The CNAPP Inversion.
The acronym is collapsing. The full term is exploding. Every named vendor's brand search is contracting. And one vendor still pulling real demand has zero AI citations across four engines — the most-exposed quadrant in the new measurement frame.
Three things happening at once.
| Term | 12-mo searches | YoY |
|---|---|---|
cnapp (acronym) | 38,800 | −45% |
cloud native application protection platform | 17,980 | +269% |
| sysdig | 35,000 | −14% |
| orca security | 26,200 | −48% |
| prisma cloud | 19,700 | −53% |
| aqua security | 13,820 | −32% |
| wiz cloud security | 10,480 | −51% |
Four engines cite the same canonical three.
| Vendor | Engines citing | Read |
|---|---|---|
| Wiz | 4 / 4 | Universal |
| Orca Security | 4 / 4 | Universal |
| Prisma Cloud (now Cortex Cloud) | 4 / 4 | Universal |
| Microsoft Defender for Cloud | 3 / 4 | Strong |
| CrowdStrike Falcon Cloud Security | 3 / 4 | Strong |
| Sysdig · SentinelOne · AccuKnox | 2 / 4 | Mid-tier |
| Qualys · Lacework · Check Point CloudGuard · Datadog · Aikido | 1 / 4 | Single-engine |
| Aqua Security | 0 / 4 | ⚠ Not cited |
What the numbers say.
Finding 1 · Category-term inversion.
The acronym is down 45% year-over-year. The full term — cloud-native application protection platform — is up 269%. Buyers are getting more specific in their queries. The likeliest cause: AI-mediated discovery. LLMs surface canonical full terms and train the public to type them that way. The shorthand the category was sold on is being unsold by the engines.
Finding 2 · Universal brand-search contraction.
Every CNAPP leader's brand search is down 30 to 53% year-over-year. Orca down 48%. Prisma Cloud down 53%. Wiz down 51%. Aqua down 32%. Categories don't usually contract this fast at the vendor-search level. Two likely causes: AI search displacing vendor-specific Google queries — buyers ask Perplexity instead of typing the name — and the Wiz acquisition uncertainty bleeding across the category.
Finding 3 · The Aqua Quadrant.
Aqua Security has 13,820 brand searches per year. Real demand — still on the boards. None of the four AI engines cite them when asked about CNAPP. Zero of four. Search-visible, citation-invisible.
That is the most exposed quadrant in the new frame. Buyers still know the name. AI engines no longer recommend it. Brand-search demand will catch down to AI-citation reality within two to four quarters. The brand has a margin of safety that the citation graph already withdrew.
The vendors who survive the next phase are the ones who hold AI-citation universality even as brand search erodes. The ones who lose AI citation but keep brand search are the most exposed.
The quadrant, named.
The first piece in this series argued that AI citation is becoming the leading demand signal — the Expel Pattern. This piece adds the other corner of the frame.
Four quadrants, two axes:
- High brand search · high AI citation — stable. Both inventories agree. Wiz, Arctic Wolf live here.
- Low brand search · high AI citation — early or winning. Cited before the search box catches up. Expel.
- High brand search · low AI citation — most exposed. The Aqua Quadrant. Brand equity decaying on a delayed clock.
- Low brand search · low / zero AI citation — pre-traction or fading. Neither inventory carries the name.
The next piece — AI Security — adds a third complication to the frame: what happens to the citation graph when the cited vendors get acquired before the engines have a chance to forget them.