Uptycs

Overview

Uptycs is a cloud and endpoint security platform from Waltham, Massachusetts, privately held and led by founder and CEO Ganesh Pai. In 2026 it markets itself as an "AI-Enabled CNAPP," with the Juno AI analyst layered over a telemetry platform that grew out of osquery. The Uptycs site lists CWPP, CSPM, vulnerability management, container and Kubernetes security, cloud detection and response, DSPM, XDR, file integrity monitoring, and osquery fleet management. Cloud infrastructure entitlement management (CIEM) is one module inside the CNAPP, not a separate product line.

What it is good at

One data model from laptop to cloud runtime. The same telemetry pipeline covers endpoints, on-premises servers, containers, and cloud accounts, which lets a team ask a single question across all of them, for example which hosts running a vulnerable package also hold a role that can reach production data. Uptycs says the platform scales to "millions of servers per tenant."

The CIEM module analyzes cloud IAM policies and scores identity risk on credential rotation, potential privilege escalation, and credential exposure. It draws a graph of resources, identities, and policies, tracks access requests, and supports least privilege work by flagging the riskiest policies first. For teams that already run osquery or want SQL-style threat hunting, that entitlement context arrives in a familiar query model.

Where it falls short

CIEM depth is modest next to dedicated tools. The product page does not document just-in-time access, usage-based policy right-sizing, or which cloud providers the CIEM module covers (the site lists AWS, Azure, Google Cloud, and IBM Cloud as environments), so confirm coverage in a trial. There is no access-review or request workflow of the kind an IGA tool provides. The platform is broad, so expect a larger evaluation than a point CIEM, and the Juno AI analyst is a separately priced add-on.

Pricing

Partly published. As of 2026-11-05 the Uptycs pricing page lists three packages billed annually: Discover from 3 dollars per workload per month (5 dollars per cloud workload), Audit from 6 dollars (10 dollars per cloud workload), and Secure on request. A license unit covers one workload of up to 8 processing cores, and the minimum order is 12,000 dollars per year. The page lists "Cloud Identity Entitlements" in its feature table, but the extracted table did not show which package includes it, so confirm the tier before you budget.

Best for, and who should look elsewhere

Choose Uptycs if you want endpoint, server, container, and cloud telemetry in one queryable platform, with entitlement risk as one input among many. If entitlement governance is the main problem, Sonrai Security and Britive go deeper. For an agentless-first CNAPP, compare Orca Security and Wiz; for runtime-first, Sysdig. The CIEM primer and best CIEM for multi-cloud ranking give the wider view.

Bottom line

Uptycs suits security teams that want one telemetry model across endpoints and cloud and can live with CIEM as a supporting module rather than the main event.