As of September 2026, Latka tracks 12 cloud security posture management software companies under $1M in annual revenue. They have combined revenues of $5.9M and employ 56 people. They have raised $11.5M.
Every company below sells cloud security posture management software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Cloud Security Posture Management (CSPM) Software provides organizations with essential tools to monitor, manage, and reduce security risks associated with cloud environments. These solutions continuously assess cloud configurations to identify misconfigurations, compliance violations, and security vulnerabilities across various cloud service providers. By ensuring that cloud resources are securely configured and in alignment with best practices, CSPM contributes to the overall security posture of an organization. Key features of CSPM software often include automated compliance checks, risk assessment, and remediation capabilities, as well as visibility into security incidents. These tools are typically utilized by IT and security teams to maintain oversight over their cloud infrastructure, ensuring that policies are enforced and security regulations are met. Common users of CSPM solutions include security analysts, cloud security engineers, and compliance officers who need to ensure the integrity and compliance of their cloud resources. Moreover, CSPM solutions streamline workflows by providing actionable insights into security issues, allowing organizations to proactively address potential risks before they escalate into more significant incidents. By integrating with existing security tools and processes, CSPM enhances the overall effectiveness of an organization’s security strategy in an increasingly complex and multi-cloud environment.
Sorting: Highest -> Lowest
Showing 10 of 12 companies ranked by annual revenue.
San Francisco, California, United States
Provider of unikernel based systems intended to offer both production ready public and private environments. The company's systems offer managed services and training for companies using unikernel technology, enabling companies to save money on infrastructure and operation cost, while at the same time take real proactive security measures to limit attacks.
Kansas City, Missouri, United States
Provider of a cloud management platform intended to bring unprecedented insight, control and expertise into the cloud environment. The company's platform includes an automated and continuous cloud control infrastructure, enabling teams in an organization to move faster into the cloud while strengthening security controls, streamlining operations and controlling cloud spending.
Los Gatos, California, United States
Developer of a cloud security compliance platform designed to automate the delivery of cloud security compliance across enterprises. The company's cloud security compliance platform simplifies deployment and management of secure applications across any combination of IT services, enabling businesses to protect their assets using DISA and NIST approved technical controls across private and public cloud virtual machines.
Melbourne, Victoria, Australia
Detexian detects security misconfigurations in SaaS solutions.
Waterloo, Ontario, Canada
CoGuard is a patented solution that uses AI driven automation to provide fast, cost effective white-box penetration testing, infrastructure audits and infrastructure design services. Teams can also include CoGuard's scanner in their CI/CD pipeline for continuous security for all layers infrastructure and their dependencies, including cloud (AWS, Azure, GCP), IaC tools (including Terraform, Ansible, and others), containers and orchestration tools (including Docker, Kubernetes, Helm Charts and others), and services installed in the network, and their dependencies. By using CoGuard, teams have reported decreased downtime and increased deployment speeds, enabling teams to do more, faster.
Darmstadt, Hesse, Germany
CodeShield is a SaaS that helps software developers and security teams secure IAM in the public cloud. With us, you detect IAM privilege escalations easily and achieve least privilege. Brands that trust us: Northmill Bank, Tempest Security Intelligence, Syracom, Hanko, handly. CodeShield’s cloud model and full-stack analysis just need 15 minutes to generate the results. The results are shown in a dashboard and a graph model of the account is generated automatically. The single graph empowers cloud and security teams to identify, prioritize, and fix the most relevant attack vectors with ease. CodeShield’s algorithms were already able to detect security vulnerabilities in the Corona-Warn-App and have received multiple research awards.
Paris, Île-de-France, France
Uncovery helps you master your digital transformation by taking the different stages of recognizing an attacker during his targeting phase Thanks to a SaaS and non-intrusive solution, you obtain in a few minutes a complete inventory of your exposed assets as well as your Shadow It. Thanks to a daily recurrence, you will be able to follow their evolution precisely. The solution makes this expertise easy to access, requires no deployment and is operational in three clicks.
Toronto, Ontario, Canada
At ASecureCloud, our goal is to make it accessible for anyone to build and operate secure cloud environments while maintaining full control over the configuration. We do this by providing an automated platform that enables users to: 1. Build: We provide a growing library of 600+ fully customizable configuration templates available in CloudFormation, CLI, and Terraform ready to deploy. 2. Assess: Our security assessment covers over 250 checks and 45+ AWS services (with growing coverage) with results available in under 15 minutes. 3. Remediate: Automatically generate configuration templates to remediate assessment findings (CloudFormation and AWS CLI - Terraform support soon) 4. Operate: Detailed reports and configuration summaries to better understand the AWS environment and track improvements over time.
Latka tracks 12 cloud security posture management software companies under $1M in annual revenue. Together they generate $5.9M in annual revenue and employ 56 people.
NanoVMs is the largest, with $987.2K in annual revenue, founded in 2015.
The average cloud security posture management software company in this list makes $491.9K a year, across 12 companies with reported revenue.
Ranked by annual revenue, the leaders are NanoVMs, DisruptOPS, Cloud Raxak, Detexian and CoGuard.
The 12 cloud security posture management software companies under $1M in annual revenue tracked here have raised $11.5M in disclosed funding between them.
- The product must continuously monitor cloud environments for security misconfigurations and vulnerabilities. - It should provide compliance assessment against industry standards and regulations. - The software must offer automated remediation capabilities for identified security issues. - It should support multiple cloud service providers and environments, enabling comprehensive visibility. - The product must deliver actionable insights and reporting for security teams. - Not just a monitoring tool; must also facilitate risk management and compliance enforcement.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time
