Cloud security
What is Cloud-native application protection platform (CNAPP)?
Definition
A category of cloud security platform that combines posture management, workload protection, identity entitlements and code scanning in one tool.
How it works
CNAPP brings together capabilities that used to be separate products: CSPM for configuration, CWPP for workloads and containers, CIEM for cloud permissions, and scanning of infrastructure-as-code.
The goal is to see cloud risk in context, for example a vulnerable, internet-facing workload with excessive permissions.
Key points
- Combines CSPM, CWPP, CIEM and code scanning
- Prioritises risk by context
- Covers build time and run time
- A product category, not a service
Common questions
Do we need a CNAPP?
Organisations running significant cloud workloads benefit most; smaller estates often start with native posture tools.
Does it replace monitoring?
No. It reduces risk; you still need people watching for active threats.
Talk to someone who does this every day
Questions about CNAPP? Our team will give you a straight answer.