u/Ano--05007

We’re building a lower-cost multi-cloud CSPM for smaller teams, and I want to validate what people actually struggle with most.

Current version supports AWS/Azure/GCP + Terraform scanning, findings, attack paths, remediation, reporting, Jira/notifications, and custom policies.

I’m mainly trying to learn:

What do existing CSPM tools do badly?

What features are genuinely useful vs just noise?

What would make a cheaper tool worth using?

Honest feedback welcome, even if the answer is “this is a bad idea.”