What is CSPM?

Last updated: Oct 21, 2026

---

Cloud security posture management (CSPM) is a security technique that detects misconfigurations and policy violations in cloud infrastructure.

Static application security testing examines the source code of an application. CSPM is different. It examines infrastructure as code (IaC) scripts, container images, and cloud environments and services. Thus, security teams can find configuration weaknesses before attackers exploit them. CSPM adds coverage of the cloud layer to the techniques that examine the code.

To learn more about the Fluid Attacks CSPM capabilities, see these resources in this documentation:

• Supported cloud environments: See the cloud providers that Fluid Attacks supports for CSPM scans.
• Security requirements verified with CSPM: Learn about the security requirements that Fluid Attacks uses for its CSPM scans. This page shows the weaknesses that the scans detect, their severity, and their CWE IDs.
• Use the scanners: Do CSPM and other techniques with the Fluid Attacks command-line interface (CLI) tools.
• Sign up: Start the free trial of CSPM and other Fluid Attacks automated techniques. Fluid Attacks configures the scanner for you. The scanner monitors your cloud security continuously while you develop. Fluid Attacks gives you reports, analytics, and remediation suggestions on its platform.