At Wiz, our vision for cloud security has always been a unified, collaborative platform that empowers teams across the organization. That’s why we’re excited about the 2025 Gartner® Market Guide for Cloud-Native Application Protection Platforms. We feel The report reinforces the importance of a consolidated, developer-centric security solution.

This year’s Market Guide highlights two central trends:

• The essential role of CNAPP in bridging communication between development and security teams.

• The convergence of CNAPP and Application Security (AppSec).

Gartner notes, “By 2029, 40% of enterprises that successfully implement zero trust within cloud service provider environments will rely on the advanced visibility and control capabilities offered by CNAPP solutions.” This underscores how critical CNAPP will be for enabling modern security frameworks like zero trust.

The report also states, “By 2029, 50% of all enterprise applications are expected to operate in containers, necessitating enhanced and unified security controls for cloud and applications.” Together, these projections show why CNAPP is essential for modern enterprises — and why unifying application and cloud security has never been more urgent.

CNAPP and AppSec Offerings Are Converging

Historically, security teams relied on multiple, siloed tools to protect infrastructure, applications, and the software development lifecycle, creating fragmented views of risk and friction across teams. Gartner confirms that organizations are transforming their approach:

“CNAPP and application security offerings are increasingly converging. Organizations that predominantly or exclusively use cloud-native applications will, in the long term, rely on the same CNAPP tool both for CSPM and AST needs.”

This convergence is core to Wiz’s platform. A single, unified CNAPP makes it possible to connect the dots across every layer of a cloud-native application from code to cloud to runtime. Unified context and clear ownership reduces operational complexity and provides a clear view of what’s important to help teams prioritize root cause fixes for the most critical issues.

Bridging Communication Gaps Between Siloed Teams

The Market Guide, in our/my opinion,  emphasizes that cloud security requires collaboration among technical and non-technical stakeholders. A lack of cross-team communication often leads to inconsistent security practices and fragmented views of risk.

Gartner notes, “CNAPP bridges the communication gap of previously siloed development teams, security architecture teams and security operations teams with a consistent view of risk across the entire cloud environment(s) and application development ecosystem.”

At Wiz, we believe this connection is strongest when code, cloud, and runtime context are unified. By linking developers directly to their code and showing them the impact in cloud of their code changes, we empower them to implement fixes before that code is even deployed. Further, by mapping code context to critical cloud risks and layering in runtime context on what’s actually in use, teams are enabled to focus on accelerating remediation at the source for the highest-priority fixes.

Why CNAPP Architecture Matters

Not all CNAPPs are created equal — a well-architected, single-vendor CNAPP should integrate core capabilities into one platform and leverage a security graph to correlate findings across code, cloud, and runtime. This enables deeper context, faster investigation, and more precise prioritization.

Wiz’s unified security graph maps every resource, the pipeline that built it, the code repository it came from, the code and service ownership, the associated risks, and runtime usage data — across any public cloud, private cloud, and hybrid environment. All acquisitions are rebuilt directly into our core infrastructure, so customers benefit from one data model and UI without added complexity.

The Future of CNAPP Is Here

We’re proud to be recognized as a Representative Vendor in this year’s Market Guide. This recognition reflects our belief that a unified, collaborative, and developer-centric CNAPP is not just a technology trend, but a strategic necessity for secure and fast innovation in the cloud.

Gartner, Market Guide for Cloud-Native Application Protection Platforms, By Dale Koeppen, Esraa ElTahawy, Neil MacDonald, 5 August 2025

Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.