CloudSploit vs Microsoft Defender for Business
CloudSploit
github.comMicrosoft Defender for Business
microsoft.comSide by side
| Figure | CloudSploit | Microsoft Defender for Business |
|---|---|---|
| Price from | Free | $0.25/mo |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | — |
| iOS | — | Yes |
| Android | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | — |
| Plans published | 2 | 4 |
| Spec score · Cloud Security Posture Management Software | 7.9 (#13) | 8.5 (#3) |
| Headquarters | Boston, Massachusetts, United States and Ramat Gan, Israel | Redmond, Washington, United States |
| Purpose | CloudSploit is an open-source project for detecting potential misconfigurations and security risks in cloud infrastructure accounts. | Microsoft Defender for Business is an endpoint security solution for small and medium-sized businesses with up to 300 users that helps protect devices from ransomware, malware, phishing, and other threats. |
Plans
Microsoft Defender for Business
- Microsoft Defender for Business$3 a month
- Microsoft Entra Internet Access$5 a month
- Microsoft Entra Suite$12 a month
- Microsoft Defender for Business$3 a year
In their own words
CloudSploit
CloudSploit is an open-source project for identifying possible misconfigurations and security risks in cloud accounts. It collects account metadata through cloud infrastructure APIs using read-only access, then scans that data for potential issues. Supported accounts include AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, and GitHub. The project documents a self-hosted version and a commercial version hosted at Aqua Wave. Setup instructions use NodeJS and npm, and Docker build and run commands are also provided. Its CLI can map findings to HIPAA, PCI, and CIS Level 1 and Level 2 requirements, and write results as CSV, JSON, or JUnit XML, or print them to the console. It can return a non-zero status for non-passing results, which can be used in CI/CD workflows. The CLI also includes AWS GovCloud and AWS China options. CloudSploit runs on Linux and the web, is listed under GPL-3.0, and its self-hosted open-source plan costs nothing.
Microsoft Defender for Business
Microsoft Defender for Business has no write-up on Specifiction yet; its figures are above.