# Datadog Cloud Security Management vs Microsoft Defender for Cloud

| Attribute | Datadog Cloud Security Management | Microsoft Defender for Cloud |
|---|---|---|
| **Vioscale score** | 50.4 (48% (low)) | 51.5 (25% (low)) |
| deployment.options | `{"cloud":true}` | `{"cloud":true,"hybrid":true}` |
| description.long | Cloud security platform providing posture management, entitlement management, threat detection, workload protection, and compliance monitoring with integrated observability. | Provides continuous protection across cloud infrastructure and applications throughout their entire lifecycle, from initial code development through runtime execution. |
| features.capabilities | `{"ciem":true,"cspm":true,"cwpp":true,"dspm":false,"kspm":true,"iac_scanning":false,"cloud_coverage":"Cloud accounts, hosts, containers, and Kubernetes deployments","open_core_scanner":false,"agentless_scanning":true,"runtime_protection":false,"compliance_frameworks":"Compliance violations and gaps detection"}` | `{"cspm":true,"iac_scanning":true,"runtime_protection":true}` |
| integrations.count | 9 | - |
| integrations.list | `[{"name":"AWS"},{"name":"Azure"},{"name":"Google Cloud"},{"name":"Oracle Cloud"},{"name":"Kubernetes"},{"name":"Red Hat OpenShift"},{"name":"OpenAI"},{"name":"SAP"},{"name":"OpenTelemetry"}]` | - |
| platform.support | `{"web":true}` | `{"web":true}` |
| pricing | - | `{"type":"subscription","freeTier":true,"sourceUrl":"https://azure.microsoft.com/en-us/products/defender-for-cloud","retrievedAt":"2026-08-01T14:01:36.697Z"}` |
| pricing.free_tier | - | yes |
| pricing.model | commercial | commercial |
| pricing.price_level | - | low |
| pricing.transparent | - | no |
| reliability.status_page | yes | yes |
| security.disclosure_policy | yes | - |
| security.gdpr | yes | yes |
| security.soc2 | yes | - |

## Capabilities (Cloud Security Software)

| Capability | Datadog Cloud Security Management | Microsoft Defender for Cloud |
|---|:--:|:--:|
| **Posture** |  |  |
| CSPM (posture / misconfig) | ✓ | ✓ |
| KSPM (Kubernetes posture) | ✓ | - |
| **Workload** |  |  |
| CWPP (workload protection) | ✓ | - |
| **Entitlements** |  |  |
| CIEM (entitlements) | ✓ | - |
| **Data** |  |  |
| DSPM (data posture) | ✗ | - |
| **Pipeline** |  |  |
| IaC / pipeline scanning | ✗ | ✓ |
| **Architecture** |  |  |
| Agentless scanning | ✓ | - |
| **Runtime** |  |  |
| Runtime protection | ✗ | ✓ |
| **Coverage** |  |  |
| Cloud coverage | Cloud accounts, hosts, containers, and Kubernetes deployments | - |
| **Compliance** |  |  |
| Compliance frameworks assessed | Compliance violations and gaps detection | - |
| **Licensing** |  |  |
| Open-core scanner available | ✗ | - |

*Source: Vioscale. Generated 2026-09-01T15:05:46.402Z. "-" = undocumented, not absent.*