Security Tool Directory
Every security tool. One map.
The security market is noisy. We mapped it so you don't have to.
1,168 vendors
the pioneering GenAI bug bounty platform designed to safeguard the future of artificial intelligence
Agentless privileged access for every identity.
Led by seasoned security and technology executives, 1Password provides trusted access for people and AI agents. We unlock productivity by making security and privacy simple for every person and organization.
1stProtect is an AI runtime security platform that controls what autonomous AI agents are allowed to do.
360 Privacy was founded to reduce the critical gap between cybersecurity and real-world protection, securing personal data that puts high-profile people, families, and companies at risk.
3rdComply is an AI-assisted third-party risk management platform that reviews vendors from public evidence, security scanning, threat intelligence and dark web monitoring, and scores findings against the customer's own standards.
42Crunch is the API and MCP security governance company. We help enterprises secure every interface their applications and AI agents depend on, from REST and GraphQL APIs to the Model Context Protocol (MCP) servers that give agents access to business systems. Our approach is contract-first. A machine-readable contract defines what each API or MCP server is allowed to do, and every audit, scan and runtime decision is checked against it. The result is security that developers can act on early, and evidence that auditors can rely on later. API Security Platform Audit: scores OpenAPI and GraphQL contracts at design time, with fixes inside the developer's IDE. Scan: tests live APIs for OWASP API Top 10 vulnerabilities and contract drift. Protect: enforces the contract at runtime with a lightweight micro API firewall. Govern: Security Quality Gates in CI/CD hold every team to the same standard. MCP Security Governance AI agents now call tools on their own, and unregistered MCP servers create shadow paths around enterprise controls. 42Crunch extends the same Contract, Audit, Scan and Protect model to MCP: it discovers MCP servers, generates a contract for each, scores their posture, tests them for OWASP MCP Top 10 risks such as tool poisoning, rug pulls and excessive permissions, and blocks non-compliant servers in CI/CD. Compliance evidence built in Scoring is deterministic, not judged by an LLM, so the same server or API always gets the same result. Findings map to NIST AI RMF, OWASP MCP Top 10, the EU AI Act, ISO/IEC 42001 and the CSA AI Controls Matrix, and every decision produces a versioned record that exports for auditors, regulators and customer security reviews. Built for how teams already work 42Crunch runs in developer IDEs, CI/CD pipelines and AI coding assistants such as GitHub Copilot, and integrates with Microsoft Defender for Cloud and Microsoft Sentinel. It is trusted by banks, fintechs, telcos and enterprises, and 42Crunch is ISO/IEC 27001 certified.
7AI is the foundational AI security company.
A10 Networks delivers secure, high-performance networking solutions that protect and scale critical applications across core, cloud, and edge environments
Behavioral AI that protects email, identity, and AI, and stops insider threats.
AI-native insider risk workflows for detecting, investigating, and preventing threats before they escalate.
Absolute Security’s endpoint product line centers on Absolute Secure Endpoint, which uses a firmware-embedded Persistence agent to keep a durable connection to managed devices even after reimaging or software tampering.
Abstract, founded in 2023, has built a revolutionary platform to redefine security operations, launching the world's first AI-Gen Composable SIEM.
AbuseIPDB provides high-fidelity IP reputation data and a massive crowd-sourced database of reported malicious infrastructure.
Abusix is the essential solution in today's network security landscape, enabling fast and reliable mitigation of network abuse and cyber threats.
Acalvio is the leader in autonomous cyber deception, defending against APTs, insider threats, and ransomware.
Identity governance built where your business already runs, natively on the ServiceNow Platform.
Acronis is a global cyber protection company delivering the only natively integrated cybersecurity, data protection, and infrastructure management platform for managed service providers and IT departments.
Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies.
ActiveState is a DevSecOps vendor focused on securing open source dependencies and language runtimes used in software delivery pipelines.
Action-Centric Cloud Security
ActTrident™ is a United Kingdom cybersecurity company building a focused platform across human-centered security, AI security, quantum-oriented security planning, and governance-led product lines.
The Invicti Web + API (formerly Acunetix) legacy is built on runtime accuracy, speed, and proof your team can trust.
Adaptiva, the autonomous endpoint management company, delivers the fastest way to patch and manage endpoints at scale.
Unified security awareness training, email security, and AI governance built for the AI era.
Adaptive Shield is primarily known for SaaS Security Posture Management, but in a cloud security/CSPM evaluation it is not a native fit and should be treated as an adjacent vendor rather than a core CSPM platform.
Admin By Request is a privileged access management vendor focused on removing standing local administrator rights while allowing controlled elevation when needed.
Our AI-native culture drives continuous reinvention and bold innovation.
Our vision is to provide a digital world where every business can safely build its applications by inherently trusting how they connect to partners, customers, and foundational services.
The same identity foundation, extended to the new workforce: AI agents. Identity-native governance for everything that acts on your systems.
The secure hub for agent identity, governance, and visibility. Control what your agents can access and do, for every user.
AhnLab provides endpoint security products centered on Windows endpoint protection and centralized management.
Your Control Plane for Secure AI
All the security tools we used were slow, confusing, overpriced and noisy. So we built better ones.
Aim Security provides AI security posture management and runtime protection for enterprise GenAI deployments.
Airlock Digital was founded in Adelaide, Australia, by cybersecurity professionals determined to build the most effective and scalable application control technology in the world.
We're passionate about delivering awesome detection and response to security teams of all sizes.
The Agentic OS for the enterprise. Redefining how organizations run cybersecurity, IT, and business operations in the agentic era, by making intelligence native, not bolted on.
AAIR secures every AI add-on before it becomes part of your enterprise. From discovery and continuous vetting to governance and runtime protection, AIR enables organizations to adopt AI safely.
Autonomous AI penetration testing, source-code audits plus white-box and black-box pentests with validated findings.
The AI-native security operations platform built for enterprise. Preemptive, autonomous, and continuously self-improving.
aisy helps security teams move from isolated vulnerability tickets to the threats they actually care about.
AWe make life better for billions of people, trillions of times a day
Cloud-Native SaaS platform built to secure and manage every identity through a single pane of glass.
The Enterprise Platform for AI Security & Governance
We make data answerable and actionable, for people and agents.
AlgoSec provides a security policy management platform that automates the orchestration of connectivity and security policies across hybrid cloud and on-premise environments.
Keeping communicative tech safe, secure, and reliable.
AT&T Cybersecurity AlienVault USM Anywhere is a cloud-hosted SIEM platform that unifies asset discovery, vulnerability assessment, intrusion detection, behavioral monitoring, and incident response for on-premises, cloud, and
Alpha Level is a next-generation cybersecurity company transforming how Security Operations Centers (SOCs) detect and respond to threats.
alphaMountain.ai provides AI-driven domain and IP threat intelligence focuses on web reputation and content classification.
ALT Security is an agentic penetration testing and red team product that claims to find “every critical attack chain” in an environment and prioritize them continuously.
Anchorage Digital is a global crypto platform that enables institutions to participate in digital assets through custody, staking, trading, governance, settlement, and the industry's leading security infrastructure.
Anchore is creating a more secure software supply chain for priceless peace of mind.
We don't replace human talent and intelligence. We empower cybersecurity teams to make critical decisions, assess threats, respond immediately, reduce risk, and focus on prevention.
We're Anecdotes, and we're transforming how enterprise teams manage governance, risk, and compliance.
Anomali ThreatStream is a threat intelligence platform that aggregates IOCs and IOAs from hundreds of global sources including Anomali Labs curated feeds, OSINT, premium feeds, and ISACs.
Anufy sells Horusion, a SaaS exposure-management platform that combines external attack surface discovery, leaked-credential monitoring and brand impersonation detection.
Anvilogic is a threat detection and hunting platform that works alongside existing data platforms (Snowflake, Databricks, Splunk) rather than replacing them.
AnyInsight.ai is a Zero Trust platform designed to secure the deployment of GenAI agents within the enterprise.
ANY.RUN helps security teams detect malware and phishing earlier and respond with confidence.
Apiiro provides supply chain security capabilities as part of its application security platform, with a focus on inventorying software components, tracing code-to-runtime relationships, and detecting supply chain risk across SCM
Apono is a cloud access management vendor positioned in IAM around just-in-time and least-privilege access for human and non-human identities.
Appdome provides no-code mobile app security for Android and iOS, delivered as build-time and runtime protections inside the mobile CI/CD pipeline.
Appgate provides a high-performance Zero Trust Network Access (ZTNA) solution designed for complex hybrid and multi-cloud environments.
AppOmni is positioned as a SaaS Security Posture Management (SSPM) platform, not a traditional multi-cloud CSPM vendor.
AppRiver is an email security vendor now operating under OpenText Cybersecurity after its acquisition by Zix and then OpenText.
AppSentinels is a comprehensive API security platform that focuses on protecting the entire API lifecycle from development to runtime.
AppViewX is an automated Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) platform designed to prevent service outages caused by expired certificates.
Apricorn offers an extensive line of keypad-authenticated, 256-bit XTS hardware-encrypted USB external storage devices that protect your data at the highest levels.
APX Labs appears to operate in application security testing, but the available public results do not identify a distinct APX Labs DAST/SAST product page or a clear commercial profile.
AQtive Guard by SandboxAQ is a specialized security platform focusing on cryptographic discovery and AI risk management in the face of quantum computing threats.
Aqua Security’s CSPM offering is a multi-cloud posture management product that uses cloud API access and agentless checks to inventory resources, detect misconfigurations, and map findings to compliance requirements.
Aquila I offers an AI-native cyber defense platform that centralizes security telemetry in a lakehouse architecture.
Arcanna.ai provides a Decision Intelligence AI platform for SOC and NOC environments, framing investigations as classification problems using hybrid models with convolutional layers and Long Short-Term Memory units.
Arch0 is an AI-native security operations platform that uses a knowledge graph and autonomous agents to provide context-aware incident analysis and remediation.
Archer, formerly RSA Archer and now independent after RSA Security divestiture, provides an integrated GRC platform for enterprise governance, risk, and compliance management.
Archestra.AI is an open source security and governance layer positioned between large language models, AI agents, and enterprise data systems.
ARCON PAM is an enterprise-class privileged access management solution designed for hybrid, multi-cloud, and distributed datacenter environments.
Arctic EWS provides a comprehensive and international early warning service for distributed organizations, expanding on the scope of services available from the government.
Arctic Wolf provides managed security operations via the Aurora Platform, an Open-XDR framework that ingests unlimited security telemetry from endpoints, networks, cloud workloads, SaaS applications, and identity systems.
Making Salesforce the safest place for enterprise data.
Arista Networks is an industry leader in data-driven, client to cloud networking for large data center/AI, campus and routing environments.
AArkose Labs provides fraud detection and prevention focused on account fraud, bot abuse, credential stuffing, fake account creation, and automated abuse across web and mobile touchpoints.
Armadin is an AI-native continuous offensive security platform that uses autonomous agent swarms to simulate real-world attacks across an organization's attack surface.
Armis provides agentless IoT security for unmanaged and hard-to-agent devices across enterprise, healthcare, industrial, and critical infrastructure environments.
Zero-day and every day protection for your cloud applications with the first runtime behavioral Cloud Application Detection and Response (CADR) solution.
AArmorCode is redefining security governance in the AI era as the agentic control plane for Unified Exposure Management.
ArmorPoint is a cloud-native managed security operations platform built for midsize enterprises and the partners who serve them.
Arnica powers the most effective application security programs in the world.
Artemis is a specialized AI Security Posture Management (AI-SPM) platform focused on discovering, inventorying, and securing AI models, datasets, and notebooks across cloud environments.
Artiphishell is a privately held cybersecurity vendor spun out of the Shellphish research team, but its public materials describe an AI-native application security platform rather than a classic penetration testing service.
HPE Aruba Networking ClearPass Policy Manager is an on-premises Network Access Control (NAC) platform providing role- and device-based secure access across multi-vendor wired, wireless, and VPN infrastructures.
We're Making it Possible for Everyone to Proactively Secure Complex Cloud Environments.
Proof-Based Exposure Security
Discover, secure, and deploy AI agents responsibly across the enterprise
Atera is an all-in-one IT management platform that helps IT teams and MSPs monitor, manage, and secure their environments from a single interface.
Atsign is a cryptographic identity and secure communications platform built around the atProtocol, with keys generated at the edge and encrypted data exchanged only between authorized Atsigns.
The leading platform for Adversarial Exposure Validation (AEV) We help security teams make better decisions by continuously measuring how adversaries can exploit gaps across people, processes, and technology.
Attaxion builds on decades of joint cybersecurity expertise from our founders, team members, and advisors.
AT&T Business offers Security Operations Center (SOC) services that combine managed monitoring, correlation, alerting, and incident response for enterprise networks and applications.
Built by practitioners for practitioners, Optro is an AI-powered GRC system of action that unifies audit, risk, infosec, and compliance into a single, connected platform.
To enable businesses to innovate fearlessly in the age of AI by transforming how they safeguard themselves with the world's most advanced AI security platform.
Aurigin.ai enables proof of ownership and authenticity for all sensitive communication devices and digital content.
Aurva provides a runtime security layer specifically designed for agentic AI architectures and LLM-driven workflows.
AuthLite is a specialized multi-factor authentication solution designed specifically for Microsoft Active Directory environments to secure administrative and user pivots.
Authomize provides an AI-native Identity Governance and Administration (IGA) platform focused on continuous discovery, mapping, and governance of human and machine identities across cloud and on-premises environments.
We build security and governance for AI agents running on desktops.
Avanan is an email security product now sold under Check Point’s Harmony Email Security line, focused on protecting Microsoft 365 and adjacent collaboration channels from phishing, business email compromise, malware, ransomware,
AvePoint is the unifying Trust Layer for AI.
CyberHQ by Avertro is a cloud-native cyber resilience platform that unifies governance, risk, and compliance into a single, operationally integrated system.
AAWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications.
ConnectWise powers IT businesses by simplifying operations, enhancing experiences, and driving growth. Trusted by the most global IT solution providers, we set the standard for innovation and service delivery.
Axis Security provides HPE Aruba Networking SSE, a cloud-native security platform integrating Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), and Cloud Access Security Broker (CASB) with SD-WAN for unified SASE.
Ensure security-relevant data is available, accessible, and affordable to SecOps.
Axonius is a Cybersecurity Asset Management Platform that aggregates device data from NAC, firewalls, vulnerability scanners, EDR, SIEM, MDM, and other security tools to provide unified visibility across IT, OT, IoT, and medical
Axur focuses on External Threat Protection (ETP) and brand protection by monitoring the digital landscape for brand abuse, data leaks, and fraudulent activities.
Since 1995, BACKLINE has been providing professional musicians, bands and studios with top quality equipment rentals. More than just a rental company, we are a full-service backline company.
Backline is an agentic security platform, built for Autonomous Exposure Remediation, Gartner's newly named category for fixing vulnerabilities, not just finding them.
The Security Platform for The New Agentic AI Fabric.