How to Enable CSPM

Validated on 31 Mar 2026 • Last edited on 31 Mar 2026

Cloud Security Posture Management (CSPM) evaluates your DigitalOcean resources for misconfigurations and security risks, surfaces findings by severity, and provides guidance to help you resolve them.

To use Cloud Security Posture Management (CSPM), you need to enable the service from the Security section of the DigitalOcean Control Panel. CSPM is enabled at the team level, and you select a plan during setup.

Enable CSPM

  1. In the Control Panel, click Security in the left navigation.

    The Security page opens with the Cloud Security Posture Management (CSPM) tab selected.

  2. Click Enable CSPM.

  3. Choose a plan. The free plan evaluates standard resources. The basic plan adds workload evaluation (Droplets and managed databases), findings suppression, and Quick Fix.

  4. Confirm your selection.

After enabling CSPM, you can run your first scan to evaluate your environment.

Enable Workload Coverage

If you selected a paid plan, you can enable coverage for individual workloads such as Droplets and managed databases. Only workloads with coverage enabled are evaluated during scans and counted toward billing.

To enable coverage, navigate to the CSPM page in the Control Panel and add the workloads you want CSPM to evaluate.

Next Steps

Now that CSPM is enabled for your team and you have chosen a plan, you can evaluate your resources and review what CSPM finds. Run a scan to refresh your posture, then open individual issues to understand severity and remediation options.

We can't find any results for your search.

Try using different keywords or simplifying your search terms.