Sweet Security
Israeli runtime CNAPP that validates attack paths and acts on live workload behaviour
Quick Overview
| Company | Sweet Security Ltd. |
|---|---|
| Category | Cloud Security Platforms (CNAPP) |
| Headquarters | Israel, Israel |
| Founded | Not stated |
| EU Presence | Yes - Israel |
| Data Location | United States, EU and Israel (per privacy policy) |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Runtime CNAPP, cloud application detection and response, CSPM, identity threat detection, vulnerability management, API security, AI security |
| Pricing | Pricing on request |
| Best For | Cloud teams that want runtime evidence behind each posture finding |
| Replaces | Wiz, Orca, Lacework |
Detailed Review
Sweet positions its product as a runtime CNAPP: the platform observes live behaviour first and uses it to decide which posture and vulnerability findings matter.
The website terms and privacy policy name Sweet Security Ltd., and the privacy policy says visitor data is stored in the United States, the European Union and Israel.
Findings sorted by what runs
The use-case list on the site includes cloud application detection and response, vulnerability management, CSPM, identity threat detection and API security under one console.
A customer quote on the home page credits an eBPF-based approach for staying light enough to deploy without performance concerns.
Attack paths tested in the environment
Sweet describes a loop of attacking the environment, fixing the gaps and defending, and quotes customers who say it found exploitable paths that earlier penetration tests missed.
These are testimonials and vendor statements, not independent benchmarks.
Cover for AI agents
The platform adds an AI security module that traces an agent's actions and can enforce guardrails inline, which the site gives as under 100 ms.
For organisations running autonomous agents on cloud infrastructure, this widens the scope beyond classic workloads.
Limitations to Consider
There is no public pricing page, and the legal pages we found date from September 2024, so check the current customer agreement. The product centres on runtime sensors, which means deployment effort. Independent test results were not found on the vendor's own site.
Who Should Use Sweet Security
Cloud security teams drowning in posture alerts who want runtime proof before they open tickets.
Pros and Cons
Pros
- Runtime context behind findings
- Cloud and AI agent security in one console
- Israeli contracting entity named in legal pages
- API security and identity threat detection included
- Customer references named on the site
Cons
- No public pricing
- Sensor deployment required
- Legal pages dated 2024
- Accuracy figures are vendor claims
Alternatives to Sweet Security
Other European cloud security platforms (cnapp) worth comparing before you decide:
Aikido Security
Belgium · Ghent platform that joins code, container and cloud posture checks
ARMO
Israel · Runtime-driven Kubernetes and cloud security built on Kubescape
Orca Security
Israel · Agentless SideScanning CNAPP from Tel Aviv across six clouds
Aqua Security
Israel · Agent-based runtime enforcement for containers, serverless and VMs
See all European cloud security platforms (cnapp) or compare them directly against Wiz on our alternatives page.
Frequently Asked Questions
It is described as runtime-first, and a customer quote on the site refers to an eBPF-based approach, so expect a sensor on the workloads.
Its website privacy policy says visitor data is stored in the United States, the European Union and Israel. Customer data handling is a contract question.
Yes, the site lists AI security and agent protection as part of the platform.