CloudSploit vs Cyscale CSPM
CloudSploit
github.com
Cyscale CSPM
cyscale.comSide by side
| Figure | CloudSploit | Cyscale CSPM |
|---|---|---|
| Price from | Free | $850/mo |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| API | — | Yes |
| Self-hosted | Yes | — |
| Plans published | 2 | 3 |
| Spec score · Cloud Security Posture Management Software | 7.9 (#13) | 8.1 (#10) |
| Cloud providers | The project lists AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, and GitHub as supported accounts. | Cyscale supports Amazon Web Services, Microsoft Azure, Google Cloud and Alibaba Cloud. |
| Founded | 2015 | 2019 |
| Headquarters | Boston, Massachusetts, United States and Ramat Gan, Israel | London, England, United Kingdom |
Plans
In their own words
CloudSploit
CloudSploit is an open-source project for identifying possible misconfigurations and security risks in cloud accounts. It collects account metadata through cloud infrastructure APIs using read-only access, then scans that data for potential issues. Supported accounts include AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, and GitHub. The project documents a self-hosted version and a commercial version hosted at Aqua Wave. Setup instructions use NodeJS and npm, and Docker build and run commands are also provided. Its CLI can map findings to HIPAA, PCI, and CIS Level 1 and Level 2 requirements, and write results as CSV, JSON, or JUnit XML, or print them to the console. It can return a non-zero status for non-passing results, which can be used in CI/CD workflows. The CLI also includes AWS GovCloud and AWS China options. CloudSploit runs on Linux and the web, is listed under GPL-3.0, and its self-hosted open-source plan costs nothing.
Cyscale CSPM
Cyscale CSPM has no write-up on Specifiction yet; its figures are above.