CMDashCybersecurity Maturity Dashboard

← All landscape areas

Cloud Security · Core

Cloud Security Posture Mgmt (CSPM)

Finds cloud misconfigurations and compliance drift.

8 options listedTypical cost: $20k-$200k/yrIDENTIFY (ID) / PROTECT (PR)

Overview

CSPM continuously assesses cloud accounts for misconfigurations, exposed assets, and compliance violations across IaaS/PaaS. It is the entry point for most cloud security programs. Priced per billable resource, workload, or account. Now usually a module within a broader CNAPP.

Essential the moment you run cloud workloads.

Advantages

Wiz fast, agentless, great graph/UX
Prowler/ScoutSuite free
quick misconfiguration wins
multicloud coverage.

Trade-offs

Alert volume without prioritization
per-resource cost grows
remediation still largely manual
overlaps CNAPP (may pay twice).

Vendors & tools in this area

WizCommercial

Agentless CNAPP leader; risk graph, fast UX.

Palo Alto Prisma CloudCommercial

Cloud/SASE + CNAPP suite (Prisma) - broad, premium.

OrcaCommercial

Agentless cloud security via side-scanning.

Microsoft Defender for CloudCommercial

Native multicloud CSPM/CWPP (Defender for Cloud).

ProwlerOpen source

AWS/multi-cloud security assessments.

ScoutSuiteOpen source

Multi-cloud security auditing.

CloudQueryOpen source

Cloud asset inventory via SQL.

Tenable Cloud SecurityCommercial

Identity-first CNAPP/CSPM (ex-Ermetic) with strong CIEM depth.

Start free trial Browse the full atlas

Cloud Security Posture Mgmt (CSPM) — Cybersecurity Landscape Atlas — CMDash