CSPM Limits
Validated on 31 Mar 2026 • Last edited on 31 Mar 2026
Cloud Security Posture Management (CSPM) evaluates your DigitalOcean resources for misconfigurations and security risks, surfaces findings by severity, and provides guidance to help you resolve them.
CSPM has the following limitations:
- Only supported workloads (Droplets and managed databases) can be evaluated.
- Only workloads with coverage enabled are included in scans.
- All scans must be started manually. CSPM does not run automatic or scheduled scans.
- Findings reflect the state of resources at the time of the most recent scan.