What CloudQuery is
CloudQuery is a great open source tool to check your cloud environment for compliance issues. You can also use it to build compliance automation in house. The vendor site is www.cloudquery.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What CloudQuery covers
CloudQuery is in the catalog for these capabilities. Categories: Asset Management and CSPM. Catalog tags: Hands-on, Nerdy, Open Source, Best for MidMarket, Best for Enterprise, and Best for Startups.
How to evaluate CloudQuery in a security program
Use CloudQuery as a stack candidate, not as diligence evidence. The oneNorma score for CloudQuery is 6.5/10 (percentile 94). If the real gap is in Asset Management and CSPM, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.cloudquery.io publishes. Contrast it with pentesting and Security Cloud & Compliance.