across infrastructure, applications, and other cloud environments - Visualize cloud infrastructure in a single-pane-of-glass view - Monitor for other issues relating to cloud compliance, infrastructure as code, and other potential security gaps Show More