The unique and dynamic requirements

The unique and dynamic requirements for protecting cloud-native applications will require a lifecycle approach for protection spanning development and production. This approach will useofferings designed specifically for protecting cloud-native environments. In traditional data centerphysical and virtual machines, many enterprises used the same product on end-user-facingendpoints and server workloads for protection. As these static server workloads were migrated (“liftand shift”) to the cloud, the same approach was often used. Cloud-native applications requireadditional tools and techniques to keep them safe. Traditional end-user endpoint protectionofferings and static data center server protection offerings are not enough. Thus, over the pastseveral years we have seen the emergence of the cloud workload protection (CWPP) market andsolutions designed for cloud workloads.However, CWPP is no longer enough to address the needs of cloud-native application protection. Inthe dynamic world of DevSecOps, cloud-native, service-based applications, the pace of changeand the scale of complexity are growing. Merely understanding the scope of component parts andtheir dependencies and weaknesses is becoming unmanageable. Issues such as configurationmanagement and service discovery become overwhelming at cloud scale. A new protectionapproach is needed, combining protection (i.e., CWPP) with an emerging category to provide betterdiscovery and hardening, referred to as cloud security posture management (CSPM; see Figure 9).