Wiz Shares Gartner’s Guidance for Evaluating CNAPP Platforms

Summary

Wiz summarizes Gartner guidance on CNAPP adoption and evaluation, including integrated services, cross-team requirements, risk visibility, and piloting a platform with real developers and applications.

Key points

• The article attributes to Gartner a forecast that, by 2029, 60% of enterprises without a unified CNAPP will lack extensive visibility into their cloud attack surface.
• It describes cloud runtime, identities and permissions, misconfigurations, APIs, and software supply chains as areas of expanding attack surface.
• Gartner recommends forming a joint evaluation team to rank enterprise requirements before requesting vendor information or proposals.
• The article says core CNAPP services should be integrated across the console, policy, and back-end data model, rather than loosely coupled modules.
• Organizations are advised to map existing DevSecOps tools, identify possible consolidation without creating security gaps, and pilot solutions with real developers and applications.
• The post is a vendor-authored summary of Gartner’s 2024 Market Guide and includes Wiz’s endorsement of CNAPP benefits.

People