2023 SC Awards Finalists: Best Cloud Workload Protection Solution

CrowdStrike Falcon CWP offers visibility and control across multi-cloud and on-premises environments. The platform leverages the CrowdStrike Security Cloud, providing pre-runtime security and runtime security with MITRE ATT&CK detection coverage of 99%. With its single agent, single API, and single data lake for all workloads, CrowdStrike Falcon CWP offers flexibility for securing cloud applications. CrowdStrike Falcon CWP operates as a 24/7 managed MDR and cloud threat hunting solution for workloads and containers, delivering a 403% ROI. It lets security and IR teams detect and respond 77% faster to threats. According to a Forrester Total Economic Impact  Study, the CrowdStrike Falcon platform provides a 316% ROI with a payback period of less than three months. CrowdStrike Falcon CWP customers benefit from reduced costs and time management through tool consolidation, improved organizational agility, landscape awareness, and workforce efficiency. The platform claims to significantly reduces the time to detect, investigate, and remediate cloud threats.

Orca Security Platform, a comprehensive cloud security solution for AWS, Azure, GCP, Alibaba, and Oracle cloud, offers full-stack visibility and detects vulnerabilities, malware, sensitive data at risk, IAM risks, and lateral movement risks. Orca’s agentless platform deploys in minutes and covers all cloud assets, including VMs, containers, Kubernetes, and serverless. It promises to reduce alert fatigue, lower total cost of ownership, and consolidate multiple tools into one platform. The platform gets continuously updated and has added six major capabilities in the past year, such as Attack Path Analysis, Shift Left, Cloud Detection and Response, API Security, Data Security Posture Management, and Cloud Cost Optimization. Customers report significant savings in deployment, maintenance, and licensing costs, as well as reduced cloud spend.

SentinelOne’s Singularity Cloud addresses the growing need for security in cloud-based workloads, including servers, VMs, and Kubernetes. The platform offers prevention, detection, and response capabilities, along with granular visibility and minimized resource consumption. Singularity Cloud simplifies cloud workload security management and eliminates the need for manual maintenance of allow lists. The product offers ease of deployment and support for various cloud options, delivering a single-pane-of-glass solution for all environments. It also provides multi-tenancy and multi-site management for a complete cloud-native security solution. SentinelOne’s user mode ensures broad Linux distribution support without kernel-related issues or resource consumption in containers. Singularity Cloud gets continually updated and with its integration into the broader Singularity platform, offers activity monitoring across endpoints, identity, and cloud. The platform’s secure and uninterrupted cloud usage allows for maximum agility and real-time protection, detection, and remediation without disruptions. The product has been deployed on millions of servers and cloud workloads, with its strategic partnership with Wiz set to offer even more enhanced security capabilities for organizations.

Uptycs has developed a unified CNAPP + XDR platform designed to deliver end-to-end visibility and security for cloud-native applications throughout their entire lifecycle. The platform addresses the challenges posed by traditional security tools which are not well-suited for dynamic environments created by agile DevOps methodologies. Uptycs allows security teams to implement and monitor security policies that work well with existing DevOps tools, ensuring compliance, identifying vulnerabilities, and detecting threats. Uptycs combines multiple aspects of cloud workload security into a single platform, offering both attack surface hardening and threat detection capabilities. Its managed detection and response (MDR) service has been particularly attractive to SMBs with lean security teams. Delivered as a SaaS platform, Uptycs scales well and it’s regularly updated, offering customers rapid time-to-value and a wide range of security controls. With deployments in various industries, Uptycs has attracted customers such as Comcast, Crossbeam, Flexport, Greenlight Financial, and SEI.

Zscaler Posture Control operates as a comprehensive Cloud-Native Application Protection Platform (CNAPP) that’s designed to secure workloads, data, and applications across various cloud infrastructures. Powered by Zscaler Zero Trust Exchange, the platform integrates with major DevOps tools and offers important capabilities, such as shift-left security, continuous compliance, threat correlation, risk prioritization, and Kubernetes Security Posture Management (KSPM). The product features agentless deployment, advanced correlation and prioritization engine, native DLP capabilities, and continuous compliance. It’s backed by the industry’s largest and most trusted security cloud, offering a unified platform that continuously secures every stage of the application lifecycle. Zscaler Posture Control’s total cost of ownership is based on the number of workloads secured, with transparent workload-based pricing. Zscaler says the platform has helped customers achieve significant cost reductions in their cloud security programs by consolidating point products into a single solution. Customers are said to experience an 80% reduction in public cloud security and compliance-related delays.