Calculator

Cloud security coverage calculator: re-rank nine platforms for your estate

Short answer

Set a weight for each criterion and tick the environments you run. The calculator re-ranks the nine platforms with your weights and shows which ones name every environment you ticked. With our default weights and AWS, Azure and Google Cloud ticked, Orca Security ranks first and 9 platforms name all three.

Our published weights answer one question: fast agentless coverage across many clouds. Your question may differ. A team running one cloud with agents already deployed should weight runtime higher; a team that must justify spend before a sales call should weight pricing higher. The presets show how far the order moves.

Your weights

Our coverage weights Equal weights Runtime first Budget first

Clouds and environments named20

How many of the environments a multi-cloud team runs (AWS, Azure, Google Cloud, Oracle, Alibaba, Tencent, on-premises, disconnected) does the vendor name on its own pages, and how clearly?

Agentless workload depth25

How much of each workload (VMs, containers, serverless, PaaS, AI services) can it read without installing anything?

Path to first findings15

What has to happen before the first full inventory and findings appear: an API connection, a paid tier, an agent rollout?

Risk context from day one15

Once the estate is visible, how well are findings joined into attack paths and ranked so the first week produces a short fix list?

Runtime layer when you need it10

When coverage is in place, how deep is the sensor or agent you can add for detection and blocking inside running workloads?

Integrations and reach7

How far findings travel: integrations, partner and marketplace reach, and the wider platform around the CNAPP.

Cost visibility before purchase8

Can a buyer see a price, a pricing unit, a free tier or a trial before talking to sales?

Reset to our weights

How do the platforms rank with your weights?

Platforms ranked by your score
Rank	Platform	Your score	Our default score	Environments you ticked
1	Orca Security	9.09 / 10	9.09	All named
2	Wiz	9.03 / 10	9.03	All named
3	CrowdStrike Falcon Cloud Security	7.94 / 10	7.94	All named
4	Microsoft Defender for Cloud	7.86 / 10	7.86	All named
5	Palo Alto Networks Cortex Cloud (formerly Prisma Cloud)	7.75 / 10	7.75	All named
6	Sysdig Secure	7.67 / 10	7.67	All named
7	Upwind	7.63 / 10	7.63	All named
8	SentinelOne Singularity Cloud	7.49 / 10	7.49	All named
9	Aqua Security	7.45 / 10	7.45	All named

Compare your top two: Orca v Wiz

Stack up your top three: Orca, Wiz and CrowdStrike

Your score = sum of (criterion score x your weight) / sum of your weights. Your weights: clouds 20, agentless 25, setup 15, context 15, runtime 10, integrations 7, pricing 8. Environment checks do not change scores; they show whether each vendor names the environments you ticked on the pages we reviewed.

Scores are editorial assessments from public vendor pages read in September 2026 and updated on 11 October 2026.

How should you use the calculator?

Start with the environments you run, because a platform that does not name one of them needs a written answer from the vendor before it goes on a shortlist. Then move the weights until they match what you would defend to your team, and read the head-to-head page for your top two.

Frequently asked questions

How does the calculator work?

It multiplies each platform's score on each criterion by the weight you set, adds the results and divides by the sum of your weights. The criterion scores are the same editorial scores used everywhere on this site; only the weights change.

Why is there no price or seat input?

Published prices use different units and terms: Defender for Cloud prices per resource per month, CrowdStrike per host per hour on AWS Marketplace, Wiz per 100 workloads on 12-month contracts, Orca by workload tier. No common input would compare them fairly, so each profile shows the price text with its source.

Does an unticked cell mean a vendor does not support that cloud?

No. It means the vendor's pages we reviewed do not name it. Ask the vendor to confirm in writing.

Which preset is closest to a runtime-first buyer?

Runtime first. It puts 30% on the runtime layer and 20% on risk context, and the order changes: with it, Wiz ranks first.