Join an enablement webinar session
Learn how Datadog Cloud SIEM and Cloud Security elevate your organization's threat detection and investigation for dynamic, cloud-scale environments.
Datadog Cloud Security delivers deep visibility, continuous configuration audits, identity risk assessments, vulnerability detection, and real-time threat detection across your entire cloud infrastructure—all in a unified platform for seamless collaboration and faster remediation.
Security and DevOps teams can act on the shared context of observability and security data to quickly prioritize and remediate issues.
Agentless Scanning is not available in the selected site ().
Cloud Security leverages both the Datadog Agent and Agentless. It includes a variety of features you can enable to manage different facets of your organization’s security:
- Misconfigurations: Tracks the security hygiene and compliance posture of your production environment, automates audit evidence collection, and enables you to remediate misconfigurations that leave your organization vulnerable to attacks.
- Identity Risks: Provides in-depth visibility into your organization’s AWS IAM, Azure, and GCP risks, and enables you to detect and resolve identity risks on an ongoing basis.
- Vulnerabilities: Continuously detect, prioritize, and remediate exploitable vulnerabilities in your container images, host images, and hosts running in your infrastructure.
Cloud Security also includes access to Datadog Security features, including:
Collecting events using Cloud Security affects your billing. For more information, see
Datadog Pricing.
Track your organization’s health
Manage homepage dashboards
You can customize the dashboards that you can access directly from the Cloud Security homepage, including setting a dashboard to your default homepage view. Use dashboards to prioritize remediation efforts, schedule reports, put security data next to observability and cost data, and embed apps and workflows you can start directly from your reporting view.
On the Cloud Security homepage, in the Dashboards section, you can jump directly to dashboards for Identity Risks, Misconfigurations, or Vulnerabilities. You can also add existing dashboards or create one to keep on your Cloud Security homepage sidebar for convenient access.
Additionally, you can click the More Options icon ![]()
to manage your pinned dashboards, including setting one as your Cloud Security homepage default view. Click Cloud Security in the Datadog nav bar or Summary in the Cloud Security nav bar to go directly to your pinned dashboard.
For more information, see Dashboards.
Track your security posture score
Available for Cloud Security Misconfigurations, the security posture score helps you track your organization’s overall health. The score represents the percentage of your environment that satisfies all of your active out-of-the-box cloud and infrastructure compliance rules.
Improve your organization’s score by remediating misconfigurations, either by resolving the underlying issue or by muting the misconfiguration.
For an overview of your Cloud Security and App and API Protection findings, sorted by importance, use the Security Inbox.
To get more detail, use Findings to review and remediate your organization’s security findings concerning misconfigurations, vulnerabilities, and identity risks. View detailed information about a finding, including guidelines and remediation steps. Send real-time notifications when a threat is detected in your environment, and use tags to identify the owner of an impacted resource.
Investigate resources
- Use the Security Graph to model your cloud environment as a relationship graph, so you can visualize and query the connections between your cloud resources. You can write queries to search for specific relationships between resources, such as publicly accessible EC2 instances that can access S3 buckets containing sensitive data, so you can proactively mitigate those infrastructure risks.
- Use the Resource Catalog to view specific misconfigurations and threats that have been reported on the hosts and resources in your environments. For more information, see the Resource Catalog documentation.
Resource Catalog is not supported for your selected
Datadog site (
).
- Use the Cloudcraft Security Map to visualize your resources and any misconfigurations, vulnerabilities, identity risks, or sensitive data associated with them. For more information on these overlays, see the Cloudcraft overlay documentation.
Subscribe to weekly digest reports
Receive a weekly summary of Cloud Security activity over the past week, including important new security issues discovered in the last seven days. Subscriptions to the weekly digest report are managed on a per user basis. To subscribe to the weekly digest report, you must have the security_monitoring_signals_read permission.
Learn about emerging threats and vulnerabilities
Use the Security Research Feed to stay current with the latest security developments, with content managed by Datadog’s Security Research and Detection Engineering teams. For more information, see the Security Research Feed documentation.
Next steps
To get started with Cloud Security, navigate to the Cloud Security Setup page in Datadog, which has detailed steps on how to set up and configure Cloud Security. For more information, see Setting Up Cloud Security.
Further reading
Additional helpful documentation, links, and articles:
to manage your pinned dashboards, including setting one as your Cloud Security homepage default view. Click Cloud Security in the Datadog nav bar or Summary in the Cloud Security nav bar to go directly to your pinned dashboard.
