Index › Cloud and infrastructure › CNAPP › Enterprise › September 2026 Edition

Cloud-native application protection for enterprise buyers

Asked as “CNAPP”, and as “cloud-native application protection platform”, on behalf of an enterprise B2B company. 39 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.

Standing

Wiz

Clear leader

49% of first choices, clear leader.

ShowinginAll 67 categories in the September 2026 Edition →

By buyer segment

The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.

Small business

Microsoft Defender for Cloud46%Clear leaderStanding →Mid-market

Wiz46%Clear leaderStanding →Enterprise

Wiz49%Clear leaderThis page

01The standing

Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for an enterprise B2B company. Ordered by share.

ProductFirst-choice shareNegative rateLabelsQuadrant

Wiz16%58endorsed leader

Microsoft Defender for Cloud10%49accepted challenger

Prisma Cloud20%45accepted challenger

Orca Security12%32accepted challenger

Check Point CloudGuard10%10accepted challenger

Show the four products at 0%, ordered by negative rate

FortiCNAPP46%13criticized challenger

Aqua Security31%13criticized challenger

Sysdig12%26accepted challenger

CrowdStrike Falcon Cloud Security5%21accepted challenger

Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its vendor page.

Head to head

Wiz vs Microsoft Defender for Cloud Wiz vs Orca Security Microsoft Defender for Cloud vs Orca Security

Recommended versus criticized

Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.

Criticized challengerCriticized default

Negative label rate →

Accepted challengerEndorsed leader

0%First-choice share → · lines at 30% share and 25% negative60%

Key

Wiz49%

Microsoft Defender for Cloud28%

Prisma Cloud13%

Orca Security8%

Check Point CloudGuard3%

CrowdStrike Falcon Cloud Security0%

Sysdig0%

Aqua Security0%

FortiCNAPP0%

02What they warned about

Six of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Mistral Small, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.

Wiz

16%

9 of 58 labels negative · 8 of 12 models · 1 hard negative

“**Avoid Wiz and Palo Alto Cortex Cloud** for predictability” Claude Haiku 4.5, budget prompt

FortiCNAPP

46%

6 of 13 labels negative · 6 of 12 models · 1 hard negative

“**Avoid** Lacework (if you're not a Fortinet shop)” DeepSeek V4 Flash, negative prompt

Prisma Cloud

20%

9 of 45 labels negative · 5 of 12 models · 1 hard negative

“**Avoid** ... Prisma Cloud (if you're not already in the Palo Alto ecosystem) **as a primary platform**” DeepSeek V4 Flash, negative prompt

Microsoft Defender for Cloud

10%

5 of 49 labels negative · 5 of 12 models

“Strong in Azure, but one review notes **limited AWS/GCP depth**, so it is less attractive as a primary platform for broad multi-cloud estates.” Perplexity Sonar, negative prompt

03What they cite

Citations exist only for the models that return a source list: twelve of the twelve in this edition, and all six flagship models on the expanded tier.

Sites the answers cite

68 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 6 of those lists are Google grounding redirects that name no site and are left out of the counts. 919 links across 187 sites, every framing counted. Ranked by the number of answers carrying the site or page.

cyberpress.org

43 answers · 53 citations · 10 models

cybersecuritynews.com

30 answers · 33 citations · 9 models

expertinsights.com

vendor site · Expert Insights30 answers · 30 citations · 10 models

accuknox.com

vendor site · AccuKnox26 answers · 37 citations · 10 models

gbhackers.com

25 answers · 27 citations · 10 models

cipherssecurity.com

24 answers · 34 citations · 10 models

aikido.dev

vendor site · Aikido21 answers · 21 citations · 9 models

gartner.com

19 answers · 32 citations · 8 models

guptadeepak.com

19 answers · 19 citations · 9 models

sentinelone.com

vendor site · SentinelOne18 answers · 23 citations · 9 models

decryptiondigest.com

17 answers · 23 citations · 6 models

orca.security

vendor site · Orca17 answers · 21 citations · 8 models

Pages the answers cite

The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.

cyberpress.org/cnapp-platforms-by-business-size-2

28 answers · 10 models

expertinsights.com/application-security/the-top-cloud-native-application-pr…

26 answers · 9 models

gbhackers.com/best-cnapp-compared

25 answers · 10 models

cyberpress.org/cnapp-platforms-by-business-size-2?amp=1

23 answers · 9 models

cybersecuritynews.com/best-cnapp-platforms

23 answers · 9 models

aikido.dev/blog/top-cloud-native-application-protection-platforms-cnapp

21 answers · 9 models

guptadeepak.com/tools/top-10-cnapp-solutions-2026

17 answers · 9 models

cloudaware.com/blog/cnapp-tools

16 answers · 10 models

gartner.com/reviews/market/cloud-native-application-protection-platforms

16 answers · 8 models

accuknox.com/blog/cnapp-vendors

14 answers · 8 models

04How they answered

Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.

ModelDirect“What is the best CNAPP for an enterprise B2B company?”Paraphrase“Which cloud-native application protection platform would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade CNAPPs and how do they differ?”Budget-constrained“What is the best CNAPP for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a CNAPP. What should we look at?”Negative“Which CNAPPs should a large enterprise avoid or be cautious about?”

Claude Haiku 4.5Wiz

Four alternatives

Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Sysdig

Prisma CloudChanged

Two alternatives

Microsoft Defender for Cloud, Wiz

Wiz

Two alternatives

AccuKnox, Prisma Cloud

Orca Security

One alternative

Microsoft Defender for Cloud

against: Palo Alto Networks Cortex Cloud, Wizno first choicenothing named

GPT-5.4 miniWiz

Four alternatives

Check Point CloudGuard, CrowdStrike Falcon Cloud Security, Prisma Cloud, Sysdig

Microsoft Defender for CloudChanged

Two alternatives

Prisma Cloud, Wiz

Microsoft Defender for Cloud, Palo Alto Networks Cortex Cloud

Four alternatives

Aqua Security, CrowdStrike Falcon Cloud Security, Sysdig, Wiz

Microsoft Defender for Cloud

One alternative

Sysdig Secure

no first choicenothing named

Gemini 3.5 FlashOrca Security, Wiz

Two alternatives

Prisma Cloud, Sysdig Secure

WizChanged

Five alternatives

AccuKnox, CrowdStrike Falcon Cloud Security, Orca Security, Palo Alto Networks, Sysdig Secure

Orca Security, Wiz

Four alternatives

CrowdStrike, Microsoft Defender for Cloud, Palo Alto Networks, Sysdig Secure

Orca Security

Three alternatives

Microsoft Defender for Cloud, Upwind, Wiz

against: GitHub Advanced Security, Palo Alto Networks, Snykno first choiceagainst: FortiCNAPP, Palo Alto Networks, Wiz

Perplexity SonarWiz

Two alternatives

Microsoft Defender for Cloud, Prisma Cloud

WizHeld

Three alternatives

CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Prisma Cloud

Wiz

Five alternatives

CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Palo Alto Prisma Cloud / Cortex Cloud, Sysdig Secure

Microsoft Defender for Cloud

Three alternatives

Palo Alto Networks Cortex Cloud, Prisma Cloud, Wiz

no first choiceagainst: FortiCNAPP, Microsoft Defender for Cloud, Orca Security, Wiz

Grok 4.1 FastWiz

Two alternatives

Orca Security, Prisma Cloud

WizHeld

One alternative

Prisma Cloud

Wiz

Five alternatives

CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Sysdig

Microsoft Defender for Cloud

One alternative

Wiz

against: Aqua Security, Prisma Cloud, Sysdigno first choiceagainst: Aqua Security, FortiCNAPP, Microsoft Defender for Cloud, Prisma Cloud, Wiz

Mistral SmallWiz

Three alternatives

Microsoft Defender for Cloud, Prisma Cloud, Sysdig Secure

Prisma CloudChanged

Three alternatives

Microsoft Defender for Cloud, SentinelOne Singularity, Wiz

Microsoft Defender for Cloud, Wiz

Two alternatives

Orca Security, Prisma Cloud

Microsoft Defender for Cloud

Two alternatives

Prisma Cloud, Wiz

no first choiceagainst: AWS GuardDuty/Security Hubnothing named

DeepSeek V4 FlashWiz

Four alternatives

CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud

WizHeld

Three alternatives

CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Prisma Cloud

against: Orca SecurityWiz

Five alternatives

CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Sysdig

Microsoft Defender for Cloud

Two alternatives

CrowdStrike Falcon Cloud Security, Orca Security

against: Prisma Cloud, Wizno first choiceagainst: AWS Security Hub, Check Point CloudGuard, FortiCNAPP, Google Security Command Center, Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Trend Micro Cloud One, Wiz

Llama 4 Maverickno first choiceno first choiceHeldno first choicePrisma Cloud

Three alternatives

Microsoft Defender for Cloud, Sysdig, Wiz

no first choicenothing named

Qwen 3.7 FlashWiz

Three alternatives

Microsoft Defender for Cloud, Palo Alto Networks, Trend Micro

against: AWS Security HubWizHeld

Three alternatives

CrowdStrike, Microsoft Defender for Cloud, Palo Alto Networks

Wiz

Five alternatives

Aqua Security, Microsoft, Orca Security, Palo Alto Networks, Sysdig

Microsoft Defender for Cloudagainst: Orca Security, Prisma Cloud, Wizno first choiceagainst: FortiCNAPP, Prisma Cloud

Kimi K2Wiz

Three alternatives

Microsoft Defender for Cloud, Orca Security, Prisma Cloud

WizHeld

Three alternatives

Microsoft Defender for Cloud, Orca Security, Prisma Cloud

Wiz

Seven alternatives

Aqua Security, Check Point CloudGuard, CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Sysdig

Microsoft Defender for Cloud

Two alternatives

Orca, Wiz

against: Aqua Security, Prisma Cloud, SysdigWiz

Three alternatives

CrowdStrike Falcon Cloud Security, Orca Security, Palo Alto Networks Cortex Cloud

against: CrowdStrike Falcon Cloud Security, FortiCNAPP, Microsoft Defender for Cloud, Prisma Cloud, Upwind, Wiz

GLM 4.7 FlashXMicrosoft Defender for Cloud, Wiz

Eight alternatives

Check Point CloudGuard, CrowdStrike Falcon Cloud Security, Data Theorem, Orca Security, Prisma Cloud, Rapid7 InsightCloudSec, SentinelOne Singularity Cloud Security, Sysdig

Prisma Cloud, WizChanged

Two alternatives

CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud

no first choiceMicrosoft Defender for Cloud

Three alternatives

Orca, Prisma Cloud, Wiz

against: Aqua Security, CrowdStrike, Sysdig, Tenable Cloud Security, Zscalerno first choiceagainst: Microsoft Defender for Cloud, Prisma Cloud, Uptycs, Upwind, Wiz

MiniMax M2.5Microsoft Defender for Cloud, Wiz

One alternative

Prisma Cloud

Prisma CloudChanged

Two alternatives

Microsoft Defender for Cloud, Wiz

Wiz

Five alternatives

CrowdStrike Falcon Cloud Security, Microsoft Defender for Cloud, Orca Security, Prisma Cloud, Sysdig

Check Point CloudGuard

Two alternatives

Palo Alto Networks Cortex Cloud, Wiz

no first choicenothing named

Bold is the first choiceAlternatives are counted; the count opens them.What the answer argued against

05The record

One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record

Seventy-two rows: every prompt, every model, every answer.

Prompt	Model	Version string	Time (UTC)	Searched	Sources	Latency
Direct recommendation	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 13:02	yes	9	10 s
Direct recommendation	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 10:45	yes	1	6 s
Direct recommendation	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 13:45	yes	17	36 s
Direct recommendation	Perplexity Sonar	`sonar`	2026-09-17 10:52	yes	20	5 s
Direct recommendation	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 10:30	yes	29	15 s
Direct recommendation	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 11:02	yes	11	11 s
Direct recommendation	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 12:32	yes	14	17 s
Direct recommendation	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 09:30	yes	5	3 s
Direct recommendation	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 09:35	no	0	60 s
Direct recommendation	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 11:54	yes	14	25 s
Direct recommendation	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 12:30	yes	8	110 s
Direct recommendation	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 11:25	yes	5	13 s
Paraphrase	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 12:36	yes	15	9 s
Paraphrase	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 10:04	yes	2	7 s
Paraphrase	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 13:34	yes	14	28 s
Paraphrase	Perplexity Sonar	`sonar`	2026-09-17 09:27	yes	20	6 s
Paraphrase	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 11:04	yes	42	18 s
Paraphrase	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 10:33	yes	8	8 s
Paraphrase	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 09:38	yes	20	26 s
Paraphrase	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 13:42	yes	5	4 s
Paraphrase	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 10:30	no	0	42 s
Paraphrase	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 13:44	yes	20	31 s
Paraphrase	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 13:56	yes	28	213 s
Paraphrase	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 12:24	yes	15	45 s
Comparative	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 13:44	yes	16	11 s
Comparative	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 11:19	yes	7	8 s
Comparative	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 11:23	yes	31	29 s
Comparative	Perplexity Sonar	`sonar`	2026-09-17 12:32	yes	20	7 s
Comparative	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 12:40	yes	34	18 s
Comparative	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 13:29	yes	6	10 s
Comparative	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 11:38	yes	14	21 s
Comparative	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 12:37	yes	5	2 s
Comparative	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 12:27	yes	12	53 s
Comparative	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 13:15	yes	20	44 s
Comparative	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 13:47	yes	8	117 s
Comparative	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 12:44	yes	10	25 s
Budget constrained	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 11:49	yes	17	10 s
Budget constrained	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 10:37	yes	3	6 s
Budget constrained	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 11:43	yes	16	132 s
Budget constrained	Perplexity Sonar	`sonar`	2026-09-17 10:53	yes	20	6 s
Budget constrained	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 09:22	yes	19	15 s
Budget constrained	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 13:12	yes	5	5 s
Budget constrained	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 10:31	yes	19	26 s
Budget constrained	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 12:05	yes	5	3 s
Budget constrained	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 10:11	yes	15	65 s
Budget constrained	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 13:14	yes	17	43 s
Budget constrained	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 12:54	yes	10	120 s
Budget constrained	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 09:51	yes	15	51 s
Scale constrained	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 12:21	yes	18	13 s
Scale constrained	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 12:50	no	0	9 s
Scale constrained	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 09:44	yes	6	27 s
Scale constrained	Perplexity Sonar	`sonar`	2026-09-17 10:39	yes	19	12 s
Scale constrained	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 11:28	yes	19	13 s
Scale constrained	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 10:29	no	0	9 s
Scale constrained	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 11:50	yes	9	21 s
Scale constrained	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 10:19	yes	5	3 s
Scale constrained	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 10:18	yes	15	58 s
Scale constrained	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 10:35	yes	24	41 s
Scale constrained	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 10:50	yes	19	54 s
Scale constrained	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 13:00	yes	9	38 s
Negative framing	Claude Haiku 4.5	`claude-haiku-4-5-20251001`	2026-09-17 12:58	yes	17	10 s
Negative framing	GPT-5.4 mini	`gpt-5.4-mini-2026-03-17`	2026-09-17 11:00	yes	5	6 s
Negative framing	Gemini 3.5 Flash	`gemini-3.5-flash`	2026-09-17 13:50	yes	20	28 s
Negative framing	Perplexity Sonar	`sonar`	2026-09-17 10:49	yes	20	9 s
Negative framing	Grok 4.1 Fast	`spacexai/grok-4.1-fast-non-reasoning via vertex`	2026-09-17 10:48	yes	41	22 s
Negative framing	Mistral Small	`mistral/mistral-small via mistral`	2026-09-17 14:15	yes	5	7 s
Negative framing	DeepSeek V4 Flash	`deepseek/deepseek-v4-flash via fireworks`	2026-09-17 13:42	yes	26	40 s
Negative framing	Llama 4 Maverick	`meta/llama-4-maverick via bedrock`	2026-09-17 13:47	yes	5	3 s
Negative framing	Qwen 3.7 Flash	`alibaba/qwen3.7-flash via alibaba`	2026-09-17 13:27	yes	9	39 s
Negative framing	Kimi K2	`moonshotai/kimi-k2 via novita`	2026-09-17 12:34	yes	29	44 s
Negative framing	GLM 4.7 FlashX	`zai/glm-4.7-flashx via zai`	2026-09-17 11:29	yes	32	95 s
Negative framing	MiniMax M2.5	`minimax/minimax-m2.5 via minimax`	2026-09-17 14:00	yes	5	31 s

Normalization in this category

Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.

Category-scoped readings

Aqua read as Aqua Security

CrowdStrike Falcon read as CrowdStrike Falcon Cloud Security

CrowdStrike Falcon Cloud read as CrowdStrike Falcon Cloud Security

Fortinet (Lacework) read as FortiCNAPP

Lacework read as FortiCNAPP

Lacework (Fortinet) read as FortiCNAPP

Lacework / FortiCNAPP read as FortiCNAPP

Lacework/Fortinet read as FortiCNAPP

Palo Alto Cortex Cloud read as Palo Alto Networks Cortex Cloud

Rapid7 read as Rapid7 InsightCloudSec

SentinelOne read as SentinelOne Singularity Cloud Security

Tenable read as Tenable Cloud Security

Unresolved, counted raw

SecPod Saner CNAPP

Discontinued, still offered

No shut-down product was recommended here.

Cloud-native application protection for enterprise buyers

By buyer segment

01The standing

Recommended versus criticized

02What they warned about

03What they cite

Sites the answers cite

Pages the answers cite

04How they answered

05The record

Normalization in this category

Also in cloud and infrastructure