Datadog Cloud Security Management
Cloud security module embedded in Datadog's observability platform, correlating posture, identity risk, and workload telemetry via a shared Security Graph.
Visit Website ↗Overview
Datadog (NASDAQ: DDOG) is a public observability company founded in 2010 and headquartered in New York City, with roughly $3.43 billion in fiscal-year-2025 revenue. Cloud Security Management, introduced in 2022, is a module within Datadog’s broader monitoring platform, alongside Cloud SIEM (launched 2020).
CSM uses a hybrid agentless-and-agent-based approach, with a core differentiator being the Security Graph, which visualizes relationships between cloud resources, identities, and workloads to surface compound risks — built on the same telemetry pipeline Datadog already collects for infrastructure and application monitoring.
Innovation Matrix Assessment
Datadog ships new features at a rapid, near-continuous cadence across its platform, expanding CSM/Cloud SIEM capability steadily since their 2020/2022 launches.
Reusing existing observability telemetry for security correlation via the Security Graph meaningfully reduces duplicate tooling for teams already on Datadog.
Large, fast-growing public company with $3.43B revenue and ~32,700 customers (FY2025), giving CSM real distribution momentum.
Bundling security posture and identity-risk correlation into an existing observability data plane is a genuinely different architectural model than a standalone CNAPP.
No independent breach-prevention case study or third-party red-team validation specific to CSM was found.
Security-observability convergence is a strong, durable trend, and Datadog's existing footprint positions CSM well for continued relevance.
Why CISOs Should Care
If your engineering org already runs on Datadog, CSM turns existing observability data into security findings without standing up a second telemetry pipeline.
What Makes It Different
Instead of a purpose-built security data plane, CSM reuses Datadog's existing infrastructure, log, and trace telemetry, correlating it through a shared Security Graph.
The Matrix Verdict
72/100 — MEANINGFUL INNOVATOR
CSM is a strong, fast-moving product riding a very large and growing platform, with genuine architectural differentiation for existing Datadog customers.
Editorial Note: Claims vs. Verified Findings
CSM's feature set is corroborated by Datadog's own documentation. No independent third-party efficacy testing or named incident evidence was found.
Sources
Alternatives to Datadog Cloud Security Management
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Tenable Cloud Security
An agentless, graph-based cloud identity and posture platform, born as Israeli startup Ermetic, now folded into Tenable's exposure-management…
Upwind Security
Fast-growing, venture-backed CNAPP startup combining agentless scanning with eBPF runtime sensors for real-time cloud and AI workload risk…