CNAPP vendors
We list 34 companies active in cloud security (CNAPP and CSPM), and 7 of them have it as their main focus. 11 are public, 3 are owned by another company and 20 are private. Most are based in the United States (24). The oldest, Microsoft, was founded in 1975. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).
By countryUnited States 24
Companies focused on cloud security (CNAPP and CSPM)
7 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
AlgoSec AlgoSec provides a platform to manage security policies and application connectivity across hybrid networks. | Ridgefield Park, United States | 2004 | Private | ||
Aqua Security Aqua Security provides cloud native security covering containers, Kubernetes and serverless workloads from build through runtime. | Israel | 2015 | Private | ||
Blast Security Blast Security provides a preemptive cloud defense platform. | Tel Aviv, Israel | 2024 | Private | ||
Orca Security Orca Security provides an agentless cloud security platform that scans workloads from the cloud control plane rather than by installing agents. | Israel | 2019 | Private | ||
Sysdig Sysdig provides cloud security built on the open-source Falco project, with an emphasis on runtime detection inside running workloads. | United States | 2013 | Private | ||
Upwind Security Upwind provides a runtime-powered cloud security platform that uses live workload behaviour to prioritise posture findings. | Israel | Private | |||
Wiz Wiz provides a cloud and AI security platform that connects code, cloud, and runtime for risk reduction and threat response. | New York City, United States | 2020 | Part of Google |
Also active in cloud security (CNAPP and CSPM)
27 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Microsoft Microsoft sells software, cloud services, hardware, and gaming products. | Redmond, United States | 1975 | 228,000 staff | Public, MSFT | $331.8bn (FY2026) |
Palo Alto Networks Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats. | Santa Clara, United States | 2005 | 13,900 staff | Public, PANW | $11.5bn (FY2026) |
Fortinet Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments. | Sunnyvale, United States | 2000 | 15,109 staff | Public, FTNT | $6.8bn (FY2025) |
CrowdStrike CrowdStrike provides AI-native cybersecurity solutions to stop breaches. | Austin, United States | 2011 | 7,925 staff | Public, CRWD | $4.8bn (FY2026) |
Check Point Check Point Software provides cyber security solutions including network, cloud, and AI security. | Tel Aviv, Israel | 1993 | Public, CHKP | $2.7bn (FY2025) | |
SentinelOne SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection. | Mountain View, United States | 2013 | Public, S | $1.0bn (FY2026) | |
Tenable Tenable provides an exposure management platform that unifies security visibility, insight, and action across the attack surface. | Columbia, United States | 2002 | Public, TENB | $999.4m (FY2025) | |
Rapid7 Rapid7 provides AI-powered managed cybersecurity operations, including MDR, SIEM, and vulnerability management. | Boston, United States | 2000 | 500+ staff | Public, RPD | $859.8m (FY2025) |
Netskope, Inc Netskope provides cloud security and networking services for organisations. | Santa Clara, United States | 2012 | Public, NTSK | $709.0m (FY2026) | |
Qualys Qualys provides an enterprise cyber risk and security platform. | Foster City, United States | 1999 | Public, QLYS | $669.1m (FY2025) | |
Google World-renowned cybersecurity firm now part of Google Cloud, delivering threat intelligence-led penetration testing and red teaming informed by front-line incident response experience. | Mountain View, United States | 2004 | 500+ staff | Private | |
Amazon Web Services Amazon Web Services is a cloud computing platform that provides a wide range of services. | Seattle, United States | 2006 | Owned by Amazon | ||
AppOmni AppOmni provides a platform to secure SaaS applications and AI environments for enterprises. | San Mateo, United States | 2018 | Private | ||
Cloudbric Cloudbric provides cloud-based security services including web application firewalls and VPNs. | Seoul, South Korea | 2015 | Private | ||
Data Theorem Data Theorem provides application security for mobile, API, cloud, and AI-driven applications. | Palo Alto, United States | 2013 | Private | ||
Fidelis Security Fidelis Security provides cybersecurity solutions for enterprises and government agencies. | Riverside, United States | 2003 | Owned by Partner One | ||
Pillar Security Pillar Security provides a platform to discover, test, secure and govern AI agents across organisations. | Tel Aviv, Israel | 2023 | Private | ||
Pulumi Pulumi provides an infrastructure as code platform that lets teams build and manage cloud infrastructure using general purpose programming languages such as TypeScript, Python, Go, .NET, Java, YAML and HCL. | Seattle, United States | 2024 | Private | ||
Sentra Sentra provides data security solutions to discover and protect sensitive data from AI applications. | New York, United States | Private | |||
Sonatype Sonatype provides tools to manage and secure open source components and AI models in software development. | Fulton, United States | Private | |||
Trend Micro Trend Micro provides cybersecurity products and services for businesses and individuals worldwide. | Tokyo, Japan | 1988 | Public, 4704 | ||
Zenity Zenity provides security and governance for AI agents and low-code applications. | Tel Aviv, Israel | 2021 | Private | ||
Axonius Asset intelligence platform that builds one inventory of every asset from connected IT and security tools to find coverage gaps and prioritise exposures. | New York, United States | Private | |||
Fortanix Provides a data and AI security platform built on confidential computing to protect data in use. | Santa Clara, United States | Private | |||
Oracle Identity and access management with OCI IAM, Oracle Access Management and Oracle Access Governance, alongside Oracle Cloud Infrastructure and Oracle's business applications. | Austin, United States | Private | |||
Panop Panop provides a platform for autonomous exposure management across cloud environments and attack surfaces. | Switzerland | 2024 | Private | ||
Wallarm Wallarm provides an AI security and API security platform for enterprises running AI on AWS. | Austin, United States | Private |
Recent deals in cloud security (CNAPP and CSPM)
All cloud security (CNAPP and CSPM) dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.