Source
Frost & Sullivan names Microsoft a visionary leader in cloud workload protection platforms
Frost & Sullivan's 2026 Cloud Workload Protection Platforms report named Microsoft a visionary leader and the largest provider by revenue. The analysis highlights a market shift toward unified runtime security over isolated scanning.
Why it matters
This shift allows organizations to prioritize genuinely exploitable risks rather than long alert lists, reducing potential production compromises. It helps security teams stop threats before deployment and secure AI-native applications.
The details
- Microsoft holds an estimated global CWPP market share of more than 22%.
- CWPP spending is projected to rise from $6.43 billion in 2025 to $7.95 billion in 2026.
- 82% of container users now run Kubernetes in production environments.
Show entities and relationshipsHide entities and relationships
In this article
Products
Topics
Key connections
Microsoft owns Microsoft Defender for Cloud
Microsoft develops and operates Microsoft Defender for Cloud
Microsoft owns Microsoft Security Copilot
Microsoft develops and operates Microsoft Security Copilot
Microsoft provides Azure AKS as its managed Kubernetes service
Microsoft owns Azure AI Foundry
Microsoft provides Azure AI Foundry for enterprise AI development
GitHub owns GitHub Advanced Security
GitHub develops and provides GitHub Advanced Security
GitHub owns Copilot Autofix
GitHub develops Copilot Autofix for automated vulnerability remediation
Show 31 more connectionsShow fewer connections
Google owns Google Cloud Platform
Google operates the Google Cloud Platform infrastructure
Google owns Google GKE
Google provides Google GKE as its managed Kubernetes service
Amazon Web Services owns Amazon EKS
Amazon Web Services operates the Amazon EKS managed Kubernetes service
Amazon Web Services owns Bottlerocket
Amazon Web Services developed the Bottlerocket container operating system
Frost & Sullivan owns Frost Radar
Frost & Sullivan produces the Frost Radar market benchmarking reports
Microsoft Defender for Cloud is built with eBPF
Defender for Cloud uses a lightweight eBPF-based sensor to monitor runtime activity
Microsoft Defender for Cloud uses MITRE ATT&CK
Detections in Defender for Cloud map to MITRE ATT&CK framework to align alerts with attacker behavior
Microsoft Defender for Cloud uses Cloud Detection and Response
Defender for Cloud incorporates expanded Cloud Detection and Response capabilities across runtime telemetry and control-plane events
Microsoft Defender for Cloud is related to Cloud Workload Protection Platform
Defender for Cloud is positioned as a leading Cloud Workload Protection Platform
Microsoft Defender for Cloud is a partner of Microsoft Defender XDR
Defender for Cloud feeds workload incidents and runtime telemetry into Microsoft Defender XDR
Microsoft Defender for Cloud is a partner of Microsoft Sentinel
Defender for Cloud sends runtime signals and incident data directly to Microsoft Sentinel
Microsoft Defender for Cloud is a partner of GitHub Advanced Security
Defender for Cloud connects runtime context and attack paths to developer workflows in GitHub Advanced Security
Microsoft Defender for Cloud is a partner of Copilot Autofix
Defender for Cloud links runtime findings to Copilot Autofix to enable code fixes at the source
Microsoft Defender for Cloud is a partner of Microsoft Security Copilot
Microsoft Security Copilot provides guided investigation across Defender for Cloud workflows
Microsoft Defender for Cloud uses Kubernetes
Defender for Cloud protects Kubernetes workloads during runtime and applies cluster gating policies
Microsoft Defender for Cloud uses Azure AKS
Defender for Cloud provides DNS detection and runtime security for Azure AKS
Microsoft Defender for Cloud uses Amazon EKS
Defender for Cloud provides DNS detection and runtime protection for Amazon EKS clusters
Microsoft Defender for Cloud uses Google GKE
Defender for Cloud provides DNS detection and runtime security for Google GKE
Microsoft Defender for Cloud uses Bottlerocket
Defender for Cloud provides runtime protection for EKS Bottlerocket environments
Microsoft Defender for Cloud uses Azure AI Foundry
Defender for Cloud supports model scanning and threat protection for Azure AI Foundry
Microsoft Defender for Cloud uses Azure OpenAI
Defender for Cloud provides prompt injection and suspicious access threat protection for Azure OpenAI
Microsoft Defender for Cloud uses Vertex AI
Defender for Cloud provides AI security posture management for Google Vertex AI
Microsoft Defender for Cloud uses Amazon Bedrock
Defender for Cloud provides AI security posture management for Amazon Bedrock
Microsoft Defender for Cloud uses Microsoft Azure
Defender for Cloud protects infrastructure and workloads hosted on Microsoft Azure
Microsoft Defender for Cloud uses Google Cloud Platform
Defender for Cloud provides multi-cloud agent and agentless protection across Google Cloud Platform
Microsoft Defender for Cloud uses Amazon Web Services
Defender for Cloud provides multi-cloud workload protection across Amazon Web Services
Microsoft competes with Google
Major competitors in enterprise cloud platforms and artificial intelligence
Microsoft competes with Amazon Web Services
Major competitors in enterprise cloud infrastructure and security services
Frost & Sullivan is related to Microsoft
Frost & Sullivan evaluated and named Microsoft a visionary leader in its 2026 CWPP Frost Radar report
GitHub is a subsidiary of Microsoft.
Microsoft Defender for Cloud is related to Cloud Security
Defender for Cloud is a cloud security posture management and cloud workload protection platform.
Related events
Microsoft Named Visionary Leader in Frost Radar: Cloud Workload Protection Platforms, 2026
Get the weekly recap
The stories like this one, picked and explained — once a week, straight to your inbox.