As of September 2026, Latka tracks 10 cloud security posture management software companies with $5M–$10M in annual revenue. They have combined revenues of $69.3M and employ 662 people. They have raised $80.6M and serve 1K customers combined.
Every company below sells cloud security posture management software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Cloud Security Posture Management (CSPM) Software provides organizations with essential tools to monitor, manage, and reduce security risks associated with cloud environments. These solutions continuously assess cloud configurations to identify misconfigurations, compliance violations, and security vulnerabilities across various cloud service providers. By ensuring that cloud resources are securely configured and in alignment with best practices, CSPM contributes to the overall security posture of an organization. Key features of CSPM software often include automated compliance checks, risk assessment, and remediation capabilities, as well as visibility into security incidents. These tools are typically utilized by IT and security teams to maintain oversight over their cloud infrastructure, ensuring that policies are enforced and security regulations are met. Common users of CSPM solutions include security analysts, cloud security engineers, and compliance officers who need to ensure the integrity and compliance of their cloud resources. Moreover, CSPM solutions streamline workflows by providing actionable insights into security issues, allowing organizations to proactively address potential risks before they escalate into more significant incidents. By integrating with existing security tools and processes, CSPM enhances the overall effectiveness of an organization’s security strategy in an increasingly complex and multi-cloud environment.
Sorting: Highest -> Lowest
Showing 10 of 10 companies ranked by annual revenue.
Singapore, Central Singapore, Singapore
watchTowr is a Preemptive Exposure Management platform that helps organizations identify potential breaches and understand their cyber security posture, serving Fortune 500 companies and critical infrastructure providers.
Newport Beach, California, United States
Developer of a cybersecurity program intended to combat cyber threats across hybrid-cloud environments. The company's program use data science and security technology to secure cloud infrastructure and data centers, enabling enterprises to get protection from cyber threats.
Quebec City, Quebec, Canada
Qohash is committed to identifying, monitoring, and securing the world's most sensitive data, ensuring its protection and privacy for all. It is a leading innovator in data security posture management.
Sammamish, Washington, United States
Tamnoon offers a managed cloud security remediation platform that combines AI with human expertise, focusing on enhancing cloud security and managing threats effectively.
Santa Barbara, California, United States
Provider of a software-as-a-service platform designed for discovering, analyzing and certifying container images. The company's platform allows users to create a trusted standard for containers that is predictable and protectable with development, production and security on the same page from the start, enabling clients to select verified containers from a curated registry and ensure the right containers get deployed in the right places.
Houston, Texas, United States
Developer of an IT environment protection platform designed to facilitate documentation and management of IT assets. The company's platform integrates with existing documentation platforms to capture and update configuration details that are usually maintained manually, as well as automates system documentation by retrieving configuration state data from cloud, network and on-premise systems, enabling IT service providers to assess misconfigurations and secure IT assets cost-effectively.
San Francisco, California, United States
Valence is the first SaaS security company to combine SSPM and advanced remediation with business user collaboration to find and fix SaaS security risks. SaaS applications are becoming decentrally managed and more complex, which is introducing misconfiguration, identity, data, and SaaS-to-SaaS integration risks. The Valence SaaS Security Platform provides visibility and remediation capabilities for business-critical SaaS applications such as Microsoft 365, Google Workspace, Salesforce, GitHub and Slack. With Valence, security teams can empower their business to securely adopt SaaS. Valence is backed by leading cybersecurity investors like Microsoft’s M12 and YL Ventures, and is trusted by leading organizations.
Charlotte, North Carolina, United States
Frenos transforms how critical infrastructure teams assess the cybersecurity posture of mission-critical sites and environments with its AI-native OT security posture management platform.
Las Vegas, Nevada, United States
Nudge Security is a cybersecurity startup securing modern organizations through the power of the modern workforce, providing IT and security teams with a complete overview of every SaaS and cloud asset.
Pune, Maharashtra, India
CloudOptimo is an advanced cloud management platform that optimizes costs, enhances security, and streamlines operations for businesses leveraging cloud technology.
Latka tracks 10 cloud security posture management software companies with $5M–$10M in annual revenue. Together they generate $69.3M in annual revenue and employ 662 people.
watchTowr is the largest, with $9.7M in annual revenue, founded in 2005.
The average cloud security posture management software company in this list makes $6.9M a year, across 10 companies with reported revenue. They serve 1K customers combined.
Ranked by annual revenue, the leaders are watchTowr, Obsidian Security, Qohash, Tamnoon and Anchore.
The 10 cloud security posture management software companies with $5M–$10M in annual revenue tracked here have raised $80.6M in disclosed funding between them.
- The product must continuously monitor cloud environments for security misconfigurations and vulnerabilities. - It should provide compliance assessment against industry standards and regulations. - The software must offer automated remediation capabilities for identified security issues. - It should support multiple cloud service providers and environments, enabling comprehensive visibility. - The product must deliver actionable insights and reporting for security teams. - Not just a monitoring tool; must also facilitate risk management and compliance enforcement.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time