- Home
- Cloud-Native Application Protection Platforms
- Uptycs CNAPP
Uptycs CNAPP
Lexington, Massachusetts, United States
What it is
Uptycs CNAPP provides visibility and protection for hybrid cloud workloads from build time through runtime. It combines continuous workload scanning, agentless scans, and eBPF runtime insights to catalog software across assets. The platform assigns risk scores to workloads and relates attack paths and runtime threats to context such as committed code. Build-time scanning covers AMIs, images, infrastructure as code, and code repositories, including third-party dependency vulnerabilities. Uptycs says runtime defenses can stop threats such as cryptominers and reverse shells, and support customized FIM and YARA policies. Investigations can draw on Attack Path, Ask Uptycs, Unified Threat Hunting, Juno AI Analyst, and historical and real-time queries. Listed compliance reports cover SOC 2, CIS, PCI DSS, HITRUST, NIST, DISA, ISO, and FedRAMP. Supported cloud providers are AWS, Azure, and Google Cloud. Pricing starts at $3/mo (annual), but the minimum order is $12K per year. Workloads are licensed by unit, with each unit supporting up to 8 processing cores.
For and against
For
- Combines continuous and agentless scanning
- Includes eBPF runtime insights
- Scans infrastructure as code and repositories
- Lists reporting for SOC 2, CIS, and FedRAMP
Against
- No free plan
- Minimum order is $12K per year
- Historical raw telemetry is retained for 7 days by default
- Workload units support up to 8 processing cores
The verdict
Uptycs CNAPP connects workload scanning, runtime insights, and investigation tools across hybrid cloud environments. Although pricing starts at $3/mo (annual), the $12K yearly minimum order is an important cost constraint.
Who it suits
Uptycs describes CNAPP as intended for hybrid cloud environments, including large hybrid cloud environments. It may suit teams that need build-time and runtime security across AWS, Azure, or Google Cloud.
Plans and prices
Discover — Workload
Starting at $3 per month · minimum order per year: $12K
Read 5 Oct 2026 · uptycs.com
Discover — Cloud Workload
Starting at $5 per month · minimum order per year: $12K
Read 5 Oct 2026 · uptycs.com
Audit — Workload
Starting at $6 per month · minimum order per year: $12K
Read 5 Oct 2026 · uptycs.com
Audit — Cloud Workload
Starting at $10 per month · minimum order per year: $12K
Read 5 Oct 2026 · uptycs.com
Secure — Cloud Workload
Request for Pricing · minimum order per year: $12K
Read 30 Sep 2026 · uptycs.com
Secure — Workload
Request for Pricing · minimum order per year: $12K
Read 30 Sep 2026 · uptycs.com
On the record
- Cloud coverage
- Uptycs pricing FAQ says its multi cloud pricing supports AWS, Azure, and Google Cloud deployments.uptycs.com · read 30 Sep 2026
- Compliance
- The product page lists out of the box reporting for SOC 2, CIS, PCI DSS, HITRUST, NIST, DISA, ISO, and FedRAMP.uptycs.com · read 30 Sep 2026
- Data retention
- The pricing comparison lists historical raw telemetry retention as 7 days by default.uptycs.com · read 30 Sep 2026
- Development security
- It supports build time scanning of AMIs, images, and IaC, and scanning code repositories for alerts and third party dependency vulnerabilities.uptycs.com · read 30 Sep 2026
- Integrations
- The integrations page lists ServiceNow, PagerDuty, Jira, Slack, Splunk, Azure Sentinel, Elastic Security, QRadar, Amazon Security Lake, Okta, Azure AD, Google Workspace, GitHub, and Cloudflare among its integrations.uptycs.com · read 30 Sep 2026
- Intended users
- Uptycs describes CNAPP as intended for hybrid cloud environments and its About page calls it a platform for large hybrid cloud environments.uptycs.com · read 30 Sep 2026
- Investigations
- Incident investigations can use Attack Path, Ask Uptycs, Unified Threat Hunting, Juno AI Analyst, and historical and real time queries.uptycs.com · read 30 Sep 2026
- Pricing and licensing limits
- The pricing page sets a $12K minimum order per year and says workloads are licensed by unit, with workload units supporting up to 8 processing cores.uptycs.com · read 30 Sep 2026
- Product scope
- Uptycs CNAPP provides unified risk visibility, protection, and prevention for hybrid cloud workloads from build time to runtime.uptycs.com · read 30 Sep 2026
- Risk prioritization
- The platform combines insights into a risk score for each cloud workload and maps attack paths and runtime threats to related context, including committed code.uptycs.com · read 30 Sep 2026
- Runtime defense
- Uptycs says its platform can stop threats such as cryptominers and reverse shells in real time and supports customized FIM and YARA policies.uptycs.com · read 30 Sep 2026
- Scanning and visibility
- It combines continuous workload scanning with agentless scans and eBPF runtime insights to catalog software across assets.uptycs.com · read 30 Sep 2026
- Security controls
- Uptycs states that customer data is protected in transit with TLS 1.2 and encrypted at rest with AES 256, and that it maintains active SOC 2 Type II compliance.uptycs.com · read 30 Sep 2026