News
Summaries of public announcements, with links to the original source. Updated monthly.
Cloud Security Compare editors · Matchups reviewed September 2026 · Editorial assessment
The short version
Fourteen announcements from January to September 2026 from the vendors we compare and the open-source projects around them, newest first. The largest were Google completing its acquisition of Wiz in March and Upwind's $250 million Series B in January. Announcements do not change scores until the capability is documented as available.
SentinelOne
The managed hunting service now covers cloud control-plane activity such as IAM privilege escalation, suspicious IAM policy changes and S3 bucket reconnaissance. It is available to existing Wayfinder Threat Hunting customers through Singularity Marketplace plugins.
Source: SentinelOne press release
Falco
The CNCF runtime detection project that Sysdig created added raw byte matching in rule conditions, reload status endpoints, driver 11.0.0 and rules that flag containers accessing GPU devices.
Source: Falco blog
Orca Security
Orca announced the Partner POD Program, which rewards partners across the customer lifecycle including net retention, and an AI-based Partner Success Platform available globally in six languages at launch.
Source: Orca Security press release
Wiz
Wiz says Wiz for Gov is now GovRAMP High authorized, validated against NIST SP 800-53r5 controls, which makes it easier for US state and public sector organizations to adopt.
Source: Wiz blog
Orca Security
Orca released full Japanese localization of its cloud security platform, covering menus, alerts, dashboards and profile management.
Source: Orca Security press release
Palo Alto Networks
Palo Alto Networks acquired Console, an AI-native platform for resolving alerts, issues and requests, and says the deal will deepen agentic capabilities in Cortex. Terms were not disclosed.
Source: Palo Alto Networks press release
Wiz
The feature brings findings from bug bounties, third-party audits, red team exercises and AI pen-test tools into Wiz and correlates them with the Wiz Security Graph.
Source: Wiz blog
Sysdig
Sysdig introduced Sysdig Secure AI, an AI-based investigation and response offering that works with the Sysdig Secure CNAPP.
Source: Sysdig press release
Microsoft
From 27 October 2026, the free Foundational CSPM tier of Defender for Cloud will no longer be turned on by default for new Azure subscriptions. It remains free, and existing subscriptions and AWS and GCP connectors are not affected.
Orca Security
Unveiled ahead of Black Hat USA 2026, AI AppGen Security finds apps built on AI app builders outside standard pipelines, and AI Code Security Auditor applies AI-driven static analysis to code in existing pipelines. Orca expects general availability later in 2026.
Source: Orca Security press release
Aqua Security
Aqua announced Aqua Compass, an MCP server that lets AI agents investigate, contain and remediate runtime incidents with human oversight, and dashboards that express runtime risk as monetary exposure.
Source: Aqua Security press release
CrowdStrike
Announced at RSA 2026: a Cloud Risk Engine that maps cloud risks to adversary tradecraft, plus Application Explorer, Timeline Explorer and unified real-time cloud detection and response.
Source: CrowdStrike press release
Wiz
Google closed the Wiz deal, announced in March 2025 at $32 billion. Wiz states it remains a multi-cloud platform across AWS, Azure, GCP and OCI.
Source: Wiz blog
Upwind
Upwind announced a $250 million Series B led by Bessemer Venture Partners and Picture Capital, bringing its total funding to over $430 million.
Source: Upwind
How we pick items