| Wiz |
Agentless, optional sensor |
CSPM, CIEM, DSPM, IaC scanning |
Cloud-focused |
Detection via optional sensor |
| Prisma Cloud (Cortex Cloud) |
Agent + agentless |
CSPM, CWPP, CIEM, app security |
Cloud-focused |
Cortex CDR integration |
| CrowdStrike Falcon Cloud Security |
Shared Falcon sensor + agentless |
CSPM, CWPP, CIEM |
Hybrid cloud |
Native via Falcon sensor |
| Fidelis CloudPassage Halo® |
Agentless + microagents |
CSPM, CWPP, automated segmentation |
Hybrid (On-Prem+ MultiCloud) |
Continuous monitoring, auto-quarantine |
| Microsoft Defender for Cloud |
Agent + agentless via connectors |
CSPM, CWPP, DevSecOps scanning |
Azure-native, hybrid via Arc |
Workload-specific Defender plans |
| Orca Security |
Agentless (SideScanning) |
CSPM, CWPP, CIEM, DSPM |
Cloud-focused |
Optional sensor for runtime |
| Sysdig Secure |
Agent-based (Falco) |
CDR, CWPP, CSPM, CIEM |
Cloud-focused |
Live process/syscall monitoring |
| Aqua Security |
Agent + agentless |
CSPM, container/Kubernetes security |
Cloud-focused |
Behavioral runtime analysis |
| Lacework FortiCNAPP |
Lightweight agent + agentless logs |
CSPM, CIEM, code security |
Hybrid via Fortinet Fabric |
AI-based anomaly detection |
| Check Point CloudGuard CNAPP |
Agent + agentless |
CSPM, DSPM, CIEM, code security |
Hybrid via Check Point integration |
Real-time detection + CloudBot |
