Here you'll find customer-facing examples of cloud issues that CNAPPs (and next-gen AINAPPs) typically detect, surface, and show in dashboards, alerts or risk graphs. These are the kinds of findings customers actually see, prioritize and act on.
CNAPP/AINAPP issues shown to customers include: misconfigurations, identity risks, vulnerabilities, exposed applications, supply chain weaknesses, compliance gaps, runtime threats, attack paths, orphaned assets, and unresolved remediation actions — all prioritized by risk and business impact.
A basic understanding of our glossary, compliance frameworks, job roles and unified cloud security categories is required.
Cloud Issues Landscape
1. Cloud Infrastructure & Configuration Issues (CSPM-style)
Examples shown to customers:
- Publicly exposed storage bucket (S3 / Blob / GCS)
- Security group allows
0.0.0.0/0on SSH or RDP - IAM role with excessive permissions (
AdministratorAccess) - Unencrypted database or disk volume
- Disabled cloud logging (CloudTrail / Activity Logs)
- Unused but still active cloud credentials
How it’s shown:
“High-risk misconfiguration: Internet-exposed database with sensitive data”
2. Identity & Access Issues (CIEM / IAM)
Examples:
- Over-privileged IAM users or service accounts
- Stale users not used in 90+ days
- Long-lived access keys without rotation
- Service-to-service identities with wildcard permissions
- Cross-account trust misconfigurations
AINAPP enhancement:
“AI agent recommends permission right-sizing based on observed usage”
3. Vulnerabilities in Workloads & Images (CWPP)
Examples:
- Critical CVE in container image used in production
- Vulnerable base image (
alpine,ubuntu) with known exploits - Kernel vulnerability on cloud VM
- Outdated runtime libraries in serverless functions
How customers see it:
- CVE ID + severity
- Exploitability
- Runtime exposure (is it reachable?)
4. Kubernetes & Container Security Issues
Examples:
- Pod running as root
- Privileged containers
- Missing network policies
- Insecure admission controller configuration
- Secrets stored in plaintext Kubernetes manifests
Shown as:
“Kubernetes workload violates runtime hardening policy”
5. Application & API Exposure Issues
Examples:
- Public-facing API without authentication
- API endpoint exposed but unused (shadow API)
- Application reachable from the internet with known vulnerabilities
- No WAF protection on internet-facing app
AINAPP angle:
“Agent detected unused exposed endpoint and recommends removal”
6. Secrets & Sensitive Data Issues
Examples:
- Hardcoded secrets in source code
- Secrets committed to Git repositories
- API keys stored in plaintext environment variables
- Secrets reused across environments (dev → prod)
Customer-facing message:
“Credential exposure detected in CI pipeline”
7. Software Supply Chain Issues
Examples:
- Vulnerable third-party dependency
- Untrusted container registry source
- Unsigned container images
- Build pipeline with excessive permissions
- Missing SLSA / SBOM artifacts
Shown as:
“Supply chain risk: Unverified dependency in production workload”
8. Compliance & Governance Issues
Examples:
- PCI-DSS non-compliant storage
- SOC 2 control failure (logging, access control)
- HIPAA workload without encryption
- Policy drift from approved baseline
How customers see it:
- Control failed
- Affected assets
- Audit-ready evidence
9. Runtime Threat & Behavior Issues
Examples:
- Unexpected outbound network connections
- Container spawning a shell
- Cryptocurrency mining activity
- Privilege escalation attempts
- Suspicious process execution
AINAPP enhancement:
“Autonomous agent isolated workload and opened remediation ticket”
10. Attack Path & Risk Graph Issues (Crown Jewels)
Examples:
- Attack path from public workload → IAM role → sensitive database
- Lateral movement risk across cloud accounts
- Internet → vulnerable app → admin permissions chain
Customer-facing insight:
“This misconfiguration enables full environment compromise in 3 steps”
11. Inventory & Ownership Issues (Very Common)
Examples:
- Orphaned cloud assets with no owner
- Workloads not tied to a business service
- Unknown internet-facing resources
- Zombie environments still running
Shown as:
“Unowned asset with high exposure risk”
12. Remediation & Process Issues (Operational)
Examples:
- Security issue open for 60+ days
- Repeated policy violations by same team
- Manual remediation required (no automation)
- No ticket created or owner assigned
AINAPP framing:
“Agent recommends automated fix and policy enforcement”
CNAPP vs AINAPP
CNAPP | AINAPP |
|---|---|
Static findings | Contextual, prioritized findings |
Alert-based | Goal-based (“reduce blast radius”) |
Human-driven remediation | Agent-assisted or autonomous remediation |
Asset-centric | Risk-path & intent-centric |
CNAPP/AINAPP issues shown to customers include:
misconfigurations, identity risks, vulnerabilities, exposed applications, supply chain weaknesses, compliance gaps, runtime threats, attack paths, orphaned assets, and unresolved remediation actions — all prioritized by risk and business impact.