Cloud Workload Protection Platform (CWPP)

A cloud workload protection platform protects workloads wherever they run, including physical servers, virtual machines, containers, and serverless functions in public clouds, private clouds, and data centers.

Evolution of Workloads

Workloads have become smaller and shorter-lived, which changes how they must be secured.

Cloud Workload Protection Platform (CWPP)

Protection Across the Lifecycle

CWPP covers both the build and runtime phases of the workload lifecycle.

Secure Build

Vulnerable components
Cloud configuration
Secrets
Malware
API discovery

Runtime Protection

Workload vulnerability and configuration
Workload segmentation
Integrity monitoring
Application control
Behavioral monitoring
Host intrusion prevention (HIPS)
Anti-malware

Risk-Based Hierarchy of Controls

Controls can be prioritized from foundational to less critical, starting with hardening, configuration, vulnerability management, and network segmentation.

Security Objective

Secure workloads consistently without slowing the agility the cloud provides.