Glossary

CNAPP

Cloud-native application protection platform

A product that combines cloud posture management (CSPM), workload protection (CWPP) and often entitlement, data and code findings, and correlates them into attack paths; it inherits each component’s blind spots.

Defined in: Microsoft Learn: Microsoft Defender for Cloud overview

Covered in

Guide

Choose cloud security posture tools and apply zero trust

What CSPM, CWPP, CIEM, CNAPP, DSPM and ASPM each find and miss, how they overlap, how to evaluate one on your own accounts, and how zero trust as defined in NIST SP 800-207 uses what they measure.