WTF is CNAPP?

WTF is ASPM was easy to write because it was what I had hoped Snyk would become when they branched out of SCA with Snyk SAST back in 2020 - the all in one configuration scanner. Finally, I’d be able to throw my Cloud Security Posture Management (CSPM) tool into the dustbin of history. Early CSPM triggered thousands of alerts for the most obscure or mundane of misconfigurations, and modern CSPM is not much better. Cloud Native Application Protection Platform (CNAPP) was an acronym bestowed upon us from on high to try and make sense of disparate cloud functionalities getting wrapped into single platforms. Gartner defines CNAPP as: a unified and tightly integrated set of security and compliance capabilities designed to secure and protect cloud-native applications across development and production. CNAPPs consolidate a large number of previously siloed capabilities, including container scanning, cloud security posture management, infrastructure as code scanning, cloud infrastructure entitl

This graph, it’s provocative WTF is ASPM was easy to write because it was what I had hoped Snyk would become when they branched out of SCA with Snyk SAST back in 2020 - the all in one configuration scanner. Finally, I’d be able to throw my Cloud Security Posture Management (CSPM) tool into the dustbin of history. Early CSPM triggered thousands of alerts for the most obscure or mundane of misconfigurations, and modern CSPM is not much better. Cloud Native Application Protection Platform (CNAPP) was an acronym bestowed upon us from on high to try and make sense of disparate cloud…

related reading

• What Tool Best Compliments CNAPP?pulse.latio.tech
• A Deep Dive Into The Cloud & Application Security Ecosystemsoftwareanalyst.substack.com
• WTF is Application Security Posture Management (ASPM)?pulse.latio.tech
• Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com
• Cloud Detection & Response: Simplifying Cloud Securityarmosec.io
• A Platform is not a Productpulse.latio.tech
• Software Supply Chain Security (Part 1)softwareanalyst.substack.com
• The Rise Of Application Security Posture Management (ASPM) Platformssoftwareanalyst.substack.com
• The Race to $100B: The Palo Alto Networks Storyrakgarg.substack.com
• Report: Taking The Fight To The Cloud | A Contrary Research Deep Dive | Contrary Researchresearch.contrary.com
• Report: Taking The Fight To The Cloud | A Contrary Research Deep Dive | Contrary Researchresearch.contrary.com
• The Future of Cloud & Security Operations: Analyzing PANW’s Cortex Cloud Betsoftwareanalyst.substack.com