Cloud Storage Security
Cloud Storage Security provides in-tenant malware scanning and AI-powered DSPM for cloud storage across AWS, Azure, and GCP, serving over 1,000 regulated-industry customers including healthcare, financial services, and government buyers through AWS Marketplace and direct enterprise sales.
- Company typePrivate
- Founded2020
- HeadquartersRochester, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Cloud Storage Security does
Cloud Storage Security (CSS) is a cloud-native cybersecurity SaaS company founded in 2020 that provides in-tenant malware scanning and AI-powered data security posture management (DSPM) for cloud object and file storage across AWS, Microsoft Azure, and Google Cloud Platform. The company's core architecture runs entirely inside the customer's cloud account using AWS-native serverless services (Fargate, SQS, CloudWatch, DynamoDB, Lambda), ensuring that file data never leaves the customer's environment during scanning — a structural differentiator versus SaaS-based competitors that require data egress. CSS's product portfolio spans Antivirus for Amazon S3 (its flagship, the #1 most subscribed container listing in AWS Marketplace), Antimalware for Azure Blob, API Antivirus Scanning, GenAI Secure for AI training data and output protection, and DataDefender DSPM for sensitive data classification and exposure management.
The technology stack combines multi-engine malware detection (including a Sophos OEM engine providing static and dynamic sandbox analysis for files up to 5TB) with Amazon Bedrock-powered AI features for natural-language RegEx classification rule generation and malware forensics. The company sells through a hybrid go-to-market: AWS Marketplace self-serve (free trial of 500 GB/30 days) for developers and SMBs, direct enterprise field sales for Tier 4 and Tier 5 accounts ($125,000/year to custom), and a growing channel partner network (320 Technologies, Kion, Thoropass, InfoScale) that bundles CSS into compliance-driven implementation, governance, and cyber recovery offerings. Pricing is tiered by organization size or AWS spend, with separate subscriptions for antivirus and DataDefender plus optional premium support plans (10–20% of contract).
CSS serves over 1,000 customers globally across healthcare, financial services, government/public sector, media, legal, and business management SaaS verticals, with named enterprise users including iPipeline, MYOB, ANDPAD, Poka, and ikeGPS. The company is privately held with no disclosed venture funding beyond approximately $850K in disclosed rounds, holds SOC 2 Type II certification, and maintains AWS Public Sector Partner status with Security Competency and ATO designations — credentials that enable regulated-industry sales motions but also reflect a bootstrapped, capital-efficient operating posture inconsistent with venture-backed hyper-growth patterns.
Cloud Storage Security firmographics
Firmographics- Name
- Cloud Storage Security
- Legal name
- Cloud Storage Security
- Website
- https://cloudstoragesecurity.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Cloud Storage Security provides in-tenant malware scanning and AI-powered DSPM for cloud storage across AWS, Azure, and GCP, serving over 1,000 regulated-industry customers including healthcare, financial services, and government buyers through AWS Marketplace and direct enterprise sales.
- Ownership category
- akta.pro rank
Cloud Storage Security industry classification
Industry- Product category
- Cloud Storage Security
- NAICS
- Software Publishers (5132)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Cloud Data Security (DSPM, Cloud DLP) (HDADADAJ)
- akta.pro secondary industries
- Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF), Cloud Security Services (Posture Mgmt, Workload Protection) (BPAKAHAK), Cloud Security (CSPM/CWPP/CIEM) for Health IT (HLACAJAG)
Keywords
Where Cloud Storage Security is headquartered
LocationHeadquarters
- HQ city
- Rochester
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Cloud Storage Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- DataDefender DSPM Subscriptions: Annual or monthly subscription licenses for DataDefender DSPM platform. Five tier-based pricing tiers based on organization size (employee count per LinkedIn). Unlimited scanning included at all tiers. Enterprise tiers (Tier 4, Tier 5) require direct sales engagement for custom quotes.
- Antivirus for Cloud Storage Subscriptions: Monthly subscription licenses for Antivirus products (Antivirus for Amazon S3, Azure Blob, API Scanning). Four tier-based pricing based on monthly AWS/Azure spend. Includes unlimited scanning with optional premium engine add-ons (+10% Sophos, +15% CSS Premium).
- Premium Support Subscriptions: Tiered paid support plans (Standard, Business, Enterprise) providing phone/video support, assisted product updates, quarterly health checks, and designated support engineers. Pricing is percentage-based on contract value or fixed annual fees.
- AWS Marketplace Transactions: Primary distribution through AWS Marketplace with consumption-based pricing for some tiers. AWS handles payment processing and billing through Marketplace infrastructure, with CSS as the seller.
- Professional Services: Professional services for initial deployments, training, licensing, cost optimization, and first access to upcoming features. Bundled discounts available with new product purchases.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | DataDefender Tier 1 — 1 to 200 employees |
| Subscription | Annual | DataDefender Tier 2 — 201 to 500 employees |
| Subscription | Annual | DataDefender Tier 3 — 501 to 5,000 employees |
| Subscription | Annual | DataDefender Tier 4 — 5,001 to 10,000 employees |
| Subscription | Multi-year contract | DataDefender Tier 5 — Enterprise (no employee limit) |
| Subscription | Monthly | Antivirus Tier 1 — 0–30 employees or $0–$35K AWS spend |
| Subscription | Monthly | Antivirus Tier 2 — 31–100 employees or $35K–$200K AWS spend |
| Subscription | Monthly | Antivirus Tier 3 — 101–1,000 employees or $200K–$1M AWS spend |
| Subscription | Monthly | Antivirus Tier 4 — 1,001+ employees or >$1M AWS spend |
| Subscription | Annual | Standard Support Plan |
| Subscription | Annual | Business Support Plan |
| Subscription | Annual | Enterprise Support Plan |
| Freemium | Pay-as-you-go | AWS Marketplace Free Trial |
Go-to-market motion4 records
Distribution channels7 records
Marketing channels7 records
Cloud Storage Security product offering
Product offeringCore offering
Cloud Storage Security builds a cloud-native, serverless cybersecurity platform that performs in-tenant malware scanning, sensitive data classification, and Data Security Posture Management (DSPM) for files stored in Amazon S3, Azure Blob, GCP, and connected data pipelines. Its core products — DataDefender DSPM, Antivirus for Amazon S3, Antimalware for Azure Blob, API Antivirus Scanning, and GenAI Secure — are sold as annual and monthly subscriptions, deployed inside the customer's own cloud account, and targeted at regulated enterprises in healthcare, financial services, government, and other compliance-driven industries.
Differentiator
Problem solved
Functional benefit
Brands
- DataDefender: AI-powered Data Security Posture Management (DSPM) platform offering data classification, real-time monitoring, and protection for cloud storage environments.
- Antivirus for Amazon S3
- API Antivirus Scanning
- GenAI Secure
- Casmer Labs
Products and services
- DataDefender DSPM
- Antivirus for Amazon S3
- Antimalware for Azure Blob
- API Antivirus Scanning
- GenAI Secure
Quantifiable outcome
- 9 out of 10 enterprise customers and all public sector customers choose Sophos engine, demonstrating high trust and satisfaction with the multi-engine scanning approach.
- +9 more outcomes
Companies that use Cloud Storage Security
Customer profileNamed customers7 records
Segments7 records
Ideal customer profiles5 records
Cloud Storage Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability7 records
Feature9 records
Cloud Storage Security partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered flagship and core.
- InfoScaleflagshipStrategic partnership announced April 16, 2026 combining CSS's malware detection with InfoScale's Data Defense platform. Delivers inline, off-host malware scanning on immutable file system checkpoints, enabling organizations to verify data integrity before restoration and reduce reinfection risk. Aims to shift enterprise cyber recovery from reactive to continuous resilience.
- ThoropasscorePartnership announced May 30, 2024. Newly formed alliance delivers data security and automates monitoring to accelerate compliance. Thoropass provides automated compliance program management and CSS provides the underlying data security scanning, enabling faster SOC 2, ISO 27001, and similar certification workflows.
- 320 TechnologiescorePartnership announced April 12, 2024. 320 Technologies is an AWS Services delivery partner building secure, regulatory-compliant AWS landing zones. They integrate CSS's malware scanning and data classification into deployments targeting HIPAA, SOC2, PCI, FedRAMP, StateRAMP, and GovCloud environments. Deployed SOC2-compliant AWS landing zone for a US public sector customer with 15-minute CSS installation.
- KionflagshipPartnership announced November 10, 2023 integrating CSS data discovery and antivirus protection with Kion's multi-cloud governance platform. Combines data plane and control plane governance for data privacy and security by default in AWS. Kion customers can enroll accounts into CSS protection automatically from Kion's console. CSS scan results are submitted to Kion for a single compliance view.
- Amazon Web Services (AWS)flagshipAWS APN Technology Partner and AWS Public Sector Partner with AWS Security Competency, AWS Qualified Software offering, and AWS Authority To Operate designation. CSS products are deployed natively within AWS customer accounts using AWS Fargate, SQS, CloudWatch, DynamoDB, Lambda, SNS, and Security Hub. Deep integrations include AWS Control Tower Account Factory Customization, AWS Transfer Family, and AWS GovCloud regions.
- SophoscoreOEM partnership providing CSS customers with Sophos' enterprise anti-malware engine (award-winning AV technology, 4+ daily vendor updates, up to 5TB file scanning, static and dynamic analysis via SophosLabs Intelix). 9 out of 10 enterprise customers and all public sector customers choose Sophos. Requires specific OEM authorization that cannot be replicated by competitors.
Scale indicators9 records
Recent moves6 records
Expansion highlights7 records
Cloud Storage Security competitors and assessment
Company assessmentDirect peers
- Wiz: Cloud security platform with a strong DSPM module that scans cloud storage for data exposure, misconfigurations, and sensitive data. Directly comparable to CSS's DataDefender DSPM and overall cloud-storage security positioning, though Wiz bundles a broader CNAPP.
- Orca Security: Agentless cloud security platform with DSPM capabilities covering AWS S3, Azure Blob, and GCP storage for sensitive data discovery and exposure management. Directly comparable to CSS's DataDefender in DSPM and to broader cloud-storage security.
- Lacework: CNAPP offering anomaly detection, compliance monitoring, and data protection across AWS, Azure, and GCP. Comparable to CSS as a cloud-native security platform with storage-layer visibility, though positioned more broadly.
- Cyera: DSPM specialist focused on discovering, classifying, and securing sensitive data across cloud storage and SaaS environments. Most direct overlap with CSS's DataDefender DSPM product line.
- Sentra: DSPM vendor that classifies and monitors sensitive data across cloud storage (S3, Blob, GCS) with prioritization of exposure risks. Closely comparable to CSS DataDefender in function and target buyer.
- Aqua Security: Cloud-native application protection platform with malware scanning for cloud storage and workloads. Overlaps with CSS's antivirus-for-storage and DSPM positioning, particularly for AWS-native deployments.
Broad incumbents
- Palo Alto Networks (Prisma Cloud): Broad CNAPP offering DSPM, CSPM, CWPP, and CIEM from Palo Alto Networks. Comparable as a competitor in cloud-storage security and DSPM, but operates as a much larger multi-product portfolio rather than a storage-specialist.
- CrowdStrike (Falcon Cloud Security): Endpoint-adjacent cloud security platform with DSPM, CNAPP, and workload protection. Competes with CSS across cloud storage protection and DSPM, but as part of a broader Falcon platform.
- Trend Micro (Cloud One): Hybrid cloud security platform with file-storage malware scanning and workload protection. Overlaps with CSS's antivirus-for-storage functionality, but bundled into a broader cloud security suite.
Others
- Sophos: CSS's OEM anti-malware engine partner that also sells its own cloud workload and server protection products. Comparable through the shared detection engine used by 9 of 10 CSS enterprise customers, and as an adjacent rather than directly competing vendor in cloud-storage security.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Cloud Storage Security social profiles
Digital presenceCloud Storage Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cloud Storage Security leadership team
Management profileNumber of profiles
Profiles6 records
Cloud Storage Security funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cloud Storage Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cloud Storage Security
What does Cloud Storage Security do?
Cloud Storage Security builds a cloud-native, serverless cybersecurity platform that performs in-tenant malware scanning, sensitive data classification, and Data Security Posture Management (DSPM) for files stored in Amazon S3, Azure Blob, GCP, and connected data pipelines. Its core products — DataDefender DSPM, Antivirus for Amazon S3, Antimalware for Azure Blob, API Antivirus Scanning, and GenAI Secure — are sold as annual and monthly subscriptions, deployed inside the customer's own cloud account, and targeted at regulated enterprises in healthcare, financial services, government, and other compliance-driven industries.
Is Cloud Storage Security a public or private company?
Cloud Storage Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Cloud Storage Security founded?
Cloud Storage Security was founded in 2020. It employs 1 to 10 people.
Where is Cloud Storage Security based?
Cloud Storage Security is headquartered in Rochester, United States, in the North America region.
How does Cloud Storage Security make money?
Five revenue lines are on record. DataDefender DSPM Subscriptions are the primary driver. The others are antivirus for Cloud Storage Subscriptions, premium Support Subscriptions, AWS Marketplace Transactions and professional Services.
Who are Cloud Storage Security's main competitors?
Direct peers on record are Wiz, Orca Security, Lacework, Cyera, Sentra and Aqua Security. Broad incumbents are Palo Alto Networks (Prisma Cloud), CrowdStrike (Falcon Cloud Security) and Trend Micro (Cloud One). Sophos is listed as an others.
Does Cloud Storage Security have an API?
Yes. API-based commercial malware scanning offering for cloud environments. Allows teams to programmatically scan files for malware, control scanning operations, and integrate scanning into data ingestion workflows. Available as a product tier enabling programmatic control, scale, and confidence at ingestion. Supports scheduled, on-demand, and event-based scanning. Console settings reference API Agent Settings configuration. Deployment via AWS CloudFormation template or HashiCorp Terraform module.
What industry is Cloud Storage Security in?
Cloud Storage Security's product category is Cloud Storage Security. Its primary akta.pro industry code is HDADADAJ, Cloud Data Security (DSPM, Cloud DLP), with a secondary code of HDABAHAK, Data Security & Privacy for Cloud (DLP, DSPM, Tokenization). Its NAICS code is 5132 and its SIC code is 7370.