Cloud Security · Advanced

CNAPP (Consolidated Platform)

Unified code-to-cloud security platform.

8 options listedTypical cost: $50k-$500k/yrIDENTIFY (ID) / PROTECT (PR) / DETECT (DE)

Overview

CNAPP merges CSPM, CWPP, CIEM, IaC, and container security into one platform with shared context and risk prioritization. It is the consolidation trend buyers use to reduce cloud-tool sprawl. Enterprise pricing is substantial and resource-based. Agentless plus agent coverage is a common selection criterion.

Consolidation play for cloud-heavy estates wanting one platform.

Advantages

Wiz market leader, agentless with a risk graph
consolidates CSPM/CWPP/CIEM/IaC
shared context cuts tool sprawl.

Trade-offs

Expensive enterprise platform
lock-in
agentless-only can miss runtime depth (still need agents)
fast-moving market.

Open-source option

No single OSS product is a full CNAPP, but a comparable pipeline can be assembled from Trivy (scanning), Falco or KubeArmor (runtime — KubeArmor is a CNCF Sandbox project, Apache 2.0, actively maintained), Kubescape/kube-bench (posture) and Cloud Custodian (policy/remediation) at the cost of integration effort.