A CNAPP (Cloud-Native Application Protection Platform) is a single platform that combines configuration checks, permissions analysis, vulnerability scanning and workload protection across cloud environments. A CWPP (Cloud Workload Protection Platform) is one of its building blocks: it protects virtual machines, containers and serverless functions while they run. Many CNAPPs also include CSPM (Cloud Security Posture Management).
How TecnetOne handles it: Managed Cloud Services
CNAPP, CWPP, cloud workload protection, cloud-native application protection platform, CNAPP vs CSPM
Related terms
FWaaS (firewall as a service)
Firewall as a service (FWaaS) is a firewall delivered from the cloud by a provider that inspects and filters traffic from offices, remote users and applications without installing a physical appliance at each site. It usually includes next-generation firewall (NGFW) features and is a core component of SASE (Secure Access Service Edge). A company with branch offices can enforce one policy from a single console.
Microsoft Secure Score
Microsoft Secure Score is a Microsoft measurement, available in the Microsoft Defender portal, that expresses as a percentage how closely a Microsoft 365 tenant's security configuration follows Microsoft's recommendations. Each suggested action, such as enabling MFA (multi-factor authentication) for all users, adds points once completed. It is a configuration benchmark, not a certification or a compliance attestation.
Zero-touch enrollment
Zero-touch enrollment is a method that lets a company's new devices register themselves in the MDM (mobile device management) platform the first time they are powered on, with policies, apps and settings already applied and no hands-on work from IT. It is offered through Windows Autopilot, Apple Business Manager and Android Zero-touch: the reseller ships the laptop and the user simply signs in.
Remote wipe and lock
Remote wipe and remote lock are MDM (mobile device management) features that let IT lock a lost or stolen phone or laptop from a distance and, if it is not recovered, erase its data. A wipe can be full, restoring the device to factory settings, or selective, removing only corporate data and apps from a personally owned device.
Secure Web Gateway (SWG)
A secure web gateway (SWG) is a cloud or on-premises service that sits between users and the internet to inspect web traffic and enforce company policy. It filters websites by category, blocks malicious downloads and controls the use of cloud applications. It is one of the core components of the SASE (Secure Access Service Edge) model.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.