Nova platform
Security platform evaluation
Start with the job each security platform category is built to do.
CNAPP, CSPM, SIEM, XDR, SOAR, and UEBA describe different parts of a modern security program. Nova does not rely on one of these labels alone. It is an AI-Native Autonomous Cloud Defense Platform that combines CNAPP cloud context with SecOps detection, prioritization, behavior analytics, threat intelligence, hunting, investigation, detection improvement, and governed response. Exact replacement or coexistence decisions depend on the data, retention, integrations, and controls required in your environment.
Bring the evidence, accountable owner, and required checkpoint into one reviewable brief.
EvidenceOwnerControl
Category names overlap, but the operating questions are different
A useful evaluation starts with the outcome your team needs, the sources that must be connected, the evidence that must remain available, and the actions that must stay controlled. Compare products against that operating requirement instead of assuming that two tools with a similar label provide the same coverage.
Security workflow
- Connect
- Contextualize
- Decide
CNAPP and CSPM
Understand cloud assets, configuration risk, exposure, and reachable impact.
CSPM focuses on cloud configuration and control posture. CNAPP brings several cloud-native security concerns into a broader platform view. Nova includes these cloud security capabilities and carries the resulting context into SOC prioritization, investigation, and response.
Review Nova CNAPP coverageExternal exposureReachable serviceObserved
Identity reachAccess relationshipEvidence checked
Protected resourcePotential impactPrioritize review
Evidence available
Coverage partial
Owner required
SIEM, XDR and UEBA
Search security activity, prioritize detections, and investigate behavior in context.
A SIEM centralizes security events for search, detection, and investigation. XDR connects detection and response across supported security domains. UEBA looks for behavior that differs from an established baseline. Nova provides event search, detection workflows, NovaSignal prioritization, Qyronis behavior analytics, threat context, and connected investigation while retaining source and coverage information.
Explore security operationsIncoming signals
Activity change
Cloud finding
Threat match
Context
EntityExposureThreatEvidence
Priority queue
Review firstReachable riskEvidence linked
InvestigateContext incomplete
MonitorLow-impact activity
SOAR and governed response
Coordinate repeatable response without separating action from evidence and approval.
SOAR platforms orchestrate workflows and response actions across connected tools. Nova DRX provides playbooks and supported response actions with access checks, policy controls, approvals, execution history, and reported outcomes. The available action set depends on each approved integration.
Explore governed response with DRXObserved sequence
Observed activityControl-plane change
Behavior changeOutside recent baseline
Related evidenceSource events
Assessment
KnownActor and action observed
UnknownBusiness intent
ConflictCoverage is incomplete
Evaluation framework
Compare platforms against your real security workflow.
01
Define the outcome
Choose the cloud risk, SOC, investigation, detection, or response outcome the evaluation must prove.
02
List the required evidence
Identify the cloud, identity, endpoint, SaaS, threat, ticketing, and response sources the workflow depends on.
03
Confirm operating boundaries
Review customer separation, access, retention, approvals, regional requirements, and response authority.
04
Run a representative case
Follow one realistic workflow from collection and prioritization through investigation and the supported next step.
05
Review proven coverage
Record what connected, what the team could verify, what remained unavailable, and which existing tools still serve a required role.
Security platform categories
Understand each category, then test the workflow that matters.
CNAPP
Cloud-native protection
Cloud assets, posture, exposure, data context, attack paths, workloads, and compliance evidence.
SIEMSecurity event analytics
Centralized event search, detection, alert investigation, retention, and reporting requirements.
XDRConnected detection and response
Detection and investigation across the supported cloud, identity, endpoint, and security sources.
SOARSecurity orchestration and response
Playbooks, approvals, supported actions, execution state, and reported outcomes across connected tools.
UEBABehavior analytics
Behavior baselines, anomalies, confidence, recent data sufficiency, and investigation context.
ACDPAutonomous cloud defense
Nova connects CNAPP cloud context to SecOps analysis, autonomous engines, detection improvement, and governed response.
FAQ
Questions about Nova Compared with CNAPP, SIEM, XDR and SOAR.
How does Nova relate to CNAPP, SIEM, XDR, SOAR, and UEBA?
These categories describe different security jobs. CNAPP addresses cloud-native security, SIEM centralizes security events and detections, XDR connects detection and response across supported domains, SOAR coordinates workflows and actions, and UEBA identifies behavior that differs from a baseline. Nova brings capabilities from these areas into an ACDP workflow. Whether it replaces or works alongside an existing tool depends on the required data, retention, integrations, and controls.
Is Nova a CNAPP?
Nova includes CNAPP capabilities for cloud asset inventory, Cloud Security Posture Management, external exposure, attack paths, cloud data context, supported code and workload checks, compliance evidence, and cloud threat detection. Nova is positioned as an ACDP because it carries that cloud context into SecOps prioritization, investigation, autonomous analysis, detection improvement, and governed response.
Is Nova a SIEM replacement?
Nova includes event search, detection, investigation and response workflows, and it can work with existing security systems. Whether it replaces any current tool depends on the required data sources, retention, workflows and controls in the customer environment.
Can Nova work with an existing security stack?
Yes, where the required connection is supported. Nova can connect cloud, identity, endpoint, software service, intelligence, ticketing and response systems. Hansec confirms the exact evidence, action and permission coverage for each environment.
Which cloud environments and security systems can Nova connect?
Nova has evaluated connections across AWS, Microsoft Azure, Google Cloud, Kubernetes and supported identity, endpoint, software service, intelligence, ticketing and response systems. The available evidence and action set varies by connection and is confirmed for each customer environment.
Is every Nova capability available in every deployment?
No. Available features depend on your subscription, enabled modules, connected systems, and user permissions. Hansec confirms what is included and any relevant regional limits before onboarding.
Evaluate Nova
See how Nova fits your cloud security workflow.
In a private briefing, we will map Nova to your stack, confirm what connects and focus the evaluation on the outcome your team cares about.