Skip to content
SPECIFICTION
Get listed

Sysdig Secure

sysdig.com

From $20/mo WebWindowsmacOSLinuxAPISelf-hosted
Visit sysdig.com
Spec score 8.3 #2 of 21 in Cloud-Native Application Protection Platforms

What it is

Sysdig Secure is a cloud-native application protection platform for cloud environments, containers, Kubernetes, hosts, and serverless workloads. It uses runtime insights to prioritize risks that are exploitable in a customer’s environment. Threat detection runs in real time using Falco rules, machine learning, and drift control; vulnerability scanning is available with agent-based or agentless approaches and prioritizes vulnerabilities in use. Cloud Attack Graph connects vulnerabilities, misconfigurations, and excessive permissions to map potential attack paths. Sysdig Sage is an AI assistant for security search, vulnerability management, threat investigation, and response. The platform connects to AWS, GCP, and Azure, and documents integrations including Git, Jira, Snyk, Docker Scout, Splunk, Elasticsearch, and Syslog. Sysdig describes support for on-premises, air-gapped, and private cloud environments. Deployment is hybrid, with licensing based on hosts or compute instances for CSPM. The documented agent supports Linux distributions and Windows Server 2019 and later; the vulnerability CLI scanner is available for Linux and macOS. Pricing is by quote rather than displayed.

Spec sheet

What it does
Sysdig Secure is a cloud-native application protection platform combining threat detection, vulnerability management, posture management, and identity and entitlement management.Read 15 Oct 2026 · docs.sysdig.com
Product
Sysdig Secure is a cloud-native application protection platform for cloud, containers, Kubernetes, hosts, and serverless.Read 30 Sep 2026 · sysdig.com
Integrations
Documented integrations include AWS, Azure, Google Cloud, GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Splunk, Elasticsearch, Syslog, Semgrep, and Snyk.Read 15 Oct 2026 · docs.sysdig.com
Compliance
Sysdig says it undergoes an annual SOC 2 Type II security audit.Read 30 Sep 2026 · sysdig.com
Support
Support is available through support cases, product UI chat, email, and Slack Connect for premium subscribers.Read 30 Sep 2026 · docs.sysdig.com
Headquarters
Raleigh, North Carolina, United StatesRead 23 Sep 2026 · sysdig.com
Founded
2013Read 23 Sep 2026 · sysdig.com
AI assistance
Sysdig Sage is an AI-powered assistant for security search, vulnerability management, threat investigation, and response.Read 30 Sep 2026 · docs.sysdig.com
Attack paths
Cloud Attack Graph maps connections among vulnerabilities, misconfigurations, and excessive permissions to show potential attack paths.Read 30 Sep 2026 · sysdig.com
Cloud Attack Graph
Cloud Attack Graph correlates cloud assets, activity, and risks to show exploitable attack paths.Read 15 Oct 2026 · docs.sysdig.com
Cloud coverage
Agentless cloud features support AWS, Google Cloud, and Azure, with Oracle Cloud agentless CSPM also documented.Read 15 Oct 2026 · docs.sysdig.com
Cloud providers
Sysdig Secure supports connecting AWS, GCP, and Azure accounts.Read 30 Sep 2026 · docs.sysdig.com
Company facts
Sysdig, Inc. is a Delaware corporation founded in 2013, headquartered at 135 Main Street in San Francisco, and listed by LinkedIn as having 501–1,000 employees.Read 15 Oct 2026 · lei.bloomberg.com
Compliance coverage
The Compliance module includes mappings for standards such as GDPR, HIPAA, PCI DSS, ISO 27001, NIST, CIS benchmarks, MITRE ATT&CK, and others.Read 15 Oct 2026 · docs.sysdig.com
Documentation and support
Sysdig documents installation, administration, Secure workflows, REST APIs, a Python script library, CLI tools, and release notes, while pricing materials list email/case support and level-three expertise.Read 15 Oct 2026 · sysdig.com
Funding news
On December 15, 2021, Sysdig announced a $350 million Series G at a $2.5 billion valuation and reported approximately $744 million in cumulative funding.Read 15 Oct 2026 · sysdig.com
Licence
Sysdig Secure is a commercial host-licensed service; the separate open-source Sysdig project is licensed Apache 2.0 and Secure uses the open-source Falco engine.Read 15 Oct 2026 · github.com
Limit: alert noise and bugs
Complaints include noisy alerts, tuning effort, dashboard crashes, false metrics, and occasional unreliable monitoring data.Read 15 Oct 2026 · capterra.com
Limit: licensing flexibility
A reviewer wanted more licensing customization because some workloads need only a subset of the platform but still require a full licence.Read 15 Oct 2026 · capterra.com
Limit: resource and maintenance overhead
G2 reviewers mention high agent resource consumption, frequent agent updates, and extra maintenance for on-premises deployments.Read 15 Oct 2026 · g2.com
Limit: service incidents
The status history records October 2026 data-ingestion degradation, delayed alerts, alerting errors, and CSPM scan inconsistencies, although each incident was marked resolved.Read 15 Oct 2026 · status-us2.sysdig.com
Limit: setup complexity
Reviewers report that initial Kubernetes and container-security setup can be complex for teams without specialist knowledge.Read 15 Oct 2026 · aws.amazon.com
Notable release
The October 14, 2026 SaaS release added SIEM forwarding filters by severity, policy, and event type to reduce forwarded noise.Read 15 Oct 2026 · docs.sysdig.com
On-premises use
Sysdig describes security for on-premises, air-gapped, and private cloud environments.Read 30 Sep 2026 · sysdig.com
Posture and permissions
CSPM, KSPM, compliance, infrastructure-as-code checks, and AWS CIEM are provided for cloud and Kubernetes environments.Read 15 Oct 2026 · docs.sysdig.com
Praise: detection and visibility
Independent reviewers repeatedly praise real-time Kubernetes and cloud visibility, runtime detection, vulnerability prioritization, and compliance monitoring.Read 15 Oct 2026 · aws.amazon.com
Praise: support and customization
Reviewers frequently commend responsive support, customizable policies, forensic tooling, and clear views of cluster state.Read 15 Oct 2026 · capterra.com
Pricing limit
The pricing page directs customers to request a quote and does not display a price.Read 30 Sep 2026 · sysdig.com
Public API
Sysdig publishes REST APIs for Monitor, Secure, and Platform, authenticated with service accounts or user API tokens using Bearer authorization.Read 15 Oct 2026 · docs.sysdig.com
Python SDK
The sysdig-sdk-python package wraps most Monitor and Secure REST functionality and can be installed from PyPI.Read 15 Oct 2026 · sysdig-sdk-python.readthedocs.io
Rating on AWS Marketplace
4.7 out of 5 from 120 ratingsRead 15 Oct 2026 · aws.amazon.com
Rating on Capterra
4.4 out of 5 from 7 reviewsRead 15 Oct 2026 · capterra.com
Rating on G2
4.8 out of 5 from 111 reviewsRead 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.8 out of 5 from 399 ratingsRead 15 Oct 2026 · gartner.com
Rating on GetApp
4.4 out of 5 from 7 reviewsRead 15 Oct 2026 · getapp.com
Rating on Microsoft Marketplace
4.9 out of 5 from 110 ratingsRead 15 Oct 2026 · marketplace.microsoft.com
Rating on Software Advice
0.0 out of 5 from 0 reviewsRead 15 Oct 2026 · softwareadvice.com
Rating on TrustRadius
7 out of 10 from 3 reviewsRead 15 Oct 2026 · trustradius.com
Risk prioritization
The platform uses runtime insights to prioritize risks that are exploitable in the customer’s environment.Read 30 Sep 2026 · sysdig.com
Runtime detection
It continuously monitors containers and Kubernetes workloads and uses Falco rules for real-time alerts based on predefined or custom policies.Read 15 Oct 2026 · docs.sysdig.com
Security controls
Sysdig states that its service uses encryption in transit and at rest, RBAC, audit logging, secure development practices, quarterly penetration testing, and annual SOC 2 Type II examinations.Read 15 Oct 2026 · sysdig.com
Self-hosting
Sysdig offers an on-premises deployment with Kubernetes/OpenShift installers, including air-gapped installation modes.Read 15 Oct 2026 · docs.sysdig.com
Supported systems
The documented agent supports Linux distributions and Windows Server 2019 and later; a vulnerability CLI scanner is available for Linux and macOS.Read 30 Sep 2026 · docs.sysdig.com
Sysdig Sage
Sysdig Sage is an AI assistant for search, vulnerability workflows, investigations, response, and navigating the product interface.Read 15 Oct 2026 · docs.sysdig.com
SysQL API
The public SysQL API provides mostly read-only GET and POST queries against Secure data through /api/sysql/v2/query and schema endpoints.Read 15 Oct 2026 · docs.sysdig.com
System requirements
Agent installation requires a Sysdig account and key, outbound port 6443, Linux kernel 3.10 or newer, and supports x86 or ARM on several Linux distributions and Kubernetes platforms.Read 15 Oct 2026 · docs.sysdig.com
Threat detection
Sysdig Secure detects threats in real time using Falco rules, machine learning, and drift control.Read 30 Sep 2026 · sysdig.com
Vulnerability management
The platform scans images and running containers, prioritizes in-use vulnerabilities, and connects scanning to CI/CD and registries.Read 15 Oct 2026 · docs.sysdig.com
Vulnerability scanning
It supports agent-based and agentless scanning and prioritizes vulnerabilities in use.Read 30 Sep 2026 · sysdig.com

Plans and prices

Basic $20 a month Per Month No plan information available Read 15 Oct 2026 · capterra.com
Sysdig Secure Priced on request Request a quote host-based licensing · CSPM compute-instance licensing Read 15 Oct 2026 · sysdig.com

Every Sysdig Secure plan and price →

Strong points and limits

Strong points

  • Prioritizes risks exploitable in the customer’s environment.
  • Offers agent-based and agentless vulnerability scanning.
  • Maps potential attack paths with Cloud Attack Graph.
  • Supports AWS, GCP, and Azure connections.
  • Documents on-premises, air-gapped, and private-cloud environments.

Limits

  • Pricing is available by quote, not displayed.
  • Agent support is documented for Linux and Windows Server 2019 onward.
  • CLI vulnerability scanning is listed for Linux and macOS.

Who it suits

Sysdig Secure suits organizations seeking protection for cloud-native workloads across cloud, container, Kubernetes, host, and serverless environments. Its documented on-premises, air-gapped, and private-cloud support may suit teams operating outside public cloud alone.

Verdict

Sysdig Secure brings runtime risk prioritization, threat detection, vulnerability scanning, and attack-path mapping together. Buyers should note the host-based licensing model and request a quote for pricing.

Where Specifiction places it

Alternatives to Sysdig SecureAll alternatives →