Cloud security (CNAPP) AI agents
Quick answer
Cloud security (CNAPP) AI agents lists 9 verified listings for Cloud and container security posture, exposure and remediation in dataset v0.1.27 (generated 2026-10-27).
Verified cloud-security / CNAPP listings with documented AI agents for posture, exposure and remediation, plus Sonrai WALLy (cloud privileged-access management agent).
This is not a ranking or score.
Verified cloud-security / CNAPP listings with documented AI agents for posture, exposure and remediation, plus Sonrai WALLy (cloud privileged-access management agent). Cloudgeni is a broader CloudOps platform listed here for its Compliance Remediation and PR Review agents. Fields come from the open dataset. This is not a ranking or score.
Key facts
From this dataset
- 9 verified listings on this page, with headquarters in 4 HQ regions and 5 countries.
- Dataset version 0.1.27, generated 2026-10-27.
- Cloud and container security posture, exposure and remediation
Cite as: Agent Index by Heritage Services, Cloud security (CNAPP) AI agents, dataset v0.1.27 (https://theagentindex.io/compare/cloud-security-agents/)
FAQ (from this dataset)
What is listed on this use-case table?
Cloud and container security posture, exposure and remediation 9 verified listings from Agent Index dataset v0.1.27.
How many listings are on this page?
9 verified listings in dataset v0.1.27 (2026-10-27).
Which listings are headquartered in India, Asia-Pacific or Australia/NZ?
1 of 9 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand: Plerion Pleri (AI security engineer) (Australia).
Is this a ranking?
No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.
| Field |  Wiz |  Orca Security |  Plerion Pleri (AI security engineer) |  Sysdig Agentic AI (Sysdig Secure AI agents) |  Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) |  Maze AI Agents (Maze Cloud and Maze Code) |  Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) |  Sonrai WALLy (cloud privileged access management agent) | |
|---|---|---|---|---|---|---|---|---|---|
| Vendor | Wiz | Orca Security | Plerion | Sysdig | Upwind | Palo Alto Networks | Maze | Cloudgeni (Cloudgeni AS) | Sonrai Security (Sonrai Security Inc.) |
| HQ | United States · North America | Israel · Middle East | Australia · Australia and New Zealand | United States · North America | United States · North America | United States · North America | United Kingdom · Europe | Norway · Europe | United States · North America |
| Primary category | Security | Security | Security | Security | Security | Security | Security | Security | Security |
| Also listed in | Security, Risk | Security | Security | Security | Security | Security | Security, Code security | Security, Compliance | Security |
| Summary | Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. | AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection. | Sydney-based cloud and AI security platform with Pleri, an agent that investigates findings, checks real exploitability, raises fix PRs and Jira tickets, and follows each change through to merge. | Outcome-driven AI agents inside Sysdig Secure for cloud and container security: Vuln, SOC, Posture, Risk and Response agents that investigate, prioritise and drive remediation on Falco-based runtime data. | Specialised AI agents inside Upwind's runtime-first cloud security platform: Blue investigates threats to a verdict, Red proves which risks are exploitable, Green finds root-cause fixes and opens PRs, coordinated by Choppy. | Palo Alto Networks' agentic layer for Cortex: prebuilt and custom security agents that investigate and resolve cloud and SOC issues across Cortex Cloud, XSIAM and XDR, with configurable autonomy and approvals. | UK AI agents that investigate every cloud and code vulnerability with code-to-cloud context, decide exploitability and deliver fixes. | Oslo-built agentic cloud operations platform whose agents find cloud security and compliance issues, investigate across cloud state and IaC, write the Terraform/Bicep fix, validate it with a plan and policy checks and open a pull request, then verify the fix after it lands. The Compliance Remediation Agent works from Prowler, Security Hub, Defender and Checkov findings against CIS, SOC 2, ISO 27001 and NIS2. Autonomy is set by policy. | Cloud PAM agent that works with Sonrai's Cloud Permissions Firewall across AWS and GCP. WALLy flags identities carrying privilege risk (overpermissioned roles, external accounts with IAM access, unused permissions), prioritises the fixes that cut the most risk, writes remediation policies (quarantine zombie identities, block third-party access, enforce just-in-time access, remove dangerous privileges) and stages them for a human to review and approve before deployment, then confirms the risk is closed. |
| Frameworks (vendor-stated) | SOC 2, ISO 27001, FedRAMP, TX-RAMP | SOC 2, ISO 27001, GovRAMP, TX-RAMP | — | — | — | — | — | DORA | — |
| FedRAMP (Marketplace, listing scope) | Wiz for U.S. Government · FedRAMP Authorized · FR2308034636A · High · authorized 2025-09-25 | — | — | — | — | — | — | — | — |
| Frameworks (vendor-claimed) | — | — | — | — | — | FedRAMP | — | CIS Benchmarks, SOC 2, ISO 27001, NIS2, DORA | — |
| Capabilities / tasks | cloud security, vulnerability management, risk prioritization | cloud security, vulnerability management, compliance posture | cloud security, vulnerability management, remediation, exposure management | cloud security, vulnerability management, security operations, remediation, incident response | cloud security, incident response, exposure management, remediation | cloud security, security operations, incident response, workflow automation | cloud security, vulnerability management, remediation, sca, sast | cloud security, remediation, iac, compliance posture, pr review, policy as code | cloud security, identity governance, remediation |
| Integrations (vendor-listed) | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | AWS, GCP |
| Pricing (as published) | Custom quote (wiz.io/pricing). | Not verified | Published estimator on plerion.com/pricing: a fixed monthly Plerion bill set by combined monthly AWS/Azure/GCP spend (example shown: $100,000–$130,000 cloud bill → about $3,100–$3,700/month, USD), all capabilities and the agent included; 'Start free' option. | Not published | Not published | Not published | Not published. | Published tiers on cloudgeni.ai/pricing: Free ($0, 1 cloud account, 2 repos, 50 agent actions/month, DevOps Agent only); Pro $79 per user/month (Remediation, Drift, Import, DevOps and PR Review agents; CIS, SOC 2, ISO 27001); Enterprise custom (all agents, DORA/HIPAA/PCI-DSS frameworks, SSO, self-hosting options). Confirm current amounts on the vendor pricing page. | 14-day free trial. Cloud Permissions Firewall (which WALLy works with): $15k/year minimum for small cloud footprints; $150 per account per month for 10-50 accounts (AWS, Azure, GCP); 50+ accounts custom. WALLy is not priced separately. |
| Pricing model | quote | quote | published-tiers | quote | quote | quote | quote | freemium | published-tiers |
| Primary source | https://www.wiz.io/pricing | https://orca.security/ | https://www.plerion.com/agents | https://www.sysdig.com/products/agentic-ai | https://www.upwind.io/agentic-security | https://www.paloaltonetworks.com/cortex/agentix | https://mazehq.com/platform/cloud | https://cloudgeni.ai/ | https://sonraisecurity.com/wally/ |
| Last checked | 2026-10-18 | 2026-10-18 | 2026-10-18 | 2026-10-18 | 2026-10-18 | 2026-10-18 | 2026-10-18 | 2026-10-19 | 2026-10-21 |
| Official site | https://www.wiz.io/ | https://orca.security/ | https://www.plerion.com/agents | https://www.sysdig.com/products/agentic-ai | https://www.upwind.io/agentic-security | https://www.paloaltonetworks.com/cortex/agentix | https://mazehq.com/platform/cloud | https://cloudgeni.ai/ | https://sonraisecurity.com/wally/ |
Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.
Use-case comparisons
- AI SOC and security-analyst agents — 51 listings (Security operations, alert investigation and threat detection)
- US public-sector and FedRAMP AI agents — 25 listings (US government, FedRAMP and public-sector compliance or security operations)
- Identity governance AI agents — 8 listings (Identity governance, access reviews and Conditional Access coverage)
Related
- Wiz alternatives
- Orca Security alternatives
- Plerion Pleri (AI security engineer) alternatives
- Sysdig Agentic AI (Sysdig Secure AI agents) alternatives
- Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) alternatives
- Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) alternatives
- Maze AI Agents (Maze Cloud and Maze Code) alternatives
- Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) alternatives
- Sonrai WALLy (cloud privileged access management agent) alternatives
- Best security AI agents