--- title: "The state of cloud-native security 2022 – Tigera’s new market report" source: "https://www.tigera.io/blog/the-state-of-cloud-native-security-2022-tigeras-new-market-report/" description: "This market report provides insights and recommendations to guide your organization’s cloud-native security journey." --- [Featured Blog](https://www.tigera.io/category/featured-blog/) [Company Blog](https://www.tigera.io/category/company-blog/) [Technical Blog](https://www.tigera.io/category/technical-blog/) # The state of cloud-native security 2022 – Tigera’s new market report By [Laura Ferguson](https://www.tigera.io/blog/author/laura-ferguson/) on May 03, 2022 • 2 min read We are excited to announce the publication of our first [*State of Cloud-Native Security*](https://link.tigera.io/uexy9) market report! The report compiles survey results from more than 300 security and IT professionals worldwide (all of whom have direct container responsibilities), and explores organizations’ needs and challenges when it comes to containers and cloud-native applications, specifically in the areas of security, observability, and compliance. ## Report highlights Our survey results showcase the rise in cloud-native development, while identifying barriers and areas where organizations need support on their cloud-native journey. Some of the report’s key findings include: - Cloud-native applications gain momentum but present security, compliance, and observability issues. - While our survey found that 75% of companies are focusing development on cloud-native applications, the increased development (and deployment) also creates the need for more advanced observability and security capabilities. - Containers require security solutions for runtime, access, and networking. - 98% of organizations need container security, with runtime security topping the list. - Cloud-native and container compliance requirements are driving delays and challenges. - 95% of organizations report they have compliance requirements for cloud-native applications, with 84% stating that meeting these compliance requirements is challenging. ## Why read the report? The report gives organizations a chance to benchmark themselves against the findings, and offers suggestions to improve their cloud-native strategy. ***[Download the full report](https://link.tigera.io/uexy9) for insights and recommendations to guide your organization’s cloud-native security journey***   **Related Guides:** - [Kubernetes Security: 8 Best Practices to Secure Your Cluster](https://www.tigera.io/learn/guides/kubernetes-security/) - [Kubernetes Networking: The Complete Guide](https://www.tigera.io/learn/guides/kubernetes-networking/) - [Microsegmentation Security: The Evolution of Cybersecurity in a Zero Trust World](https://www.tigera.io/learn/guides/microsegmentation/) **Related Products:** - [Calico Cloud](https://www.tigera.io/tigera-products/calico-commercial-editions/) - [Calico Enterprise](https://www.tigera.io/tigera-products/calico-commercial-editions/) [Best Practices](https://www.tigera.io/tags/best-practices/)[Announcements](https://www.tigera.io/tags/announcements/) ## Related posts [![From Merged PR to Governed Pod: Automating AI Agent Deployment on Kubernetes](https://www.tigera.io/app/uploads/2026/10/From-Merged-PR-to-Governed-Pod-featured.png)](https://www.tigera.io/blog/from-merged-pr-to-governed-pod-automating-ai-agent-deployment-on-kubernetes/) #### [From Merged PR to Governed Pod: Automating AI Agent Deployment on Kubernetes](https://www.tigera.io/blog/from-merged-pr-to-governed-pod-automating-ai-agent-deployment-on-kubernetes/) By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/) on Oct 13, 2026 In short, automating the AI agent lifecycle is this year’s pitch: Google Cloud’s walkthrough of 30th July 2026 turns the whole thing into a conversation with a coding agent. On Kubernetes the deploy half of... [Read more](https://www.tigera.io/blog/from-merged-pr-to-governed-pod-automating-ai-agent-deployment-on-kubernetes/) [![Gemini Never Left the Sandbox. The Sandbox Had a Door.](https://www.tigera.io/app/uploads/2026/10/gemini-featured.png)](https://www.tigera.io/blog/gemini-never-left-the-sandbox-the-sandbox-had-a-door/) #### [Gemini Never Left the Sandbox. The Sandbox Had a Door.](https://www.tigera.io/blog/gemini-never-left-the-sandbox-the-sandbox-had-a-door/) By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/) on Oct 7, 2026 In short, in May 2026 a Gemini model under evaluation by the AI security firm Irregular reached the systems of three real companies, and the incident has been reported as a breakout. By Google’s own... [Read more](https://www.tigera.io/blog/gemini-never-left-the-sandbox-the-sandbox-had-a-door/) [![EU Cyber Resilience Act: Europe Just Put Your AI Agents on a 24-Hour Clock](https://www.tigera.io/app/uploads/2026/10/EU-Cyber-Resilience-Act-AI-Agents-featured.png)](https://www.tigera.io/blog/eu-cyber-resilience-act-europe-just-put-your-ai-agents-on-a-24-hour-clock/) #### [EU Cyber Resilience Act: Europe Just Put Your AI Agents on a 24-Hour Clock](https://www.tigera.io/blog/eu-cyber-resilience-act-europe-just-put-your-ai-agents-on-a-24-hour-clock/) By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/) on Oct 5, 2026 In short, the EU Cyber Resilience Act (CRA) puts binding cybersecurity requirements on any software sold as a product in the EU, and it does not carve out AI agents. Since 11th September 2026, any... [Read more](https://www.tigera.io/blog/eu-cyber-resilience-act-europe-just-put-your-ai-agents-on-a-24-hour-clock/)