---
title: Cloud Security
description: Elastic Security for Cloud helps you improve your cloud security posture by comparing your cloud configuration to best practices, and scanning for vulnerabilities...
url: https://www.elastic.co/elastic/docs-builder/docs/4384/solutions/security/cloud
products:
  - Elastic Cloud Serverless
  - Elastic Documentation
  - Elastic Security
applies_to:
  - Serverless Security projects: Generally available
  - Elastic Stack: Generally available
---

# Cloud Security
Elastic Security for Cloud helps you improve your cloud security posture by comparing your cloud configuration to best practices, and scanning for vulnerabilities.
To set up these features, refer to [Set up cloud security](https://www.elastic.co/elastic/docs-builder/docs/4384/solutions/security/set-up/set-up-cloud-security).

## Cloud Security Posture Management (CSPM)

Discovers and evaluates the services in your cloud environment — like storage, compute, IAM, and more — against configuration security guidelines defined by the [Center for Internet Security](https://www.cisecurity.org/) (CIS) to help you identify and remediate risks that could undermine the confidentiality, integrity, and availability of your cloud data.
[Read the CSPM docs](https://www.elastic.co/elastic/docs-builder/docs/4384/solutions/security/cloud/cloud-security-posture-management).

## Kubernetes Security Posture Management (KSPM)

Allows you to identify configuration risks in the various components that make up your Kubernetes cluster. It does this by evaluating your Kubernetes clusters against secure configuration guidelines defined by the Center for Internet Security (CIS) and generating findings with step-by-step instructions for remediating potential security risks.
[Read the KSPM docs](https://www.elastic.co/elastic/docs-builder/docs/4384/solutions/security/cloud/kubernetes-security-posture-management).

## Cloud Asset Discovery

<applies-to>
  - Serverless Security projects: Preview
  - Elastic Stack: Preview since 9.1
</applies-to>

Creates an up-to-date, unified inventory of your cloud resources from AWS, GCP, and Azure. Once you connect your cloud accounts, this integration automatically finds and lists your cloud services and assets, such as:
- **AWS:** S3 buckets, EC2 instances, EKS clusters, and more.
- **GCP:** Cloud Storage buckets, Compute Engine instances, Kubernetes clusters, and more.
- **Azure:** Virtual Machines, Blob Storage, Azure Kubernetes Service (AKS), and more.

[Read the Cloud Asset Discovery docs](https://www.elastic.co/elastic/docs-builder/docs/4384/solutions/security/cloud/asset-disc).

## Cloud Native Vulnerability Management (CNVM)

Scans your cloud workloads for known vulnerabilities. When it finds a vulnerability, it supports your risk assessment by quickly providing information such as the vulnerability’s CVSS and severity, which software versions it affects, and whether a fix is available.
[Read the CNVM docs](https://www.elastic.co/elastic/docs-builder/docs/4384/solutions/security/cloud/cloud-native-vulnerability-management).

## Cloud workload protection

Runtime protection for Linux VMs and Kubernetes workloads detects and blocks threats while they happen, rather than assessing configuration. For details, refer to [Manage cloud workload protection](https://www.elastic.co/elastic/docs-builder/docs/4384/solutions/security/manage/manage-cloud-workload-protection).