Short for Cloud Native Application Protection Platform, a type of security product bringing DevOps security, workload protection (CWPP) and posture management (CSPM) together. Microsoft's offering here is Microsoft Defender for Cloud.
Also called Cloud Native Application Protection Platform.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains CNAPP in context, with comparison tables and the common traps.
Terms in this definition
- Workload
Also called an experience: a Fabric toolset aimed at one job role, e.g. Data Factory, Data Engineering, Data Warehouse, Real-Time Intelligence or Power BI. Each keeps its data in OneLake.
- CWPP
Short for Cloud Workload Protection Platform: guarding live workloads, including servers, containers, storage and databases, against attack. Defender for Cloud delivers this with its individual Defender plans, Defender for Servers and Defender for Containers being two examples.
- CSPM
Short for Cloud Security Posture Management: spotting and fixing weak configuration across cloud resources, guided by recommendations, a secure score and checks against compliance standards. Everyone using Microsoft Defender for Cloud gets the Foundational level at no charge, while the fuller Defender CSPM is a paid option.
- Microsoft Defender for Cloud
Combines security posture management with workload protection: a free foundational CSPM tier, paid Defender plans, Secure Score and recommendations. Its regulatory compliance dashboard shows status only and blocks nothing.