- Which Clouds Each CNAPP Names: Nine Platforms, Eight Environments
2026-10-12 · 3 MIN READ
We checked the pages of nine cloud security platforms, read in September 2026 and updated on 11 October 2026, for the environments they name. Orca Security and Aqua Security name seven of our eight, Cortex Cloud five, and the rest three or four. A missing name is a question for the vendor, not a verdict.
- Agentless Reach by Workload Type: VMs, Containers, Serverless, PaaS
2026-10-10 · 3 MIN READ
Every platform here reads cloud configuration without an agent. Far fewer say which workloads they read in depth without one. On the pages we reviewed, Orca Security and Wiz name the widest range of workload types read agentlessly, Defender for Cloud puts agentless workload scanning in paid tiers, and four platforms lean on an agent for depth.
- Defender for Cloud's Free CSPM Tier Becomes Opt-In on 27 October 2026
2026-10-08 · 3 MIN READ
Microsoft states that from 27 October 2026 the free Foundational CSPM tier of Defender for Cloud will no longer be enabled by default on new Azure subscriptions. Existing subscriptions and AWS and Google Cloud connectors are not affected, and the tier stays free. Teams that create subscriptions often should add a step, or they will open coverage gaps without noticing.
- Cloud Security Coverage News, September 2026: What Changed and Why It Matters
2026-10-06 · 3 MIN READ
September 2026 brought seven announcements relevant to multi-cloud coverage, from 1 to 24 September: SentinelOne took managed threat hunting to AWS, Azure and Google Cloud, Falco shipped 0.45.0, Orca added a partner program and Japanese localization, Wiz for Gov reached GovRAMP High, and Palo Alto Networks bought Console. None of them changes a score on this site.
- Why Pricing Visibility Counts in a Cloud Coverage Ranking, and Why Only 8%
2026-10-04 · 4 MIN READ
Microsoft Defender for Cloud publishes a full price list with a free tier. Wiz, Orca, Upwind, Sysdig and CrowdStrike list prices on AWS Marketplace, each in a different unit and term. SentinelOne, Cortex Cloud and Aqua publish no price we could state with its unit. We score cost visibility because it affects how fast a platform gets approved, and weight it at 8% because it does not change what the platform can see.
- Air-Gapped and Private Cloud Coverage: Where Cloud-Hosted CNAPPs Stop
2026-10-02 · 2 MIN READ
Agentless scanning works by connecting to a cloud provider's APIs, so it reaches public clouds most easily. On the pages we reviewed, three platforms name on-premises or private environments, through a sensor or a bridge service, and only Aqua Security names disconnected environments. If part of your estate is air-gapped, that narrows the list before any score matters.
- Minutes, 30 Seconds, 15 Seconds: How to Read CNAPP Speed Claims
2026-09-30 · 3 MIN READ
Vendors publish three kinds of speed figure: how fast the product deploys, how often its inventory refreshes and how fast it detects a threat. They measure different things, none is a measurement by this site, and none tells you how long your own estate will take to cover. Read each for what it measures, then time it yourself.
- Orca Security or Wiz for Multi-Cloud Coverage? Where Each Scores Higher
2026-09-28 · 3 MIN READ
On our coverage weights Orca Security scores 9.09 and Wiz 9.03, the closest pair at the top of the ranking. Orca scores higher on clouds named, agentless depth and path to first findings; Wiz scores higher on risk context, runtime, integrations and pricing. With equal weights the order reverses, so the right choice depends on which half of that list your estate needs.