CWPP
Cloud workload protection platform
Tools that protect running virtual machines, containers and functions through an agent, an eBPF sensor or disk snapshots: vulnerable packages, malware and runtime attacks.
- Also called
- cloud workload protection
Covered in
Guide
Choose cloud security posture tools and apply zero trust
What CSPM, CWPP, CIEM, CNAPP, DSPM and ASPM each find and miss, how they overlap, how to evaluate one on your own accounts, and how zero trust as defined in NIST SP 800-207 uses what they measure.
Guide
Detect container and host threats at runtime with eBPF sensors and cloud services
Watch process, file and network activity inside containers with an eBPF sensor or a managed cloud agent, write and test rules for the attacks you expect, tune them with narrow exceptions and contain a compromised pod without destroying evidence.