Tabular Foundation Models (TFMs) logopeterindia.net
Knowledge Hub

Cloud-Native Application Protection Platforms (CNAPP)

CNAPP platforms, cloud provider security services, open-source cloud native security tools and reference resources.

40 topics•6 categories•Updated October 2026

What Is a CNAPP?

7 entries

A cloud-native application protection platform (CNAPP) combines cloud security posture management (CSPM), workload protection, vulnerability and misconfiguration scanning, identity and entitlement analysis, and often code and runtime security in one product. Descriptions below follow each vendor's or project's own pages and are not rankings; release facts for open-source tools come from GitHub and the CNCF.

01Cloud Security Posture Management (CSPM)CSPM vendors, on this site. 02Cloud Workload Protection PlatformsCWPP vendors, on this site. 03Kubernetes Security ToolsCluster security tools, on this site. 04Container Security ToolsImage scanning and runtime security, on this site. 05IaC Security ToolsInfrastructure-as-code security, on this site. 06Serverless Security ToolsServerless security, on this site. 07Zero Trust Security SolutionsZero trust vendors, on this site.

CNAPP Platforms

14 entries

Commercial platforms that describe themselves as cloud-native application protection or cloud security platforms.

08WizWiz describes connecting code, cloud and runtime in one cybersecurity platform. Google announced on 11 March 2026 that it had completed its acquisition of Wiz, and Wiz joins Google Cloud while keeping its brand and multicloud approach. 09Palo Alto Networks Cortex CloudPalo Alto Networks describes Cortex Cloud as the next version of Prisma Cloud, merging it with Cortex detection and response, and says existing Prisma Cloud customers upgrade seamlessly. 10Microsoft Defender for CloudMicrosoft's cloud security offering for multicloud environments; the page returned 403 to automated checks and may need a manual click. 11Orca SecurityOrca describes a CNAPP covering multicloud environments from build to runtime, with AI security and workload defense. 12SysdigSysdig describes visibility from runtime to development, prioritizing critical risks and detecting threats instantly. 13Aqua SecurityCloud native security vendor and maintainer of Trivy; the site returned 403 to automated checks and may need a manual click. 14CrowdStrike Falcon Cloud SecurityCrowdStrike describes seeing and securing clouds, applications and data with Falcon Cloud Security. 15Check Point Cloud SecurityCheck Point describes Cloud Security, formerly CloudGuard, as a platform to prevent threats and prioritize risks across applications, network and workloads. 16Trend Vision One Cloud SecurityTrend describes identifying threats and maintaining cloud security for hybrid environments with Vision One; its cloud security page now sits on trendaisecurity.com. 17Tenable Cloud SecurityTenable describes a CNAPP that is part of the Tenable One exposure management platform. 18Qualys TotalCloudQualys describes cloud-native application protection tools with agentless and agent-based options. 19FortiCNAPP (Fortinet)Fortinet describes FortiCNAPP as an AI-driven cloud-native application protection platform; the lacework.com address now shows this Fortinet page. 20Rapid7 InsightCloudSecRapid7 describes detecting and mitigating cloud risks in real time and automating governance and compliance across multicloud environments. 21UpwindCloud security vendor; the site returned 403 to automated checks and may need a manual click.

Cloud Provider Security Services

2 entries

Native services from the major clouds.

22Google Security Command CenterGoogle describes security for Google Cloud that reduces risk across cloud, generative AI and agentic AI workloads. 23AWS Security HubAWS describes prioritizing critical security issues and unifying security operations through centralized management.

Open-Source Cloud Native Security

7 entries

Open-source tools commonly used alongside or instead of commercial platforms. Release facts are from GitHub.

24FalcoCNCF graduated project for cloud native runtime security (Apache-2.0); it graduated on 29 February 2024, and GitHub lists 0.45.2 (29 October 2026) as the latest release. 25TetragoneBPF-based security observability and runtime enforcement from the Cilium project (Apache-2.0); GitHub lists v1.8.0 (30 October 2026). 26TrivyFinds vulnerabilities, misconfigurations, secrets and SBOMs in containers, Kubernetes, code repositories and clouds (Apache-2.0); GitHub lists v0.76.1 (21 October 2026). 27ProwlerOpen-source cloud security platform that automates security and compliance checks across clouds (Apache-2.0); GitHub lists 5.47.0 (29 October 2026). 28Cloud CustodianRules engine for cloud security, cost optimization and governance with YAML policies (Apache-2.0); GitHub lists 0.9.53.0 (1 October 2026). 29Open Policy AgentGeneral-purpose policy engine (Apache-2.0); GitHub lists v1.22.0 (29 October 2026). 30KyvernoKubernetes-native policy engine with YAML-based policies (Apache-2.0); GitHub lists v1.19.2 (20 October 2026).

Reference Resources

4 entries

Primary references on cloud native security.

31CNCF Cloud Native Security WhitepaperCNCF paper explaining cloud native security and how to incorporate it across the lifecycle. 32Kubernetes security conceptsKubernetes documentation on keeping cloud-native workloads secure. 33CIS Kubernetes BenchmarkConsensus-driven security guideline for Kubernetes. 34OWASP Kubernetes Top TenOWASP list of the top ten Kubernetes risks.

Frequently Asked Questions

What is a CNAPP?

A cloud-native application protection platform combines posture management (CSPM), workload protection, vulnerability and misconfiguration scanning, identity and entitlement analysis and often code and runtime security in one product, so teams see risk across code, cloud and runtime together.

How is a CNAPP different from CSPM and CWPP?

CSPM checks cloud configuration and compliance, and CWPP protects workloads such as VMs and containers at runtime. A CNAPP combines these and usually adds code and pipeline security and context that links findings across layers. See the CSPM and Cloud Workload Protection Platforms pages.

Do I need a commercial CNAPP or can I use open source?

Open-source tools such as Trivy, Prowler, Falco, Kyverno and Cloud Custodian cover scanning, posture checks, runtime detection and policy. Commercial platforms add a unified inventory, risk prioritization and support. Many teams combine both.

What happened to Wiz and Prisma Cloud?

Google announced on 11 March 2026 that it completed its acquisition of Wiz, which joins Google Cloud and keeps its brand. Palo Alto Networks describes Cortex Cloud as the next version of Prisma Cloud, with existing customers upgrading.

What is agentless versus agent-based scanning?

Agentless tools read cloud APIs and workload snapshots to assess risk without installing software, while agent-based tools run on the workload for runtime detection. Several vendors, such as Qualys, describe offering both.

How current is this page?

Links and facts were checked on 31 October 2026. Microsoft, Aqua and Upwind returned 403 to automated checks and may need a manual click. Vendor descriptions follow their own pages and are not rankings.