Data Security Security Tools

Acquired by Google. Wiz is the leader in having an all-in-one cloud security platform by expanding into CTEM, ASPM, and Runtime capabilities all within a single dashboard. Their posture and vulnerability capabilities remain the strongest, but their Code and Defend offerings are competitive in their own right.

Upwind has built CNAPP from the ground-up around runtime insights provided from a network focused endpoint agent. They provide unique features like API security, alongside vulnerability prioritization and scanning, and the more generic CNAPP feature sets.

Cyera is provides a robust collection of tools for data discovery, classification, and obfuscation. They've expanded the platform via acquisition and product into AI Security and NHI capabilities, providing AI abuse detections and NHI monitoring.

Formal is a complete PAM solution based on deploying flexible binaries that allow complete control of data access. They offer unique data aliasing to make them especially strong at controlling sensitive data access.

Endpoint data-protection agent that runs small language models on-device to classify data by meaning and block or coach risky moves into AI tools, SaaS, and personal accounts in real time.

Sysdig created the first runtime cloud protection tool with the open source project Falco, and has since built a trusted, enterprise ready, runtime oriented CNAPP platform. The tool is strongest at runtime protection, but offers the standard suite of CNAPP features, and is especially a good choice for regulated industries.

Teleskope discovers all of your sensitive data across SaaS or enrolled database tables and allows you to take action controlling access or obfuscating data with their SDK.

Elastio offers rich snapshot scanning for cloud environments, looking in depth for ransomware indicators of compromise. Their focus on ransomware and support for S3 scanning differentiate them from Wiz and other snapshot scanning solutions.