Short for Cloud Security Posture Management: spotting and fixing weak configuration across cloud resources, guided by recommendations, a secure score and checks against compliance standards. Everyone using Microsoft Defender for Cloud gets the Foundational level at no charge, while the fuller Defender CSPM is a paid option.
Also called Cloud Security Posture Management.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains CSPM in context, with comparison tables and the common traps.
Terms in this definition
- Secure score
A single number from Microsoft Defender for Cloud that sums up your security posture. A higher figure means lower risk, and acting on recommendations pushes it up.
- Microsoft Defender for Cloud
Combines security posture management with workload protection: a free foundational CSPM tier, paid Defender plans, Secure Score and recommendations. Its regulatory compliance dashboard shows status only and blocks nothing.
- Defender CSPM
Defender for Cloud's paid posture tier. On top of the free foundations it brings agentless scanning, attack path analysis, AI security posture management and the cloud security explorer.
Related terms
- CNAPP
Short for Cloud Native Application Protection Platform, a type of security product bringing DevOps security, workload protection (CWPP) and posture management (CSPM) together. Microsoft's offering here is Microsoft Defender for Cloud.