Skip to content
SPECIFICTION
Get listed

Uptycs CNAPP

uptycs.com

From $3/mo WebWindowsmacOSLinuxAPISelf-hosted
Visit uptycs.com
Spec score 7.4 #9 of 21 in Cloud-Native Application Protection Platforms

What it is

Uptycs CNAPP provides risk visibility, protection, and prevention for hybrid cloud workloads from build time through runtime. It combines continuous workload scanning, agentless scans, and eBPF runtime insights to catalog software across assets. Workload risk scores connect attack paths and runtime threats with context such as committed code. Build-time scanning covers AMIs, images, infrastructure as code, and code repositories, including alerts for third-party dependency vulnerabilities. Uptycs says runtime defenses can stop threats such as cryptominers and reverse shells in real time, with customized FIM and YARA policies. Investigations can draw on Attack Path, Ask Uptycs, Unified Threat Hunting, Juno AI Analyst, and historical or real-time queries. Listed out-of-the-box compliance reports cover SOC 2, CIS, PCI DSS, HITRUST, NIST, DISA, ISO, and FedRAMP. It supports AWS, Azure, and Google Cloud. Pricing starts at $36 a year for Discover — Workload, equivalent to $3.00/month billed annually, but the minimum order is $12K per year. Workload units support up to 8 processing cores; historical raw telemetry retention is 7 days by default.

Spec sheet

Intended users
Uptycs describes CNAPP as intended for hybrid cloud environments and its About page calls it a platform for large hybrid cloud environments.Read 30 Sep 2026 · uptycs.com
Integrations
The integrations page lists ServiceNow, PagerDuty, Jira, Slack, Splunk, Azure Sentinel, Elastic Security, QRadar, Amazon Security Lake, Okta, Azure AD, Google Workspace, GitHub, and Cloudflare among its integrations.Read 30 Sep 2026 · uptycs.com
Compliance
The product page lists out of the box reporting for SOC 2, CIS, PCI DSS, HITRUST, NIST, DISA, ISO, and FedRAMP.Read 30 Sep 2026 · uptycs.com
Headquarters
Lexington, Massachusetts, United StatesRead 28 Sep 2026 · uptycs.com
Cloud coverage
Uptycs pricing FAQ says its multi cloud pricing supports AWS, Azure, and Google Cloud deployments.Read 30 Sep 2026 · uptycs.com
Data retention
The pricing comparison lists historical raw telemetry retention as 7 days by default.Read 30 Sep 2026 · uptycs.com
Development security
It supports build time scanning of AMIs, images, and IaC, and scanning code repositories for alerts and third party dependency vulnerabilities.Read 30 Sep 2026 · uptycs.com
Investigations
Incident investigations can use Attack Path, Ask Uptycs, Unified Threat Hunting, Juno AI Analyst, and historical and real time queries.Read 30 Sep 2026 · uptycs.com
Pricing and licensing limits
The pricing page sets a $12K minimum order per year and says workloads are licensed by unit, with workload units supporting up to 8 processing cores.Read 30 Sep 2026 · uptycs.com
Product scope
Uptycs CNAPP provides unified risk visibility, protection, and prevention for hybrid cloud workloads from build time to runtime.Read 30 Sep 2026 · uptycs.com
Risk prioritization
The platform combines insights into a risk score for each cloud workload and maps attack paths and runtime threats to related context, including committed code.Read 30 Sep 2026 · uptycs.com
Runtime defense
Uptycs says its platform can stop threats such as cryptominers and reverse shells in real time and supports customized FIM and YARA policies.Read 30 Sep 2026 · uptycs.com
Scanning and visibility
It combines continuous workload scanning with agentless scans and eBPF runtime insights to catalog software across assets.Read 30 Sep 2026 · uptycs.com
Security controls
Uptycs states that customer data is protected in transit with TLS 1.2 and encrypted at rest with AES 256, and that it maintains active SOC 2 Type II compliance.Read 30 Sep 2026 · uptycs.com

Plans and prices

Discover — Workload $36 a year $36.00 per year (= $3.00/month, billed annually) Starting at $3 per month · minimum order per year: $12K Read 5 Oct 2026 · uptycs.com
Discover — Cloud Workload $60 a year $60.00 per year (= $5.00/month, billed annually) Starting at $5 per month · minimum order per year: $12K Read 5 Oct 2026 · uptycs.com
Audit — Workload $72 a year $72.00 per year (= $6.00/month, billed annually) Starting at $6 per month · minimum order per year: $12K Read 5 Oct 2026 · uptycs.com
Audit — Cloud Workload $120 a year $120.00 per year (= $10.00/month, billed annually) Starting at $10 per month · minimum order per year: $12K Read 5 Oct 2026 · uptycs.com
Secure — Cloud Workload Priced on request Request for Pricing · minimum order per year: $12K Read 30 Sep 2026 · uptycs.com
Secure — Workload Priced on request Request for Pricing · minimum order per year: $12K Read 30 Sep 2026 · uptycs.com

Every Uptycs CNAPP plan and price →

Strong points and limits

Strong points

  • Combines continuous and agentless workload scans.
  • Maps attack paths and threats to related context.
  • Scans infrastructure as code and code repositories.
  • Lists reporting for SOC 2, CIS, PCI DSS, and more.
  • Supports AWS, Azure, and Google Cloud.

Limits

  • Minimum order is $12K per year.
  • No free plan is listed.
  • Raw telemetry retention is 7 days by default.

Who it suits

It is intended for hybrid cloud environments, including large hybrid cloud environments. Its coverage of build-time scanning, runtime defense, and investigations may suit teams managing workloads across AWS, Azure, and Google Cloud.

Verdict

Uptycs CNAPP connects build-time scanning with workload risk visibility and runtime defense across hybrid cloud environments. The listed starting rate is $3 per month billed annually, but the $12K yearly minimum order is a material pricing constraint.

Where Specifiction places it

Alternatives to Uptycs CNAPPAll alternatives →