Which cloud security posture management tools are known for agentless scanning and multi-cloud support?

Several CSPM tools are well known for agentless scanning and multi-cloud support. Commonly cited options include:

• Wiz – Agentless, broad multi-cloud coverage (AWS, Azure, GCP, and more), strong risk prioritization.
• Orca Security – Agentless, multi-cloud, uses side-scanning/agentless visibility across cloud assets.
• Prisma Cloud (Palo Alto Networks) – Multi-cloud CSPM with agentless capabilities and broader CNAPP features.
• Lacework – Multi-cloud security platform with agentless options and cloud workload visibility.
• Check Point CloudGuard – CSPM for AWS/Azure/GCP with agentless posture and compliance scanning.
• Aqua Security – More CNAPP-focused, but supports agentless scanning and multi-cloud environments.
• Trend Micro Cloud One – Conformity – Agentless CSPM with support for multiple cloud providers.
• Microsoft Defender for Cloud – Multi-cloud support and agentless scanning for certain resources/workloads.
• Akamai Guardicore / InsightCloudSec (Rapid7) – Multi-cloud posture management with agentless discovery/scanning capabilities.
• Tenable Cloud Security – Multi-cloud CSPM with agentless assessment and risk management.

A few notes:

• “Agentless” can mean different things depending on the product: API-only posture checks, side-scanning, or agentless workload inspection.
• Many vendors now package CSPM inside broader CNAPP platforms, so the exact feature set can vary by cloud and workload type.

If you want, I can also give you a comparison table by cloud support, agentless method, and best fit (startup, enterprise, compliance-heavy, etc.).