CIPHERCUE
Cloud security (CSPM / CNAPP)

European cloud security (CSPM / CNAPP) vendors

A curated list of cybersecurity vendors headquartered in the European Union, in the Cloud security (CSPM / CNAPP) category. A sovereign alternative to foreign cloud posture and workload protection platforms.

3 vendors listed · last reviewed July 2026

Country BE FR SE
Size 11-50 201-500

Ghent-based all-in-one cloud and code security platform aimed at developer teams.

Certifications
ISO 27001 SOC 2 Type II

Karlskrona-based attack surface and risk-based vulnerability management.

Certifications
ISO 27001 PCI ASV

Paris-based external attack surface management and continuous security testing.

Certifications
ISO 27001

Browse other European cybersecurity categories

Frequently asked questions

Which European Cloud security (CSPM / CNAPP) vendors are listed in this directory?

CipherCue tracks 3 vendors headquartered in the European Union or EEA in the Cloud security (CSPM / CNAPP) category. Listings are editorial; inclusion criteria, ownership, and certification details are visible on each card.

Why choose an EU-headquartered Cloud security (CSPM / CNAPP) vendor over foreign cloud posture and workload protection platforms?

EU-headquartered vendors keep customer data inside the European Union by default, sit fully under GDPR jurisdiction, and align procurement with NIS2 and DORA sovereignty expectations. Replacing foreign cloud posture and workload protection platforms also reduces exposure to extra-territorial data requests under non-EU legal regimes such as the US CLOUD Act.

In which countries are these Cloud security (CSPM / CNAPP) vendors headquartered?

The Cloud security (CSPM / CNAPP) vendors in this directory are headquartered in Belgium, France, and Sweden. Use the country filter at the top of the page to narrow the list to a specific jurisdiction.

Missing a vendor?

If you run or know an EU-headquartered Cloud security (CSPM / CNAPP) vendor that should be here, email hello@ciphercue.com with the name and HQ country.

Listings are editorial and not a recommendation. Inclusion, amendment, and removal are at CipherCue's discretion. See our directory listing terms.

← Back to all European cybersecurity vendors