Cyscale CNAPP
cyscale.com
What it is
Cyscale CNAPP is a web platform that combines cloud posture, vulnerability, identity, workload, data, AI, and compliance context in a remediation workflow. It prioritizes risks using factors including exposure, exploitability, identity reachability, affected workloads, sensitive data access, compliance impact, and business context. Supported environments include AWS, Microsoft Azure, Google Cloud, Alibaba Cloud, and Kubernetes. Most cloud onboarding uses secure provider APIs without agents, while Kubernetes visibility relies on a Cyscale agent for in-cluster collection. Identity and source-control integrations include Microsoft Entra ID, Google Workspace, Okta, GitHub, and GitLab. Controls map to ISO 27001, SOC 2, PCI DSS, NIST, CIS Benchmarks, NIS 2, and DORA, with custom controls supported. Cyscale says it is ISO 27001-certified, hosts platform data on AWS, and accesses customer platform data only when support requires it and the customer explicitly permits access. Pro costs $850 a month billed annually for up to 1,000 assets and 10 connectors. Scale costs $2,000 a month billed annually for up to 5,000 assets and 50 connectors. A free trial is available, but there is no free plan.
Spec sheet
- Purpose
- Cyscale CNAPP connects cloud posture, vulnerability, identity, workload, data, AI, and compliance context in a remediation workflow.Read 28 Sep 2026 · cyscale.com
- Integrations
- The platform supports identity and source control workflows including Microsoft Entra ID, Google Workspace, Okta, GitHub, and GitLab.Read 28 Sep 2026 · cyscale.com
- Compliance
- Cyscale maps controls to frameworks including ISO 27001, SOC 2, PCI DSS, NIST, CIS Benchmarks, NIS 2, and DORA, and supports custom controls.Read 28 Sep 2026 · cyscale.com
- Support
- The FAQ lists documentation, in-product guidance, support channels, and demo or security review sessions as ways customers can get help.Read 28 Sep 2026 · cyscale.com
- Headquarters
- London, England, United KingdomRead 28 Sep 2026 · cyscale.com
- Founded
- 2019Read 28 Sep 2026 · cyscale.com
- Cloud support
- Cyscale lists AWS, Microsoft Azure, Google Cloud, Alibaba Cloud, and Kubernetes among its supported environments.Read 28 Sep 2026 · cyscale.com
- Data access
- Cyscale says it does not access platform customer data unless required for support and with the customer's explicit permission.Read 28 Sep 2026 · cyscale.com
- Intended customers
- The pricing page describes Pro as fitting most SaaS companies, Scale as suited to SMEs, and Enterprise as for growth stage organizations.Read 28 Sep 2026 · cyscale.com
- Kubernetes collection
- Most cloud onboarding is agentless through secure provider APIs, while Kubernetes visibility uses a Cyscale agent for in-cluster collection.Read 28 Sep 2026 · cyscale.com
- Plan limits
- Pro includes up to 1,000 assets and 10 connectors, while Scale includes up to 5,000 assets and 50 connectors.Read 28 Sep 2026 · cyscale.com
- Risk prioritization
- It prioritizes risks using exposure, exploitability, identity reachability, affected workloads, sensitive data access, compliance impact, and business context.Read 28 Sep 2026 · cyscale.com
- Security certification
- Cyscale states that it is an ISO 27001-certified organization and that platform data is hosted on AWS.Read 28 Sep 2026 · cyscale.com
Plans and prices
Strong points and limits
Strong points
- Supports four named cloud providers and Kubernetes.
- Most cloud onboarding uses provider APIs without agents.
- Custom compliance controls are supported.
- Pro and Scale include full platform access.
- Free trial is available.
Limits
- No free plan is listed.
- Pro is limited to 1,000 assets and 10 connectors.
- Scale is limited to 5,000 assets and 50 connectors.
- Kubernetes visibility uses an in-cluster agent.
Who it suits
Cyscale CNAPP suits organizations managing multiple cloud environments and teams that want risk context across identity, workloads, data, and compliance. Its listed plans describe Pro as fitting most SaaS companies and Scale as suited to SMEs.
Verdict
Cyscale CNAPP combines multi-cloud context with risk prioritization and compliance mapping. Consider the annual billing and plan asset and connector limits alongside the Kubernetes agent requirement.