Best Cloud Security Posture Management (CSPM) Software - Page 8

How Many Cloud Security Posture Management (CSPM) Software Products Does G2 Track?

Total Products under this Category: 114

Category Stats (Sep 2026)

  • Average Rating: 4.61/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Orca Security (+0.09%) - Among all products in this category, Orca Security recorded the largest rating increase compared to last month

Last updated: September 01, 2026

How Does G2 Rank Cloud Security Posture Management (CSPM) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 7,000+ Authentic Reviews
  • 114+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Cloud Security Posture Management (CSPM) Software

G2 Grid® for Cloud Security Posture Management (CSPM) Software plotting products by satisfaction and market presence

Highlighted products: Wiz, Microsoft Defender for Cloud, CrowdStrike Falcon Cloud Security, Orca Security, Oneleet, Scrut Automation, Forward Enterprise, and Sysdig Secure.

Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-security-posture-management-cspm/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=orca-security&focus%5B%5D=oneleet&focus%5B%5D=scrut-automation&focus%5B%5D=forward-enterprise&focus%5B%5D=sysdig-sysdig-secure)

Shieldly

Shieldly is an AI-powered security analysis platform for AWS. It analyzes IAM policies, resource-based policies, CloudFormation templates, and AWS costs — surfacing over-privileged roles, privilege escalation paths, unused permissions, and security misconfigurations with plain-English explanations and prioritized remediation steps. Ships as a web app, CLI, VS Code extension, GitHub Action, and CDK Guard construct.

Who Is the Company Behind Shieldly?

Stream Security

SecOps deserve better than raw cloud telemetry. Most tools patch over noise, ignoring the state of your cloud. We fix the root cause. Stream turns raw cloud telemetry into a stateful real-time model, powering risk-based detection and response.

Who Is the Company Behind Stream Security?

TENET

TENET is a risk intelligence platform purpose-built for the Microsoft ecosystem to deliver unified visibility and proactive risk assessment across Azure and M365. It serves as a single source of truth for identifying, prioritizing, and mitigating cloud risk at scale—enabling organizations to shift from reactive firefighting to continuous, intelligence-driven security operations. Key Features: - Attack surface management: Identify risky entry points, misconfigurations, and third-party exposures. Visualize attack paths, map findings to MITRE ATT&CK, prioritize remediation, and manage incidents from a unified cloud risk view. - Anomaly detection: Detect issues early with real-time analysis of cloud workloads, identities, and applications, helping teams identify abnormal behaviour and mitigate risks before they become incidents. - Compliance readiness: Simplify audits with continuous compliance monitoring, guided remediation, and risk-prioritized insights. Reduce costs and manual effort while shrinking audit preparation from weeks to hours. - Microsoft 365: Gain visibility into external sharing, device risk, license utilization, and Copilot agents. Understand how identities, configurations, and data exposures combine to create risk across your cloud environment. - Access governance: Monitor human and non-human identities, analyze effective permissions across Entra ID and RBAC, and maintain clear visibility into who can access resources across your cloud estate. - AI monitoring: Discover and inventory AI models, agents, and cognitive services. Continuously monitor performance, reliability, and security posture while identifying AI-specific risks and prioritizing remediation. - Intelligent insights: Investigate and resolve issues faster with BriteAI. Transform live data into actionable insights, identify root causes through natural language queries, and receive precise remediation guidance. Core Value: TENET eliminates blind spots and reduces mean time to remediation (MTTR) through end-to-end Microsoft cloud visibility and guided remediation. It lowers compliance and audit overhead, enables teams to proactively identify and mitigate risks before they escalate, and scales security operations efficiently with AI-powered insights and autonomous remediation with full context via the TENET MCP server. For more information, visit www.aesonsolutions.com.

Who Is the Company Behind TENET?

Tevico

Tevico is a cloud governance platform for your AWS cloud. With Tevico, you get guidance with respect to Cloud financial management, security management, inventory management and many more things which are crucial for your AWS governance. Additionally, Tevco has automation features which allow you to automate your cloud management workflows.

Who Is the Company Behind Tevico?

ThreatStryker

ThreatStryker builds on the ThreatMapper open source platform. ThreatStryker extends the vulnerability discovery capabilities, adding runtime attack detection, prediction and protection. Map your applications, know the weak points, prioritise vulnerabilities for remediation. Observe security events (indicators of attack and indicators of compromise) using deep packet inspection and lightweight on-host sensors. Correlate events and vulnerabilities to track the risk posed by attacker behaviour, then intervene with quarantine and firewall actions to stop attackers in their tracks.

Average Rating: 4.0/5.0

Total Reviews: 1

Who Is the Company Behind ThreatStryker?

  • Seller: Deepfence
  • Year Founded: 2018
  • HQ Location: Palo Alto, US
  • Twitter: @deepfence
    574 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    5 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of ThreatStryker?

Transilience AI

Transilience AI is a full-stack security OS - it covers multiple security categories that previously have required separate products - CNAPP, CIEM, CTEM, Cloud MDR, etc. All of it now comes in one platform with multiple composable agents delivering specific use cases and providing customers with end-to-end security and compliance.

Who Is the Company Behind Transilience AI?

trueno

Who Is the Company Behind trueno?

  • Seller: trueno
  • Year Founded: 2026
  • HQ Location: Casper, US
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Weguard

On-demand vulnerability scanning, penetration testing, cloud posture assessment, and compliance reporting - one platform, zero noise.

Who Is the Company Behind Weguard?

WithSecure Elements Exposure Management

WithSecure™ Elements Exposure Management (XM) is a continuous and proactive solution that predicts and prevents breaches against your company’s assets and business operations. Elements XM provides visibility into your attack surface and enables the efficient remediation of its highest-impact exposures through a unified view, thanks to our exposure scoring and AI-enabled recommendations. Get one solution for 360° digital exposure management and visibility across your external attack surface and internal security posture, to proactively prevent cyber-attacks. Elements XM is a bit like pen testing or red teaming, but more continuous and comprehensive of your entire digital environment. WithSecure™ Elements XM uses patent-pending AI-based attack path simulation technologies for heuristic exposure hunting and adversarial exposure validation. The solution is more powerful than traditional vulnerability scanners or vulnerability management software, as it prioritizes your exposures by using AI-powered attack path mapping. In other words, you can remediate exposures through the attacker’s lens. Elements XM discovers exposures for your: - Devices - Digital identities (Entra ID) - Cloud infrastructure (misconfigurations in AWS and Azure cloud) - Networks - External Attack Surface (EASM - External Attack Surface Mapping)

Average Rating: 4.0/5.0

Total Reviews: 1

Who Is the Company Behind WithSecure Elements Exposure Management?

  • Seller: WithSecure
  • Year Founded: 1988
  • HQ Location: Helsinki, Finland
  • Twitter: @WithSecure
    66,501 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,780 employees on LinkedIn®
  • Ownership: FSOYF

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of WithSecure Elements Exposure Management?

What Are G2 Users Discussing About WithSecure Elements Exposure Management?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated October 3, 2024