Compare Cloudxray vs. ThreatMapper in 2026

ThreatMapper

View Product

Add To Compare

Average Ratings 0 Ratings

Total

ease

features

design

support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total

ease

features

design

support

No User Reviews. Be the first to provide a review:

Write a Review

Similar Products

Wiz
Wiz is a new approach in cloud security. It finds the most important risks and infiltration vectors across all multi-cloud environments. All lateral movement risks, such as private keys that are used to access production and development environments, can be found. You can scan for vulnerabilities and unpatched software in your workloads. A complete inventory of all services and software within your cloud environments, including version and package details, is available. Cross-reference all keys on your workloads with their privileges in your cloud environment. Based on a complete analysis of your cloud network, including those behind multiple hops, you can see which resources are publicly available to the internet. Compare your industry best practices and baselines to assess the configuration of cloud infrastructure, Kubernetes and VM operating system.

1,474 Ratings

Learn More

Orca Security
Orca Security is the pioneer of agentless cloud security that is trusted by hundreds of enterprises globally. Orca makes cloud security possible for enterprises moving to and scaling in the cloud with its patented SideScanning™ technology and Unified Data Model. The Orca Cloud Security Platform delivers the world's most comprehensive coverage and visibility of risks across AWS, Azure, Google Cloud and Kubernetes.

567 Ratings

Learn More

Aikido Security
Aikido is the all-in-one security platform for development teams to secure their complete stack, from code to cloud. Aikido centralizes all code and cloud security scanners in one place. Aikido offers a range of powerful scanners including static code analysis (SAST), dynamic application security testing (DAST), container image scanning, and infrastructure-as-code (IaC) scanning. Aikido integrates AI-powered auto-fixing features, reducing manual work by automatically generating pull requests to resolve vulnerabilities and security issues. It also provides customizable alerts, real-time vulnerability monitoring, and runtime protection, enabling teams to secure their applications and infrastructure seamlessly.

232 Ratings

Learn More

Criminal IP ASM
Criminal IP's Attack Surface Management (ASM) is an intelligence-driven platform designed to continuously identify, catalog, and oversee all internet-connected assets linked to an organization, including overlooked and shadow resources, enabling teams to understand their actual external exposure from the perspective of potential attackers. This solution integrates automated asset detection with open-source intelligence (OSINT) methods, artificial intelligence enhancements, and sophisticated threat intelligence to reveal exposed hosts, domains, cloud services, IoT devices, and other internet-facing entry points, while also collecting evidence such as screenshots and metadata, and linking findings to known vulnerabilities and attacker techniques. By evaluating exposures through the lens of business relevance and risk, ASM emphasizes vulnerable elements and misconfigurations, providing instantaneous alerts and interactive dashboards that facilitate quicker investigations and remediation efforts. Furthermore, this comprehensive tool empowers organizations to proactively manage their security posture, ensuring that they remain vigilant against emerging threats.

18 Ratings

Learn More

Astra Pentest
Astra's Pentest is a comprehensive solution for penetration testing. It includes an intelligent vulnerability scanner and in-depth manual pentesting. The automated scanner performs 10000+ security checks, including security checks for all CVEs listed in the OWASP top 10 and SANS 25. It also conducts all required tests to comply with ISO 27001 and HIPAA. Astra provides an interactive pentest dashboard which allows users to visualize vulnerability analysis, assign vulnerabilities to team members, collaborate with security experts, and to collaborate with security experts. The integrations with CI/CD platforms and Jira are also available if users don't wish to return to the dashboard each time they want to use it or assign a vulnerability for a team member.

258 Ratings

Learn More

ESET PROTECT Advanced
ESET Protect Advanced offers a comprehensive cybersecurity solution for businesses of any size. It offers advanced endpoint security against ransomware and zero-day threats. It also includes full disk encryption to ensure legal compliance and data security. The solution uses adaptive scanning, cloud sandboxing and behavioral analysis for proactive cloud-based threats defense. Mobile threat protection secures Android and iOS with anti-malware and anti-theft. It also offers cloud app security, mail server protection, vulnerability and patch management, and cloud app protection. Multi-factor authentication and extended detection and reaction (XDR) improve threat detection and response. The solution provides a single pane of glass remote management to provide visibility into threats and users. It also offers advanced reporting and customized notifications.

2,294 Ratings

Learn More

Admin By Request Endpoint Privilege Management
Achieve swift onboarding and management of your entire workforce's workstations and servers with Just-In-Time privilege elevation through an intuitive portal. This system allows for a comprehensive analysis of risky users and assets by utilizing thread and behavioral analytics to detect harmful software, thus safeguarding against data breaches and malware threats. Instead of elevating user privileges, the focus is on elevating applications, enabling privilege delegation tailored to specific users or groups, which in turn optimizes both time and financial resources. Regardless of whether the individual is a developer within IT, a novice in HR, or a third-party contractor servicing an endpoint, there exists a suitable elevation method for each profile. Additionally, all functionalities are readily available with Admin By Request and can be customized to meet the unique requirements of various users or groups, ensuring a secure and efficient operational environment. This approach not only enhances security but also fosters a more streamlined workflow across departments.

87 Ratings

Learn More

Safetica
Safetica Intelligent Data Security protects sensitive enterprise data wherever your team uses it. Safetica is a global software company that provides Data Loss Prevention and Insider Risk Management solutions to organizations. ✔️ Know what to protect: Accurately pinpoint personally identifiable information, intellectual property, financial data, and more, wherever it is utilized across the enterprise, cloud, and endpoint devices. ✔️ Prevent threats: Identify and address risky activities through automatic detection of unusual file access, email interactions, and web activity. Receive the alerts necessary to proactively identify risks and prevent data breaches. ✔️ Secure your data: Block unauthorized exposure of sensitive personal data, trade secrets, and intellectual property. ✔️ Work smarter: Assist teams with real-time data handling cues as they access and share sensitive information.

415 Ratings

Learn More

Athena Security
Athena Security uses advanced concealed weapons detection systems to deliver a unified, AI-driven entryway solution for hospitals, K–12 schools, casinos, places of worship, government buildings, and commercial facilities across the U.S. The Apollo 500 enables seamless walk-through screening to detect weapons in real time, giving operators more actionable data points than traditional systems for faster, more confident decisions. Athena’s AI-powered X-ray leverages iPad technology to modernize screening and improve threat detection. Athena’s Hospital Visitor Management System integrates with EPIC to connect identity, access, and screening data. Innovations include the Ambulance Bay WDS for stretcher screening and secondary screening for bags and lower extremities to reduce human error. Designed with compliance in mind, Athena aligns with California AB 2975, which mandates weapons detection screening at key hospital entrances by 2027 to improve safety and reduce workplace violence. DHS-aligned workflows ensure testing, controls, and compliance, while telepresence and AR alert glasses provide real-time support. All systems connect in one platform for centralized monitoring and enterprise reporting.

5 Ratings

Learn More

Carbide
Carbide is a tech-enabled solution that helps organizations elevate their information security and privacy management programs. Designed for teams pursuing a mature security posture, Carbide is especially valuable for companies with strict compliance obligations and a need for hands-on expert support. With features like continuous cloud monitoring and access to Carbide Academy’s educational resources, our platform empowers teams to stay secure and informed. Carbide also supports 100+ technical integrations to streamline evidence collection and satisfy security framework controls, making audit readiness faster and more efficient.

88 Ratings

Learn More

Description

CloudXray is a solution for scanning cloud workloads that functions in two modes: a basic mode for identifying misconfigurations and an advanced mode for comprehensive scanning that includes malware detection, OS vulnerabilities, and misconfiguration analysis. Its architecture features a centralized orchestrator situated in a single region, complemented by distributed scanners that extend coverage to all identified regions, ensuring compatibility with both AWS and GCP platforms. By employing an agentless methodology, it examines workloads and volumes throughout your cloud account for threats such as malware, CVEs, and policy violations. The solution dynamically provisions scanning instances as needed, integrates through roles and APIs, and ensures ongoing monitoring of cloud resources without the necessity for persistent agents. With support for quick deployment, CloudXray is tailored for scalable, multi-region cloud environments. It is specifically crafted to assist organizations in upholding a secure framework across compute instances, storage volumes, and operating system layers by merging configuration assessments with vulnerability detection and additional features. This comprehensive approach not only enhances security but also streamlines compliance with industry regulations.

Description

Open source, multi-cloud platform to scan, map, and rank vulnerabilities in containers, images hosts, repositories, and running containers. ThreatMapper detects threats to your applications in production across clouds, Kubernetes and serverless. You cannot secure what you can't see. ThreatMapper automatically discovers your production infrastructure. It can identify and interrogate cloud instances, Kubernetes nodes and serverless resources. This allows you to discover the applications and containers, and map their topology in real time. ThreatMapper allows you to visualize and discover the external and internal attack surfaces for your applications and infrastructure. Bad actors can gain access to your infrastructure by exploiting vulnerabilities in common dependencies. ThreatMapper scans hosts and containers for known vulnerable dependencies. It also takes threat feeds from more than 50 sources.