Freedom251 › Cloud-Native Application Protection Platforms
Uptycs CNAPP
What Uptycs CNAPP is
Uptycs CNAPP provides risk visibility, protection, and prevention for hybrid cloud workloads from build time through runtime. It combines continuous workload scanning, agentless scans, and eBPF runtime insights to catalog software across assets. The platform assigns workload risk scores and links attack paths and runtime threats to related context, including committed code. Build-time scanning covers AMIs, images, infrastructure as code, and code repositories, including alerts for third-party dependency vulnerabilities. Runtime defenses can stop threats such as cryptominers and reverse shells, and support customized FIM and YARA policies. Investigation tools include Attack Path, Ask Uptycs, Unified Threat Hunting, Juno AI Analyst, and historical and real-time queries. Listed compliance reporting includes SOC 2, CIS, PCI DSS, HITRUST, NIST, DISA, ISO, and FedRAMP. The platform supports AWS, Azure, and Google Cloud. Pricing starts at $3/mo (annual), but the minimum order is $12K per year. Workloads are licensed by unit, with each workload unit supporting up to 8 processing cores. Historical raw telemetry retention is 7 days by default.
Who it suits
Uptycs describes CNAPP for hybrid cloud environments, particularly large hybrid cloud environments. It may suit teams that need workload risk visibility across build time and runtime.
What it does well
- Combines continuous, agentless, and eBPF scanning.
- Scans infrastructure as code and code repositories.
- Supports customized FIM and YARA policies.
- Lists reporting for SOC 2, CIS, PCI DSS, and more.
- Supports AWS, Azure, and Google Cloud.
What to know first
- Minimum order is $12K per year.
- Workload units support up to 8 processing cores.
- Historical raw telemetry retention is 7 days by default.
Limits
The listed minimum order is $12K per year, even though the Discover — Workload plan is priced at $36 a year ($3.00/month, billed annually). Workload units support up to 8 processing cores, and historical raw telemetry retention is 7 days by default.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Audit — Cloud Workload | $120.00 per year (= $10.00/month, billed annually) · Starting at $10 per month · minimum order per year: $12K | $120 a year |
| Discover — Workload | $36.00 per year (= $3.00/month, billed annually) · Starting at $3 per month · minimum order per year: $12K | $36 a year |
| Discover — Cloud Workload | $60.00 per year (= $5.00/month, billed annually) · Starting at $5 per month · minimum order per year: $12K | $60 a year |
| Audit — Workload | $72.00 per year (= $6.00/month, billed annually) · Starting at $6 per month · minimum order per year: $12K | $72 a year |
| Secure — Workload | Request for Pricing · minimum order per year: $12K | On request |
| Secure — Cloud Workload | Request for Pricing · minimum order per year: $12K | On request |
As uptycs.com lists them, read 5 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the Uptycs CNAPP product page.
- Choose a workload plan: Discover starts at $3/mo billed annually, while Secure requires a pricing request.
- Plan for the $12K minimum order per year.
- Select AWS, Azure, or Google Cloud workloads to cover.
Verdict
Uptycs CNAPP spans workload scanning, runtime defense, and investigations across hybrid cloud environments. Its $12K annual minimum order is an important constraint to weigh against the listed starting price.
Questions
How much does Uptycs CNAPP cost?
Discover — Workload is $36 a year, equivalent to $3.00/month billed annually. The pricing page sets a $12K minimum order per year; Secure plans require a pricing request.
Is there a free plan?
No. Uptycs CNAPP is listed as paid, with pricing starting at $3/mo billed annually.
Which cloud providers does it support?
Its multi-cloud pricing supports AWS, Azure, and Google Cloud.
Which platforms are listed?
The listed platforms are API, Linux, macOS, self-hosted, web, and Windows.
Who makes Uptycs CNAPP?
Uptycs is headquartered in Lexington, Massachusetts, United States.
What security controls does Uptycs state it maintains?
Uptycs says customer data is protected in transit with TLS 1.2 and encrypted at rest with AES 256. It also states that it maintains active SOC 2 Type II compliance.
Facts from Uptycs CNAPP's own pages
- Cloud coverage
- Uptycs pricing FAQ says its multi cloud pricing supports AWS, Azure, and Google Cloud deployments. · uptycs.com, 30 Sept 2026
- Compliance
- The product page lists out of the box reporting for SOC 2, CIS, PCI DSS, HITRUST, NIST, DISA, ISO, and FedRAMP. · uptycs.com, 30 Sept 2026
- Data retention
- The pricing comparison lists historical raw telemetry retention as 7 days by default. · uptycs.com, 30 Sept 2026
- Development security
- It supports build time scanning of AMIs, images, and IaC, and scanning code repositories for alerts and third party dependency vulnerabilities. · uptycs.com, 30 Sept 2026
- Headquarters
- Lexington, Massachusetts, United States · uptycs.com, 28 Sept 2026
- Integrations
- The integrations page lists ServiceNow, PagerDuty, Jira, Slack, Splunk, Azure Sentinel, Elastic Security, QRadar, Amazon Security Lake, Okta, Azure AD, Google Workspace, GitHub, and Cloudflare among its integrations. · uptycs.com, 30 Sept 2026
- Intended users
- Uptycs describes CNAPP as intended for hybrid cloud environments and its About page calls it a platform for large hybrid cloud environments. · uptycs.com, 30 Sept 2026
- Investigations
- Incident investigations can use Attack Path, Ask Uptycs, Unified Threat Hunting, Juno AI Analyst, and historical and real time queries. · uptycs.com, 30 Sept 2026
- Pricing and licensing limits
- The pricing page sets a $12K minimum order per year and says workloads are licensed by unit, with workload units supporting up to 8 processing cores. · uptycs.com, 30 Sept 2026
- Product scope
- Uptycs CNAPP provides unified risk visibility, protection, and prevention for hybrid cloud workloads from build time to runtime. · uptycs.com, 30 Sept 2026
- Risk prioritization
- The platform combines insights into a risk score for each cloud workload and maps attack paths and runtime threats to related context, including committed code. · uptycs.com, 30 Sept 2026
- Runtime defense
- Uptycs says its platform can stop threats such as cryptominers and reverse shells in real time and supports customized FIM and YARA policies. · uptycs.com, 30 Sept 2026
- Scanning and visibility
- It combines continuous workload scanning with agentless scans and eBPF runtime insights to catalog software across assets. · uptycs.com, 30 Sept 2026
- Security controls
- Uptycs states that customer data is protected in transit with TLS 1.2 and encrypted at rest with AES 256, and that it maintains active SOC 2 Type II compliance. · uptycs.com, 30 Sept 2026