cybersecdirectory

CNAPP vendors

We list 34 companies active in cloud security (CNAPP and CSPM), and 7 of them have it as their main focus. 11 are public, 3 are owned by another company and 20 are private. Most are based in the United States (24). The oldest, Microsoft, was founded in 1975. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).

By countryUnited States 24

Companies focused on cloud security (CNAPP and CSPM)

7 companies
CompanyBased inFoundedSizeOwnershipRevenue
AlgoSec

AlgoSec provides a platform to manage security policies and application connectivity across hybrid networks.

Ridgefield Park, United States2004Private
Aqua Security

Aqua Security provides cloud native security covering containers, Kubernetes and serverless workloads from build through runtime.

Israel2015Private
Blast Security

Blast Security provides a preemptive cloud defense platform.

Tel Aviv, Israel2024Private
Orca Security

Orca Security provides an agentless cloud security platform that scans workloads from the cloud control plane rather than by installing agents.

Israel2019Private
Sysdig

Sysdig provides cloud security built on the open-source Falco project, with an emphasis on runtime detection inside running workloads.

United States2013Private
Upwind Security

Upwind provides a runtime-powered cloud security platform that uses live workload behaviour to prioritise posture findings.

IsraelPrivate
Wiz

Wiz provides a cloud and AI security platform that connects code, cloud, and runtime for risk reduction and threat response.

New York City, United States2020Part of Google

Also active in cloud security (CNAPP and CSPM)

27 companies
CompanyBased inFoundedSizeOwnershipRevenue
Microsoft

Microsoft sells software, cloud services, hardware, and gaming products.

Redmond, United States1975228,000 staffPublic, MSFT$331.8bn (FY2026)
Palo Alto Networks

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Santa Clara, United States200513,900 staffPublic, PANW$11.5bn (FY2026)
Fortinet

Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments.

Sunnyvale, United States200015,109 staffPublic, FTNT$6.8bn (FY2025)
CrowdStrike

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Austin, United States20117,925 staffPublic, CRWD$4.8bn (FY2026)
Check Point

Check Point Software provides cyber security solutions including network, cloud, and AI security.

Tel Aviv, Israel1993Public, CHKP$2.7bn (FY2025)
SentinelOne

SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection.

Mountain View, United States2013Public, S$1.0bn (FY2026)
Tenable

Tenable provides an exposure management platform that unifies security visibility, insight, and action across the attack surface.

Columbia, United States2002Public, TENB$999.4m (FY2025)
Rapid7

Rapid7 provides AI-powered managed cybersecurity operations, including MDR, SIEM, and vulnerability management.

Boston, United States2000500+ staffPublic, RPD$859.8m (FY2025)
Netskope, Inc

Netskope provides cloud security and networking services for organisations.

Santa Clara, United States2012Public, NTSK$709.0m (FY2026)
Qualys

Qualys provides an enterprise cyber risk and security platform.

Foster City, United States1999Public, QLYS$669.1m (FY2025)
Google

World-renowned cybersecurity firm now part of Google Cloud, delivering threat intelligence-led penetration testing and red teaming informed by front-line incident response experience.

Mountain View, United States2004500+ staffPrivate
Amazon Web Services

Amazon Web Services is a cloud computing platform that provides a wide range of services.

Seattle, United States2006Owned by Amazon
AppOmni

AppOmni provides a platform to secure SaaS applications and AI environments for enterprises.

San Mateo, United States2018Private
Cloudbric

Cloudbric provides cloud-based security services including web application firewalls and VPNs.

Seoul, South Korea2015Private
Data Theorem

Data Theorem provides application security for mobile, API, cloud, and AI-driven applications.

Palo Alto, United States2013Private
Fidelis Security

Fidelis Security provides cybersecurity solutions for enterprises and government agencies.

Riverside, United States2003Owned by Partner One
Pillar Security

Pillar Security provides a platform to discover, test, secure and govern AI agents across organisations.

Tel Aviv, Israel2023Private
Pulumi

Pulumi provides an infrastructure as code platform that lets teams build and manage cloud infrastructure using general purpose programming languages such as TypeScript, Python, Go, .NET, Java, YAML and HCL.

Seattle, United States2024Private
Sentra

Sentra provides data security solutions to discover and protect sensitive data from AI applications.

New York, United StatesPrivate
Sonatype

Sonatype provides tools to manage and secure open source components and AI models in software development.

Fulton, United StatesPrivate
Trend Micro

Trend Micro provides cybersecurity products and services for businesses and individuals worldwide.

Tokyo, Japan1988Public, 4704
Zenity

Zenity provides security and governance for AI agents and low-code applications.

Tel Aviv, Israel2021Private
Axonius

Asset intelligence platform that builds one inventory of every asset from connected IT and security tools to find coverage gaps and prioritise exposures.

New York, United StatesPrivate
Fortanix

Provides a data and AI security platform built on confidential computing to protect data in use.

Santa Clara, United StatesPrivate
Oracle

Identity and access management with OCI IAM, Oracle Access Management and Oracle Access Governance, alongside Oracle Cloud Infrastructure and Oracle's business applications.

Austin, United StatesPrivate
Panop

Panop provides a platform for autonomous exposure management across cloud environments and attack surfaces.

Switzerland2024Private
Wallarm

Wallarm provides an AI security and API security platform for enterprises running AI on AWS.

Austin, United StatesPrivate

Recent deals in cloud security (CNAPP and CSPM)

All cloud security (CNAPP and CSPM) deals
DateDealAmountSource
1 Sept 2026Palo Alto Networks acquired ConsoleSource for Palo Alto Networks buying Console, opens in a new tabUndisclosedSource for Palo Alto Networks buying Console, opens in a new tab
18 Aug 2026Fortinet acquired Virtue AISource for Fortinet buying Virtue AI, opens in a new tabUndisclosedSource for Fortinet buying Virtue AI, opens in a new tab
July 2026CrowdStrike acquired XM CyberSource for CrowdStrike buying XM Cyber, opens in a new tabUndisclosedSource for CrowdStrike buying XM Cyber, opens in a new tab
May 2026Check Point acquired DeepchecksSource for Check Point buying Deepchecks, opens in a new tabUndisclosedSource for Check Point buying Deepchecks, opens in a new tab
March 2026Rapid7 acquired Kenzo SecuritySource for Rapid7 buying Kenzo Security, opens in a new tabUndisclosedSource for Rapid7 buying Kenzo Security, opens in a new tab
February 2026Check Point acquired CyataSource for Check Point buying Cyata, opens in a new tabUndisclosedSource for Check Point buying Cyata, opens in a new tab
February 2026Check Point acquired CyclopsSource for Check Point buying Cyclops, opens in a new tabUndisclosedSource for Check Point buying Cyclops, opens in a new tab
February 2026Check Point acquired RotateSource for Check Point buying Rotate, opens in a new tabUndisclosedSource for Check Point buying Rotate, opens in a new tab
January 2026CrowdStrike acquired SGNLSource for CrowdStrike buying SGNL, opens in a new tab$740mSource for CrowdStrike buying SGNL, opens in a new tab
January 2026CrowdStrike acquired Seraphic SecuritySource for CrowdStrike buying Seraphic Security, opens in a new tab$420mSource for CrowdStrike buying Seraphic Security, opens in a new tab

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

See every category

Often listed alongside cloud security (CNAPP and CSPM)