DI
Datadog, Inc.•Software Product

Datadog Cloud Security Management (CSM)

Profile checked & reviewed: Oct 15, 2026

Watch Demo (1)Official Website
Cataloged Taxonomy:Cloud security

Videos & Demos

1 Video

Official technical walkthroughs and demonstrations verified directly from the vendor.

Datadog Cloud Security Management Demo & Threat Detection
6:25
Official Demo

Datadog Cloud Security Management Demo & Threat Detection

Datadog Official•Verified Sep 30, 2026
Original Source

Factual Product Summary

Cloud security platform delivering unified CSPM, cloud workload security (CWPP), identity risk analysis, and application vulnerability management.

Documented Technical Capabilities

Core enterprise capabilities verified directly from official vendor engineering documentation.

5 capabilities verified
Breaks down silos by unifying real-time cloud security with application performance observability
Cloud SIEM ingesting and analyzing logs with hundreds of curated out-of-the-box detection rules
Cloud Security Posture Management (CSPM) tracking compliance drift and misconfigurations
Cloud Workload Security (CWS) monitoring eBPF kernel-level file and process activity
Application Security Management (ASM) protecting running services from OWASP Top 10 exploits

Audited Ecosystem & Architecture Integrations

Native connectors, SIEM/SOAR forwarders, cloud APIs, and identity providers confirmed for interoperability.

5 integrations
AWS, Microsoft Azure, Google Cloud PlatformKubernetes, Docker, Red Hat OpenShiftJira, PagerDuty, Slack, OpsgenieGitHub, GitLab, CircleCIHashiCorp Terraform
SecurifyA Editorial Technical Commentary

Ideal for engineering and DevOps teams already using Datadog for observability, seamlessly bridging performance monitoring with security operations.

Based on documented architectural analysis.Editorial Standards Policy

Documented Capabilities & Sourced Claims

Every claim is checked against official engineering documentation or compliance reports.

1 claims verified
CWS EBPF
verified

Cloud Workload Security leverages eBPF kernel probes to detect file, process, and network anomalies

Audited Capability Specifications

Structured criteria validated against official vendor documentation for buyer comparison.

Audited Criteria
Multi-Cloud CSPM / CWPP / CIEM Coverage

Supported cloud security postures across AWS, Azure, GCP, and Kubernetes.

Cloud Security Management (CSPM, CWPP, CIEM, AppSec)
Agentless Snapshot Scanning

Support for API-based, read-only VM disk snapshot and container scanning without agents.

Supported
Infrastructure as Code (IaC) Scanning

Scanning Terraform, CloudFormation, Helm, and ARM templates in CI/CD.

Supported
Runtime Detection & Response

Real-time kernel or eBPF-based container and serverless workload threat detection.

Supported

Official Sources & References

Datadog CSM Technical OverviewType: official documentation
fresh

Deployment & Specifications

Deployment Models
100% Cloud SaaS platform utilizing the unified open-source Datadog Agent
Supported Platforms
Linux, Windows Server, macOS, Kubernetes, AWS Lambda, Azure Functions
Customer Segments
Enterprise, High-Growth Tech, Mid-Market
Service Geography
Global

Pricing Transparency

Status: Publicly Documented
Documented Entry: $180.00 /per-host-per-year

Billed on an annual basis at $15/host/month ($180/host/year) with volume tiers available.

Checked on Sep 28, 2026

About the Vendor

Unified observability and security platform for cloud applications, providing infrastructure monitoring, log management, APM, and Cloud Security Management.

HQ: New York, NY
Product FAQ

Frequently Asked Questions: Datadog Cloud Security Management (CSM)

Key technical, architectural, and procurement questions documented for Datadog Cloud Security Management (CSM) by Datadog, Inc..

|
CSPM (Cloud Security Posture Management) scans multi-cloud control planes via read-only APIs to detect misconfigurations, insecure storage buckets, and IAM privilege risks. CWPP (Cloud Workload Protection Platform) deploys lightweight runtime sensors inside containers, Kubernetes pods, and VMs to detect active in-memory exploits and unauthorized execution.
Have an architecture or vendor question not answered here?Our analysts review vendor source documentation and publish updates continuously.