Datadog Cloud Security Identity Risks review
A paid, AWS-oriented identity-risk product with cross-cloud scanning and Terraform remediation.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Datadog Cloud Security Identity Risks helps security and DevOps teams find and reduce cloud identity risk across AWS, Azure, and GCP. It continuously scans for excessive administrative privileges, permission gaps, privilege-escalation paths, large blast radii, and cross-account access. The product is delivered through Datadog Cloud Security Management and is available through web and API interfaces, making it a fit for teams that want identity-risk findings connected to wider Datadog security and observability capabilities.
Pricing is organized by host and billing frequency. CSM Pro costs $10 per host per month with annual billing or $12 per host per month with monthly billing. Pro includes Cloud Infrastructure Entitlement Management, continuous cloud infrastructure scanning, case management, and workflow-based remediation. CSM Enterprise costs $25 per host per month annually or $30 per host per month monthly. It includes everything in Pro, plus file integrity monitoring and Workload Protection. A 14-day trial is available for the Datadog product suite, while the product itself is paid rather than free.
Its strongest technical depth is access analysis paired with remediation. Access Insights maps direct and indirect access paths, while suggested downsized IAM policies help teams reduce permissions. AWS IAM Access Analyzer integration adds an AWS-specific analysis path, and Terraform remediation can create GitHub pull requests for infrastructure-as-code workflows. Jira, GitHub, Terraform, AWS, Azure, and GCP integrations support operational handoffs across cloud and engineering teams. Choose it when continuous identity-risk monitoring and automated remediation matter, particularly in AWS-led environments. Teams seeking account-based pricing, a standalone free tier, or Enterprise protections at Pro pricing should consider alternatives.
Datadog Cloud Security Identity Risks pros and cons
- Where it wins
- Continuously detects excessive privileges and privilege-escalation paths
- Analyzes direct, indirect, cross-account, and permission-gap access
- Automates remediation through workflows and Terraform pull requests
- Where it doesn't
- No product-specific free plan
- Pricing is calculated per host rather than per cloud account
- Workload Protection and file integrity monitoring require Enterprise
Datadog Cloud Security Identity Risks fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update