17.7
Mondoo CSPM scans cloud environments to identify misconfigurations and prioritize them by exploitability and business exposure.
Free planOpen sourceWebAPIExtension
Alternatives to Aikido CSPM
Aikido CSPM brings cloud misconfigurations, exposure risks, permissive IAM, and compliance gaps into a unified view across AWS, Azure, GCP, and select other providers. It connects through read-only APIs without agents, prioritizes higher-impact production issues, and can turn plain-language cloud searches into real-time alerts. Its scope also includes container and EC2 vulnerability scanning, IaC checks, and runtime detection. Guided fixes and pull requests support…
27.5
AndroidiOSAPI
37.2
Sysdig Secure is a cloud-native application protection platform for cloud environments, containers, Kubernetes, hosts, and serverless workloads.
WebAPILinux
- 4
Powerpipe
Powerpipe is a free, open-source tool from Turbot for visualizing cloud infrastructure and running security and compliance benchmarks.
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 5
Oracle Cloud Infrastructure Secret Management
Oracle Cloud Infrastructure Secret Management stores, retrieves, rotates and manages credentials used by applications and cloud environments.
Free planWebAPI7.0Free plan - 6
Prowler Cloud
Prowler Cloud is a managed platform for finding, prioritizing and fixing cloud security risks.
Free planWebAPILinuxSelf-hosted7.0From $99 a month - 7
Qualys TotalCloud
Qualys TotalCloud is a cloud-native application protection platform for cloud and container environments.
Free planWebAPI7.0Free plan - 8
SentinelOne Singularity Cloud Security
SentinelOne Singularity Cloud Security is a paid platform for protecting production workloads, cloud and AI infrastructure, and data stores.
AndroidiOSWebAPI6.9 - 9
Cloudanix
Cloudanix is a cloud-native application protection platform that combines code security, cloud posture, workload protection, cloud identity, and…
WebAPISelf-hosted6.5From $3.49 a month - 10
FireMon
FireMon helps organizations manage and analyze security policy across multi-vendor firewalls, cloud networks, and microsegmentation environments.
WebAPILinuxSelf-hosted6.5From $200 a month - 11
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 12
Cyscale CSPM
Cyscale CSPM is an agentless cloud security posture management platform that continuously checks identity, network, storage, and compute for misconfigurations and drift.
WebAPI6.4From $850 a month - 13
Prisma Cloud SCA
Prisma Cloud SCA scans open-source packages for vulnerabilities and license-compliance issues across code, builds, deployment and runtime.
WebAPI6.3 - 14
Cavirin
Cavirin provides agentless security monitoring, reporting, remediation, and compliance for cloud environments and corporate data centers.
Free planWebAPILinuxSelf-hosted6.2Free plan - 15
CloudSploit
CloudSploit is a free, open-source project for finding possible misconfigurations and security risks in cloud infrastructure accounts.
Free planWebLinuxSelf-hosted6.2Free plan - 16
Palo Alto Networks Cortex Cloud API Security
Palo Alto Networks Cortex Cloud API Security discovers, prioritizes, and protects APIs across cloud environments.
WebAPILinux6.2 - 17
Scout Suite
Scout Suite is a free, open-source tool for reviewing cloud security posture.
Free planLinuxmacOSSelf-hosted6.1Free plan - 18
AWS Security Hub CSPM
AWS Security Hub CSPM checks AWS resources against security practices and combines findings from AWS services and partner tools.
WebAPI5.9 - 19
Datadog Cloud Security Management
WebLinuxWindows5.8From $10 a month - 20
AccuKnox
AccuKnox is a Zero Trust Security platform covering AI, API, application, cloud, and supply chain security.
WebLinuxSelf-hosted5.7 - 21
Cloudaware CSPM
Cloudaware CSPM is a paid cloud security posture management platform available through web and API access.
WebAPI5.7 - 22
CrowdStrike Falcon Cloud Security
WebLinuxmacOSWindows5.7 - 235.7
- 24
5.7 - 25
Upwind Cloud Security
Upwind Cloud Security’s CSPM detects, contextualizes, and helps remediate cloud misconfigurations and exposures.
WebAPISelf-hosted5.7 - 26
Wiz Container and Kubernetes Security
Wiz Container and Kubernetes Security is a web-based service for securing containers, Kubernetes, and cloud environments from development through runtime.
Web5.7 - 27
Rapid7 InsightCloudSec
Rapid7 InsightCloudSec is a web-based cloud security product with asset inventory, multi-cloud support, infrastructure-as-code scanning, identity…
Web5.6From $66,000 a year - 28
Tenable One Cloud Security
Tenable One Cloud Exposure is a cloud-native application protection platform for finding and reducing risk across multi-cloud and hybrid environments.
Web5.6 - 29
Alibaba Cloud Security Center
Alibaba Cloud Security Center is a web-based SaaS security service with a free Basic plan and paid editions.
Web5.5From $1 a month - 30
FortiCNAPP
WebLinuxWindows5.5