Mauricio Sanchez

Senior Research Director

As a result of the Covid-19 pandemic, enterprises have embraced the cloud to meet the demands of a more dynamic, digital-first world. This rapid shift has exposed new security challenges across the cloud application lifecycle, driving the need for comprehensive, integrated solutions. The Cloud-Native Application Protection Platform (CNAPP) has emerged as a critical response to these challenges, offering a unified approach to securing cloud-based applications from development to runtime.

Building on foundational technologies like Cloud Workload Protection Platforms (CWPP), Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), and Data Security Posture Management (DSPM), CNAPP consolidates these capabilities into a single platform. This integration strengthens security at every point of the cloud application architecture and fosters better collaboration among development, security, and IT operations teams.

Since the term gained prominence in 2021, CNAPP has become a focal point in the cloud security discussion. Its growing popularity reflects the urgent need for a security solution that addresses the complexities of modern, cloud-centric enterprises. Vendors are rapidly expanding their CNAPP offerings, recognizing its critical role in protecting cloud environments in today’s fast-paced, post-pandemic landscape.

To take advantage of the opportunities in this market, vendors and financial institutions need to answer critical business questions, including:

  • What technologies comprise cloud workload security, and how do they complement or replace traditional security solutions?
  • What is the current size of the cloud workload security market, and what are the growth projections over the next five years?
  • What is the current adoption rate of cloud workload security, and how is it expected to grow as a percentage of total enterprise spending on public cloud services?
  • Who are the key vendors currently participating in the cloud workload security market, and how are they positioned? Which vendors are the market share leaders and why?
  • What role do public cloud providers play in the cloud workload security market, and how do pure-play startups compare to established portfolio vendors?
  • What are the current and projected regional revenue trends for cloud workload security?
  • What are the inhibitors to growth? What are the accelerators?

The report includes a 5-year forecast for the following areas:

  • Cloud workload security by technology type (deployment, development, and runtime)
  • Cloud workload security by region – North America, EMEA (Europe, Middle East, and Africa), Asia Pacific excluding China, China, and CALA (Caribbean and Latin America)
  • Total enterprise spend on public cloud services