Cloud Workload Protection

Cloud workload protection encompasses the security controls applied to compute workloads running in cloud environments — virtual machines, containers, and serverless functions — to detect threats, enforce compliance, and respond to incidents. CWPP platforms provide vulnerability assessment, runtime threat detection, drift detection from baseline configurations, and behavioral monitoring across heterogeneous workload types.

Workload protection complements CSPM's infrastructure focus with runtime security for the workloads themselves.