What a vendor's list of named clouds tells you, and what it does not

What the nine vendors name

From vendor pages read in September 2026 and on 11 October 2026:

• Orca Security names AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud and Tencent Cloud, and on-premises and private cloud for its sensor.
• Aqua Security names AWS, Azure, Google Cloud, Oracle and Alibaba, plus private and disconnected environments.
• Palo Alto Networks Cortex Cloud names AWS, Azure, Google Cloud, OCI and Alibaba Cloud on its posture page.
• Wiz names AWS, Azure, Google Cloud and OCI.
• Upwind names AWS, Google Cloud, Azure and OCI, as partnerships.
• CrowdStrike's cloud security page links AWS, Azure, Google Cloud and OCI.
• Sysdig's docs name AWS, Google Cloud and Azure for all agentless features and Oracle Cloud for CSPM only.
• Microsoft Defender for Cloud documents Azure, AWS and Google Cloud, plus on-premises servers through Azure Arc.
• SentinelOne names AWS, Azure and Google Cloud, plus "many other" environments it does not list.

How to read a named cloud

A named cloud tells you the vendor supports it in some form. It does not tell you which services or workload types in that cloud are covered, or whether coverage there is agentless. Partnership language ("named as a partner") is weaker than a coverage statement on a product page.

How to read an unnamed cloud

Large vendors often keep product pages short and put the cloud list in documentation. An unnamed cloud is a reason to ask, not a reason to rule a vendor out. We score what vendors publish because a buyer can verify it; that is why a vendor that names three clouds scores lower on our clouds criterion than one that names five, even if both support more.

Questions to send

1. Which clouds do you support, by name, and is each generally available?
2. For each, which workload types are scanned without an agent?
3. Which regions or sovereign cloud variants are excluded?
4. Is support for any cloud delivered through a partner?

When the long tail matters

Most estates sit mainly in one or two of AWS, Azure and Google Cloud. Oracle, Alibaba and Tencent matter to fewer teams, but to those teams they matter a lot: a region-specific business unit or an acquisition can bring one in. If your map from lesson 4 includes one of them, the field of platforms that name it on public pages is short. Orca names 7 of our eight environments, tied with Aqua for the most of any platform here.