Native Security
An Israeli-US startup building a cloud security control plane that operationalizes AWS, Azure, GCP, and OCI's own native security controls instead of adding another agent.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Native Security sells what it calls a cloud security control plane: rather than deploying yet another agent-based scanner, the platform helps security teams actually operationalize the native security controls that AWS, Microsoft Azure, Google Cloud, and Oracle Cloud Infrastructure already ship. Teams define a security goal once, and Native translates it into each provider’s own enforcement mechanisms, simulating the impact of a policy before rollout and validating enforcement coverage afterward.
The company was founded in 2024 by engineers who previously built AWS GuardDuty and AWS Security Hub and who worked at Check Point, and it exited stealth in March 2026 with $42 million in total funding, including a $31 million Series A led by Ballistic Ventures. Its pitch is explicitly against reactive alert-triage tooling: instead of generating more findings for analysts to chase, it aims to close the gap between the security capability enterprises already own and what is actually enforced day to day.
The differentiator is architectural — Native does not replace cloud-native controls with a parallel proprietary layer, it orchestrates the controls that are already there and keeps enforcement aligned as cloud providers change their own capabilities over time.
Innovation Matrix Assessment
Went from founding to a working multi-cloud control plane and a $31M Series A within roughly two years, per Globes and YL Ventures; independent cadence data isn't available yet.
Targets a concrete CISO pain point — security capability that is purchased but not actually enforced — by operationalizing existing native cloud controls rather than adding tool sprawl.
$42M total funding and a Ballistic Ventures-led Series A are real signals, but public named-customer evidence was not found at time of writing.
Reframes CNAPP-style cloud security as an orchestration layer over native controls rather than a new scanning agent — a meaningful but not category-defining shift.
No independent benchmark, analyst placement, or named-incident evidence was found; claims about policy simulation and coverage validation are company-stated.
As hyperscalers keep expanding native security features, a vendor-neutral orchestration layer for those controls should stay relevant rather than age out.
Why CISOs Should Care
Lets security teams actually use the native cloud-provider controls they're already paying for, instead of layering on another agent and alert stream.
What Makes It Different
Acts as a control plane that turns one set of security goals into each cloud provider's own native enforcement, rather than shipping a separate proprietary agent.
The Matrix Verdict
65/100 — INCREMENTAL INNOVATOR
An early but well-pedigreed entrant (ex-AWS GuardDuty/Security Hub, ex-Check Point founders) addressing a real gap between native cloud security capability and actual enforcement. It lands as an Incremental Innovator: promising architecture and funding, with momentum and efficacy evidence still largely vendor-reported.
Editorial Note: Claims vs. Verified Findings
Claims about policy-impact simulation and the scope of the native-control enforcement gap are company- and founder-stated; no independent third-party validation was found.
Sources
Alternatives to Native Security
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Second Front Systems
A Wilmington, DE defense-tech company whose Game Warden platform deploys commercial SaaS into DoD classified networks in 90…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…
Obsidian Security
Obsidian Security provides a SaaS security posture management (SSPM) platform that detects identity-centric threats and misconfigurations across enterprise…