Pillar
Cloud Security
Cloud security fails at the account, the identity, and the control plane long before it fails at a single virtual machine. If your platform only shows you the host, you are looking at the last place the mistake landed.
Cloud security platforms
See the account, not only the VM
Open the list
CSPM tools
Read the account, not the VM
Open the list
CIEM tools
Shrink the unused role
Open the list
Questions about Cloud Security
What job does the cloud security list judge?
Can the tool see the account: identities, role bindings, public data, the control-plane change that made a bucket world-readable. A pretty inventory of VMs is not enough. That is why the one-line job is ‘see the account, not only the VM.’
Which platforms are on the list?
Wiz, Orca Security, Microsoft Defender for Cloud, Prowler, Falco, and Steampipe. The first three are the commercial platforms most teams are sold. The last three are what you run when you want the query and the graph in your own hands.
Is this the same as Cloud Detection and Response?
CDR is a vendor phrase for watching the control plane as if it were an endpoint. We will not rename the category to match a briefing. If a tool only streams alerts and cannot explain the account, it will not survive this list.
Where do Kubernetes and Falco fit?
Falco sits on the runtime side: syscalls and Kubernetes audit events you can inspect. Steampipe and Prowler sit on the posture side: SQL or checks against the account. They belong on the same list because teams buy one platform and still need both jobs.
Do you cover landing-zone or Terraform security?
Not as a published list yet. Those are on the research pile next to IAM-as-code. This page stays on the platforms you run after the account already exists.
