Wallarm Infrastructure Discovery Named Enterprise Cloud Security Solution of the Year.

Ask an AWS security team how many accounts they run, and the honest answer is usually a range. Enterprises on AWS operate anywhere from 100 to 5,000 accounts. Most security teams can see only a fraction of them.

That gap is why we built Wallarm Infrastructure Discovery. This week, it was named Enterprise Cloud Security Solution of the Year in the 10th annual CyberSecurity Breakthrough Awards. Here's what it does, and why the judges picked it.

You can't secure what you can't see

Cloud estates grow faster than the spreadsheets that track them. Accounts get spun up outside the official inventory. Vulnerable workloads sit in regions nobody thinks to check. Services go live without anyone approving them.

AWS Security Hub catches a lot of this, but its findings rarely arrive with enough context to act on. Teams see an alert and still have to work out which asset it touches, whether it's reachable from the internet, and who changed what. That investigation is where response time goes.

A live map of your entire AWS estate

Infrastructure Discovery gives you a continuously updated inventory of everything you run in AWS, across up to 5,000 accounts. It's agentless: it connects through a read-only IAM role, so there's nothing to deploy and nothing that can change your environment.

Once connected, it inventories every registered account and region, including:

• Compute: EC2, EKS and Lambda
• Network: VPCs and load balancers
• APIs: API Gateway and the endpoints behind it
• Identity: IAM roles, users and policies

From that inventory, Discovery builds a live relationship graph of how your assets connect. Every scan is compared against the last one, so field-level drift surfaces automatically, with CloudTrail attribution showing who made each change. Discovered endpoints can be connected to Wallarm protection in under an hour.

Built for decisions, not finding volume

More alerts don't make teams safer. Knowing which ones matter does. Infrastructure Discovery adds that context in three ways:

• Findings on the right asset. Security Hub findings are pinned to the exact resource they affect and rewritten in plain language.
• Attack paths, traced. Discovery follows the route from internet gateways through security groups to the workload behind them, so you can see what's actually exposed.
• CVE response in minutes. When a new CVE drops, your team gets the exposed surface immediately, instead of grepping through templates to find it.

"Our solution isn't optimized for volume of findings; we optimize for decisions, surfacing the assets and attack paths that change what a team does next." — Shayne Higdon, CEO, Wallarm

What the judges saw

The CyberSecurity Breakthrough Awards marked their 10th year in 2026, drawing thousands of nominations from organizations in more than 20 countries. Infrastructure Discovery took the Enterprise Cloud Security Solution of the Year category.

"Wallarm lets you see your AWS the way attackers already do. … Wallarm Infrastructure Discovery makes complete, read-only visibility into cloud posture something a team can stand up in minutes, then turns raw inventory into a prioritized picture of what an attacker would actually exploit." — Steve Johansson, Managing Director, CyberSecurity Breakthrough

We're grateful for the recognition, and to the customers whose feedback shaped the product.

See your AWS estate the way attackers do

Infrastructure Discovery is part of the Wallarm AI Control Platform, which protects every AI workload, API and application in production. Discovery tells you what you're running; the rest of the platform protects it.

If you're responsible for an AWS estate you can't fully see, start with the inventory.

See Infrastructure Discovery in action and try it for free →

Not ready? Take a tour →