WTF is CNAPP?
WTF is ASPM was easy to write because it was what I had hoped Snyk would become when they branched out of SCA with Snyk SAST back in 2020 - the all in one configuration scanner. Finally, I’d be able to throw my Cloud Security Posture Management (CSPM) tool into the dustbin of history. Early CSPM triggered thousands of alerts for the most obscure or mundane of misconfigurations, and modern CSPM is not much better. Cloud Native Application Protection Platform (CNAPP) was an acronym bestowed upon us from on high to try and make sense of disparate cloud functionalities getting wrapped into single platforms. Gartner defines CNAPP as: a unified and tightly integrated set of security and compliance capabilities designed to secure and protect cloud-native applications across development and production. CNAPPs consolidate a large number of previously siloed capabilities, including container scanning, cloud security posture management, infrastructure as code scanning, cloud infrastructure entitl
This graph, it’s provocative WTF is ASPM was easy to write because it was what I had hoped Snyk would become when they branched out of SCA with Snyk SAST back in 2020 - the all in one configuration scanner. Finally, I’d be able to throw my Cloud Security Posture Management (CSPM) tool into the dustbin of history. Early CSPM triggered thousands of alerts for the most obscure or mundane of misconfigurations, and modern CSPM is not much better. Cloud Native Application Protection Platform (CNAPP) was an acronym bestowed upon us from on high to try and make sense of disparate cloud…
related reading
- What Tool Best Compliments CNAPP?pulse.latio.tech
- A Deep Dive Into The Cloud & Application Security Ecosystemsoftwareanalyst.substack.com
- WTF is Application Security Posture Management (ASPM)?pulse.latio.tech
- Report: Taking The Fight To The Cloud | A Contrary Research Deep Dive | Contrary Researchresearch.contrary.com
- Report: Taking The Fight To The Cloud | A Contrary Research Deep Dive | Contrary Researchresearch.contrary.com
- How Wiz Became the Fastest Software Company to Hit $500M & Its Path to $1Bsoftwareanalyst.substack.com
- The Rise Of Application Security Posture Management (ASPM) Platformssoftwareanalyst.substack.com
- A Platform is not a Productpulse.latio.tech
- Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com
- Cloud Detection & Response: Simplifying Cloud Securityarmosec.io
- The Race to $100B: The Palo Alto Networks Storyrakgarg.substack.com
- Software Supply Chain Security (Part 1)softwareanalyst.substack.com