Mondoo CSPM

Mondoo CSPM is ranked #1 of 22 in cloud security posture management software on The Geeks Club. It runs on API, Linux, macOS, Web, Windows. There is a free plan.

Mondoo CSPM plans and pricing

All plans

Open Source Tools Free Free forever · Cloud, Kubernetes, OS, SaaS, and API scanning · Kubernetes operator · extensible provider system · asset inventory · open-source policies · base vulnerability management mondoo.com · 29 Sept 2026

Managed Service Not published Custom pricing · tailored to infrastructure size and needs · includes risk-based vulnerability management, security posture management, automated remediation, compliance and evidence collection, and expert support mondoo.com · 29 Sept 2026

Compared on cloud security posture management software

Free plan: Yes
Multi-cloud support: Yes
Cloud asset inventory: Yes
Compliance frameworks: SOC 2, PCI DSS, HIPAA, ISO 27001, GDPR, CIS Benchmarks, NIS2
IaC scanning: Yes
Identity risk analysis: Yes
Attack path analysis: Yes
Automated remediation: Yes

Best Mondoo CSPM alternatives

See all 12

8.7 Prowler Cloud Free plan

8.6 Qualys TotalCloud Free plan

8.2 Aikido CSPM Free plan

8.1 Cloudanix Free trial $3.49/mo

7.9 Cyscale CSPM Free trial $850/mo

7.3 Tenable One Cloud Security

Mondoo CSPM

CSPM purpose: Mondoo CSPM continuously scans cloud environments, prioritizes misconfigurations by exploitability and business exposure, and delivers fixes as reviewable code changes and pull requests.
Cloud coverage: CSPM covers AWS, Azure, and Google Cloud in one posture and remediation workflow.
Verification: Mondoo rechecks fixes and records evidence to keep posture and compliance information current.
Human approval: The CSPM page says users review and approve every agent-generated fix.
Compliance: The CSPM page lists CIS Benchmarks, PCI DSS, HIPAA, GDPR, SOC 2, ISO 27001, and NIS2 posture mappings.
Policy as code: Security and compliance rules can be version controlled and audited as policy code, then enforced across accounts and clouds.
Integrations: Mondoo lists 106 integrations, including AWS, Azure, Google Cloud, Kubernetes, Terraform, and GitHub Actions.
Third-party findings: The integrations page says Mondoo can import vulnerability or security findings from tools including Qualys, CrowdStrike Falcon, and Snyk.
Security certifications: Mondoo identifies SOC 2 Type II and ISO 27001 among its security and compliance credentials.
Open-source tools: Mondoo says its core tools, cnquery and cnspec, are open source and used by thousands of organizations.
Support offering: The Managed Service plan includes an expert Mondoo Vulnerability Management Success Manager.
Company history: Mondoo says it was founded in 2020 by DevOps and security experts who previously created Chef InSpec and DevSec.io and contributed to OpenStack.
Founded: 2020
Headquarters: Berlin, Germany
Price from: Free

Visit site Alternatives

Where it ranks on The Geeks Club

Best Cloud Security Posture Management Software in 2026#1 of 22
Best Cloud Vulnerability Scanners in 2026#4 of 21
Best Container Image Scanning Tools in 2026#7 of 17
Best Security Configuration Management Software in 2026#7 of 16
Best Exposure Management Software in 2026#6 of 16

Is Mondoo CSPM yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Mondoo CSPM

Sources

mondoo.com/solutions/cspm· checked 29 Sept 2026
mondoo.com/integrations· checked 29 Sept 2026
mondoo.com/about· checked 29 Sept 2026
mondoo.com/pricing· checked 29 Sept 2026