Secure my cloud estate

Security Posture Management

Cloud Security / CSPM

Continuously monitors Microsoft 365 environments against CIS Benchmarks to identify misconfigurations and security gaps before attackers can exploit them.

Cloud Detection and Response

Cloud Detection & Response (CDR)

AI-powered deception technology that detects threats across IAM, workloads, and cloud services in multi-cloud environments without requiring agents.

Enterprise Identity

Identity & Access Management (IAM)

Enables AI agents to operate under verified user identities tied to your organization's identity provider with immediate revocation capabilities.

CSPM

Cloud Security / CSPM

Continuously scans AWS, Azure, and GCP cloud environments to identify misconfigurations, security risks, and compliance gaps across cloud infrastructure.

DSPM

Data Security Posture Management (DSPM)

Analyzes source code to identify data exposure risks by tracing how sensitive data flows through applications without requiring access to production data stores.

Cloud MDR

Cloud Detection & Response (CDR)

Provides comprehensive cloud security by actively monitoring SaaS applications and public cloud environments including AWS, Azure, and Google Cloud.

Alation

Data Security Posture Management (DSPM)

We make data answerable and actionable, for people and agents.

Data Lineage

Data Security Posture Management (DSPM)

Trace data flows across systems from source to destination with every answer traceable to its source

Horizon ACE

Cloud Security / CSPM

Provides unified visibility, automated policy management, and compliance enforcement across multi-cloud and hybrid environments.

Secure

Container Security / CNAPP

Automates scanning of container images, source code, and filesystems for vulnerabilities, malware, and secrets without requiring original artifacts.

Apono

Identity & Access Management (IAM)

Apono is a cloud access management vendor positioned in IAM around just-in-time and least-privilege access for human and non-human identities. Its platform replaces standing privileges with access created at request time, enforced with policy guardrails, and revoked automatically. Apono is best suited for cloud-first teams that need granular control across AWS, Azure, GCP, Kubernetes, databases, and SaaS-connected environments, especially where privileged access and access review must be tightly managed.

Marlin AI

Cloud Detection & Response (CDR)

Autonomously correlates security indicators, investigates risks, surfaces incidents, and delivers expert-guided remediation across SaaS and AI environments.

Aqua Security

Cloud Security / CSPM

Aqua Security’s CSPM offering is a multi-cloud posture management product that uses cloud API access and agentless checks to inventory resources, detect misconfigurations, and map findings to compliance requirements. It is positioned for organizations operating AWS, Azure, Google Cloud, and Oracle Cloud that want continuous visibility into cloud configuration drift and prioritization of high-risk issues. Aqua also emphasizes real-time context and correlation of findings to reduce alert noise. The company sells a broader cloud security platform, but this profile is limited to its CSPM capabilities.

Cloud VM Security

Cloud Workload Protection (CWPP)

Protection for cloud virtual machines through vulnerability scanning, compliance assessment, file integrity monitoring, and intrusion prevention.

Cloud Workload Protection

Cloud Workload Protection (CWPP)

Runtime security solution that protects cloud-native workloads including containers, Kubernetes, serverless functions, and VMs against advanced threats.

Container Security

Container Security / CNAPP

The leading container security solution providing build-time scanning, policy enforcement, and runtime protection for cloud-native applications.

Kubernetes Security

Container Security / CNAPP

Holistic Kubernetes security combining security posture management with advanced runtime protection for enterprise K8s deployments.

Serverless Security

Container Security / CNAPP

Security for serverless functions and containers, providing vulnerability detection, CI/CD integration, and runtime protection for AWS Lambda.

Converged Identity

Identity & Access Management (IAM)

A unified identity and access management solution that integrates IAM, IGA, PAM, and endpoint management capabilities to manage, control, and govern all digital identities through a single interface.

Single Sign-On

Identity & Access Management (IAM)

Enables employee access to multiple systems and applications through single authentication.

ARMO Kubescape

Container Security / CNAPP

Zero-day and every day protection for your cloud applications with the first runtime behavioral Cloud Application Detection and Response (CADR) solution. A fully explainable & traceable runtime security story spanning the entire cloud technology stack.

Aryon

Cloud Security / CSPM

We're Making it Possible for Everyone to Proactively Secure Complex Cloud Environments.

AvePoint

Data Security Posture Management (DSPM)

AvePoint is the unifying Trust Layer for AI. AvePoint enables more than 28,000 organizations and 6,000 channel partners to protect, secure, and govern their entire AI estate across data, infrastructure, AI and agents for Microsoft, Google, Salesforce, and other leading cloud environments, so that enterprises can deploy AI with confidence and scale innovation without scaling risk.

Insights for Microsoft 365

Data Security Posture Management (DSPM)

Identify, prioritize, and remediate overshared file permissions, group membership, and sensitive information that could be overexposed through AI.

GuardDuty

Cloud Detection & Response (CDR)

Protect AWS accounts and workloads with intelligent threat detection

Identity and Access Management

Identity & Access Management (IAM)

Securely manage identities and access to AWS services and resources

Macie

Data Security Posture Management (DSPM)

Discover and protect sensitive data at scale

Security Hub

Cloud Security / CSPM

Prioritizes critical security issues and helps respond at scale

Secure Access Platform

Identity & Access Management (IAM)

An identity security solution that defends against identity-based attacks through phishing-resistant MFA, device trust, and continuous access control.

Secure Customers

Identity & Access Management (IAM)

A customer authentication solution delivering frictionless, phishing-resistant authentication across every browser, device, and application.

Secure SSO

Identity & Access Management (IAM)

The only SSO built to eliminate identity risk by using phishing-resistant device-bound credentials and continuous risk evaluation.

BigID

Data Security Posture Management (DSPM)

BigID is a data intelligence platform that helps organizations discover, classify, secure, govern, and manage enterprise data and AI. BigID connects data sensitivity with identity, access, activity, lineage, ownership, policy, and business context so teams can reduce risk, automate compliance, strengthen privacy, and safely adopt AI.

Data Access Governance

Identity & Access Management (IAM)

Helps security teams discover who has access to sensitive data, understand their permissions, identify excessive access, and prioritize remediation based on data risk.

Data Retention

Data Security Posture Management (DSPM)

Automates the discovery, classification, policy enforcement, and defensible deletion of data across enterprise environments to reduce risk, lower storage costs, and improve compliance.

Discovery & Classification

Data Security Posture Management (DSPM)

Discovers, classifies, and provides context around sensitive, personal, regulated, and proprietary data across cloud, SaaS, on-premises, and hybrid environments.

Binarii Labs

Data Security Posture Management (DSPM)

We're committed to pioneering cybersecurity through our innovative patented data security process. Our mission is to ensure that your data remains securely under your control.

BinariiDSM

Data Security Posture Management (DSPM)

A web-based secure file management solution for SMEs enabling secure file storage, sharing, collaboration, and audit trails with setup completed in under 30 minutes

BinariiDSP

Data Security Posture Management (DSPM)

A patented data security platform that encrypts, fragments, duplicates, and distributes unstructured data across multiple user-owned storage locations

GravityZone CSPM+

Cloud Security / CSPM

Go beyond regular Cloud Security Posture Management tools by adding CIEM and Threat Detection capabilities to your cloud security.

GravityZone Security for Containers

Container Security / CNAPP

Security built for containers and Linux across on-premises and cloud environments with consolidated visibility and control.

Access Intelligence

Identity & Access Management (IAM)

An enterprise credential security solution that helps businesses identify credential risks, prioritize critical applications, guide employees through password updates, and track security improvements across their organization.

Blast

Cloud Security / CSPM

Blast is a preemptive cloud defense platform that shifts security from reactive monitoring to proactive prevention by leveraging native cloud infrastructure controls. It automates the implementation of guardrails that limit blast radius and enforce least-privileg access at the network and identity layers. By turning complex cloud configurations into preventive policies, it reduces the operational burden of manual remediation of misconfigurations.

Blast Security

Cloud Security / CSPM

Blast Security is a cloud security posture management vendor that positions its product as a preemptive cloud defense platform. Within CSPM, it focuses on agentless, API-based assessment of cloud configurations and translating security intent into preventive guardrails across AWS, Azure, GCP, and Kubernetes. The company appears oriented toward enterprises and platform/security teams that want to reduce misconfigurations and enforce policy before changes reach production. Its public materials emphasize native cloud controls, continuous validation, and pre-enforcement simulation rather than runtime protection or adjacent cloud security categories.

Preemptive Cloud Defense Platform

Cloud Security / CSPM

The first Preemptive Cloud Defense Platform, turning native cloud controls into a unified preventive layer that stops risks before they reach production.

Agentic IAM

Identity & Access Management (IAM)

Solution that automates Identity and Access Management processes including access requests, employee lifecycle management, identity risk validation, and continuous certification through AI agents.

Bold Security

Data Security Posture Management (DSPM)

Bold Security is a cybersecurity vendor whose core product is a local AI agent for endpoint data protection, not a traditional cloud-native DSPM suite. In a DSPM context, it focuses on identifying sensitive data on devices, tracking how that data moves through applications and browser workflows, and blocking risky exfiltration or misuse before data leaves the endpoint. It is best suited for enterprises that want endpoint-level visibility into user-driven data movement, especially where employees use SaaS apps and AI tools.

Bold

Data Security Posture Management (DSPM)

On-Device AI and Platform for Endpoint Data Protection with real-time prevention and complete visibility of every data interaction

Britive

CIEM

Britive provides dynamic Cloud Privileged Access Management (CPAM) and Cloud Infrastructure Entitlement Management (CIEM) with patented just-in-time (JIT) ephemeral access across AWS, multi-cloud, SaaS, hybrid, and on-prem environments. It enforces runtime identity access for human, agentic AI, and machine identities via a unified control plane, minting permissions only at execution and auto-destroying them post-task. Recognized by Gartner as a CIEM leader, Britive offers entitlement governance, anomaly detection, and SCIM-based synchronization with IdPs like Okta and Azure AD. Best for organizations needing granular, zero-standing-privilege controls in dynamic cloud ecosystems.

Virtual machine images pre-configured according to security standards and available on major cloud platforms with built-in secure configuration and compliance.

Containers

Container Security / CNAPP

Pre-built container images designed for security with hardened, secure, and production-ready builds

Images

Container Security / CNAPP

The industry's largest zero-CVE, built-from-source container image catalog for developers and AI agents

VMs

Container Security / CNAPP

Virtual machine images with hardened configurations

Container Security

Container Security / CNAPP

Secure your containerized applications throughout the SDLC, from the first line of code to deployment and runtime in the cloud.

Check Point

Cloud Security / CSPM

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

CLEAR

Identity & Access Management (IAM)

CLEAR is an identity verification vendor that extends existing IAM stacks by adding biometric and document-based identity proofing at authentication and authorization points. In the IAM category, it is best known for validating that the person behind a login is real and matches authoritative identity evidence, rather than relying only on passwords, devices, or recovery factors. Its IAM offering is positioned for organizations that need stronger access assurance for high-risk workflows such as workforce access, healthcare, and regulated environments. CLEAR’s broader platform also serves consumer and travel identity use cases, but its IAM value is centered on verified human access.

CLEAR1

Identity & Access Management (IAM)

A multi-layered identity verification platform that verifies the person beyond the device using multiple identity signals, making identity fraud exponentially harder.

CloudGuard Workload Protection (Check Point)

Cloud Workload Protection (CWPP)

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

HyperScale AIDP

Data Security Posture Management (DSPM)

AI-ready data platform with on-premises deployment designed for data-centric AI workloads while maintaining data sovereignty and government-verified security protocols.

Access Control Management

Identity & Access Management (IAM)

Enables distributed management of user access rights across multiple systems while enforcing least privilege and separation of duties.

Concentric AI

Data Security Posture Management (DSPM)

We help businesses discover, understand, and protect sensitive information across cloud and on-prem environments. Our AI-powered data security governance solutions deliver precise visibility, automated protection, and safe AI adoption, so organizations can reduce risk, strengthen compliance, and confidently innovate without compromising what matters most.

Data Access Governance

Identity & Access Management (IAM)

Strikes the right balance between collaboration and control with an intelligent, zero-trust approach to managing who accesses sensitive data through real-time monitoring and policy enforcement.

Data Classification

Data Security Posture Management (DSPM)

Uses patented deep learning technology to contextually discover and thematically categorize structured and unstructured data with semantic understanding rather than traditional keyword-based approaches.

Data Detection and Response

Data Security Posture Management (DSPM)

Logs the who, what, and where of every data interaction through continuous monitoring and real-time alerts, enabling security teams to detect and respond to data risks before damage occurs.

Data Discovery

Data Security Posture Management (DSPM)

Discovers, understands, and prioritizes sensitive and business-critical data using AI-powered semantic intelligence to turn data overload into actionable security insights.

Data Privacy and Protection

Data Security Posture Management (DSPM)

Provides granular visibility and control over sensitive data across infrastructure, enabling organizations to stay audit-ready while maintaining compliance with regulatory mandates.

Data Security Posture Management

Data Security Posture Management (DSPM)

Discovers sensitive data across hybrid environments using AI-powered context understanding to gain clarity regarding data locations and access permissions.

Copperhelm builds an agentic cloud security platform for enterprise security teams that replaces manual cloud security workflows with purpose-built AI agents. The agents connect to live cloud workloads, inspect running processes, map network topology, and continuously monitor for threats. A proprietary component called the Context Lake structures and connects cloud telemetry across environments so the agents can ground their investigations in accurate context before acting. When a threat is confirmed, agents can execute remediation in real time, including deploying targeted protections such as WAF rules, without causing workload downtime. The company reports paying customers including Fortune 500 enterprises. Copperhelm emerged from stealth in April 2026 with 7 million dollars in seed funding led by TLV Partners.

Provides multi-account cloud architecture intelligence enabling AI agents to understand and operate on deep architectural data foundations.

Connects directly to running machines and live workloads to inspect active processes and assess vulnerability relevance by analyzing real-time configurations for exploitability.

Falcon Cloud Security

Cloud Workload Protection (CWPP)

Modern cloud security platform that delivers unified protection across code, infrastructure, and runtime environments with agentless and agent-based detection capabilities.

Curity

Identity & Access Management (IAM)

Curity was founded by identity specialists who had spent years working with identity and access management in large organizations. During that time, we saw a consistent challenge. Traditional IAM systems were designed for login portals and monolithic applications, while modern digital services were increasingly built on APIs, distributed systems and open identity standards. Organizations needed a different approach.

Identity Server

Identity & Access Management (IAM)

Standards-based platform that enables organizations to secure users, APIs, machines and AI agents with deployment flexibility across on-premise, cloud, and hybrid environments.

Managed ESPM

Cloud Security / CSPM

Proactively secures endpoints against ransomware and infostealer attacks through configuration and vulnerability management.

SIEM CLOUD

Cloud Detection & Response (CDR)

Cloud-smart security platform for AWS, Azure, GCP, and SaaS that analyzes native cloud logs and identity patterns to identify and prevent security threats.

Cyera

Data Security Posture Management (DSPM)

Cyera is a pioneer in the data security space that empowers security leaders to discover their data attack surface, control the use of data, monitor, detect, and quickly remediate risk.

DSPM

Data Security Posture Management (DSPM)

The most intelligent data security control plane, providing complete data clarity and actionable intelligence built for the AI era.

Identity Security

Identity & Access Management (IAM)

An AI-powered unified security platform that delivers integrated threat detection and response across 15 modules deployable in minutes.

Asset Cloud

Cloud Security / CSPM

Decision-grade asset intelligence for security and IT that discovers and manages all cyber, software, identity, and SaaS assets across environments.

Cyngular

Cloud Detection & Response (CDR)

The Agentic SOC of the AI era, a mesh of autonomous AI agents that detect, hunt, investigate, deceive, resolve and report, end-to-end.

CLOUD

Cloud Detection & Response (CDR)

Intelligent cloud security powered by Self-Learning AI built to secure your multi-cloud environment

Live Data Map

Data Security Posture Management (DSPM)

Stop chasing scattered personal data across your business and start proactively pinpointing and managing privacy risk in your systems and processes.

DataStealth

Data Security Posture Management (DSPM)

DataStealth provides an agentless data protection platform that intercepts traffic at the network layer to discover, classify, and neutralize sensitive data. It utilizes tokenization, masking, and encryption to protect assets on-premises or in the cloud without requiring modifications to the original applications or underlying databases. This solution replaces complex SDK-based encryption and legacy gateway-based masking tools with a transparent, infrastructure-agnostic layer.

Platform

Data Security Posture Management (DSPM)

Identifies and replaces sensitive data before it is submitted to the LLM, and restores it in the response, so your team gets a complete answer, and the model never sees the real values.

DataSunrise provides a unified platform for database security, auditing, and vulnerability management across heterogeneous database environments. The solution includes a database firewall, dynamic data masking, and continuous activity monitoring (DAM) to defend against SQL injection and unauthorized access. It integrates DSPM capabilities to provide visibility into where sensitive PII/PHI resides across RDS, Redshift, Snowflake, and on-prem SQL servers.

Comprehensive database security platform that automatically discovers sensitive data, continuously monitors risks, and actively enforces security controls.

Identifies, categorizes, and safeguards sensitive information across complex and distributed data infrastructures through contextual analysis.

Replaces real sensitive data with fictitious but meaningful content through dynamic and static masking techniques.

Cloud Secure

Cloud Workload Protection (CWPP)

Automated, continuous security service that combines CNAPP + AppSec capabilities across all multi-cloud assets with discovery, scanning, and runtime protection.

Dawnguard

Cloud Security / CSPM

Building the next-gen platform that makes security easy from day one

Deploy

Cloud Security / CSPM

Use insights to finalize and ship your cloud configuration with automated security review and architecture governance.

Design

Cloud Security / CSPM

Generate or iterate on published cloud architectures with AI-powered generation, requirements integration, and team collaboration.

Discover

Cloud Security / CSPM

Connect your cloud environments and instantly visualize resources, relationships, and improvement opportunities with AI-driven insights.

Dawnguard MCP

Cloud Security / CSPM

Secure your cloud architecture, without leaving your IDE by delivering security and compliance expertise with architectural context to your coding assistant.

Descope

Identity & Access Management (IAM)

Descope is a customer and agentic identity platform that fits within Identity & Access Management by handling authentication, authorization, single sign-on, MFA, and tenant-aware access controls for web, mobile, partner, and third-party applications. It is aimed at teams building B2C and B2B apps that need configurable identity journeys without assembling separate components for login, federation, and user management. Descope also supports delegated administration, audit trails, SCIM sync, and connector-based integrations for related identity workflows. Its strongest fit is for product and security teams managing external identities at scale.

Devel Group

Identity & Access Management (IAM)

Devel Group delivers the SmartID Suite, an AI-driven identity platform that utilizes biometrics and adaptive risk intelligence for secure authentication. The platform uses agentic AI to autonomously detect identity-based threats and fraud patterns in real-time, providing a high-assurance alternative to traditional password-based or SMS-MFA systems. It focuses on the convergence of biometric security and automated fraud prevention for digital onboarding and session persistence.

DigiCert

Identity & Access Management (IAM)

Trust built for the AI age

Dig Security

Data Security Posture Management (DSPM)

Dig Security provides a DSPM platform for discovering, classifying, and monitoring sensitive data across cloud data stores, with coverage that extends to on-prem file shares. Its core value in this category is mapping where sensitive records live, how they are accessed, and where exposure or policy violations exist, so security teams can prioritize shadow data and data-access risk. The platform is positioned for organizations running AWS, Azure, and GCP estates that need agentless, out-of-band data security visibility rather than infrastructure posture management. Palo Alto Networks acquired Dig and integrates the technology into Prisma Cloud.

Containers

Container Security / CNAPP

Vulnerability-free container base images that serve as drop-in replacements for standard upstream images, eliminating CVEs without breaking applications.

Helm Charts

Container Security / CNAPP

Enterprise-grade Helm charts for secure Kubernetes deployments, providing drop-in replacements with vulnerability-free container images pre-configured.

Serverless

Cloud Workload Protection (CWPP)

Secure-by-design serverless runtimes for CVE-free deployments with zero re-architecting required, supporting Node.js, Python, and Java.

VMs

Cloud Workload Protection (CWPP)

Clean, hardened virtual machines that eliminate CVEs from VM-based workloads without re-architecting or changing operational models.

Edera

Container Security / CNAPP

Edera is a container security vendor centered on hardened runtime isolation for Kubernetes workloads. Its core product uses a container-native Type-1 hypervisor to place each workload in its own lightweight zone, aiming to prevent container escapes, kernel-exploit breakout paths, and lateral movement while keeping Kubernetes compatibility. Within Container Security / CNAPP, Edera is best suited for teams that need strong runtime isolation for multi-tenant, regulated, or AI training and inference workloads. It is not primarily a CSPM or identity-management platform.

for Containers

Container Security / CNAPP

Runtime security software that delivers true isolation and secure multi-tenancy across all containers by running each container in an isolated microVM.

for GPUs

Container Security / CNAPP

Platform that safely slices GPU resources across workloads to allow organizations to share infrastructure efficiently while maintaining isolation.

Hardened Runtime

Container Security / CNAPP

Container isolation platform that runs each Kubernetes pod with its own kernel for true hardware isolation at performance within 5% of native.

Cloud Security

Cloud Detection & Response (CDR)

Detect, investigate, and respond to cloud-native threats efficiently with AI-driven security analytics.

Container Scanning

Container Security / CNAPP

Cut container image vulnerability noise up to 90% using full-stack reachability analysis to help you patch what runs and prune the rest.

Ermetic

CIEM

Ermetic provides a CIEM platform that discovers and analyzes human and machine identities, entitlements, and access risks across AWS, Azure, and Google Cloud. Acquired by Tenable in 2023 and rebranded as Tenable CIEM, it combines CIEM with CSPM for contextual visibility into IAM policies, network configurations, storage, and secrets. It exposes overprivileged entitlements, toxic combinations, and enforces least privilege via automated remediation and anomaly detection. Best for multi-cloud enterprises needing unified CNAPP capabilities to manage complex entitlement sprawl without agents.

Cloud Exposure

Cloud Workload Protection (CWPP)

Prevents cloud breaches and reduces cloud risk by closing gaps that misconfigurations, risky entitlements, and vulnerabilities create across multi-cloud and hybrid environments.

Cloud Workload Protection

Cloud Workload Protection (CWPP)

Cloud workload protection included in ESET PROTECT platform

Card Collection

Data Security Posture Management (DSPM)

Collect payment card data without exposing raw data to your infrastructure.

Fasoo

Data Security Posture Management (DSPM)

Building Digital Trust, and More

AI Radar

Cloud Security / CSPM

Unified security control center centralizing policy deployment and log management across AI security layers.

DSPM

Data Security Posture Management (DSPM)

Next-generation DSPM solution detecting sensitive data and automating storage-security assessment and compliance across cloud and on-prem environments.

Wrapsody

Data Security Posture Management (DSPM)

Document platform for the AI era, centralizing fragmented data while preparing it for AI/LLM use.

Feitian

Identity & Access Management (IAM)

Established in 1998, FEITIAN Technologies is a leading global provider of cyber security products and solutions.

Cloud Security

Cloud Security / CSPM

Cloud security for small engineering teams that provides continuous infrastructure monitoring and vulnerability scanning without requiring a dedicated security team.

Identity and Access Security

Identity & Access Management (IAM)

A unified security platform that automates user access reviews across SaaS tools, enabling teams to discover accounts, flag security issues, and generate compliance evidence in minutes.

Files.com

Data Security Posture Management (DSPM)

founder-led, profitable, and built for the long term

CSPM

Cloud Security / CSPM

Continuously help you recognize flaws that hinder compliance with cloud security requirements.

FortiCNAPP

Cloud Security / CSPM

Unified cloud native application protection platform covering code to runtime security across multi cloud environments.

FortiCNP

Cloud Security / CSPM

Fortinet FortiCNP is Fortinet’s cloud security posture management product for AWS, Azure, and GCP. It focuses on agentless assessment of cloud configurations, correlating provider-native security findings with Fortinet Security Fabric signals to produce resource risk insights and an aggregate risk score. In CSPM evaluations, it is best suited for teams that want posture visibility and prioritization without deploying workload agents or collecting runtime telemetry. It also includes built-in cloud resource configuration scanning and data scanning, but buyers should treat FortiCNP primarily as a posture and risk-prioritization tool rather than a runtime protection platform.

Fudo Security

Identity & Access Management (IAM)

Fudo Security, a global leader in Privileged Access Management (PAM) and Zero Trust Remote Access solutions, is transforming how organizations secure critical infrastructure and sensitive systems.

FusionAuth

Identity & Access Management (IAM)

FusionAuth helps developers meet authentication feature and compliance requirements so they can focus on building their application. It was built by wicked smart developers for wicked smart developers with developer control, flexibility, and ergonomics through the roof.

GitGuardian

Identity & Access Management (IAM)

GitGuardian protects the enterprises against leaked secrets and mismanaged identities.

Google Cloud DLP

Data Security Posture Management (DSPM)

Google Cloud DLP (now Sensitive Data Protection) is a fully managed service for discovering, classifying, and protecting sensitive data across Google Cloud Platform resources including BigQuery, Cloud Storage, and Datastore. It scans structured/unstructured data, text streams, and images via OCR, using over 200 built-in infoType detectors for PII like credit card numbers and phone numbers. De-identification methods include masking, redaction, tokenization, format-preserving encryption, and date-shifting. Best for enterprises with heavy GCP usage needing automated, scalable scanning of data at rest and in transit via API or console.

Gradient Technologies

Identity & Access Management (IAM)

Gradient for Users replaces traditional MFA with a one-click, passwordless experience that users and admins love. A simple SaaS plugin to your existing Single Sign On (SSO).

HID Global

Identity & Access Management (IAM)

HID Global is a long-established enterprise identity vendor with IAM offerings centered on strong authentication, credential lifecycle management, PKI, FIDO, passkeys, and SSO. In this category, it is strongest in regulated and high-assurance environments that need to link workforce identity with physical access and certificate-based authentication. Its IAM portfolio spans cloud, on-premises, and hybrid deployment models, with options for government, enterprise, and converged physical/IT identity use cases. Adjacent physical security and RFID products exist, but the IAM scope focuses on authentication, identity proofing, and credential management.

Honeycake

Data Security Posture Management (DSPM)

Honeycake is not a DSPM vendor in the evidence available; its product line is positioned as an enterprise file security and self-protecting file platform. The company says it protects sensitive content in files while users store and share them through existing tools, with desktop/mobile apps, a web dashboard, CLI tools, enterprise products such as Vault and Uploader, and an API. Within the DSPM scope, there is no clear evidence of cloud data discovery, classification, data flow mapping, or shadow-data detection. It appears best suited for teams focused on file-level protection and controlled sharing rather than data posture management.

IDEMIA Public Security

Identity & Access Management (IAM)

Building mission-critical solutions powered by biometrics and cryptography.

Incode Technologies

Identity & Access Management (IAM)

Incode Technologies delivers an automated identity verification and authentication platform centered on high-assurance biometric liveness. It utilizes proprietary AI to process global identity documents and facial biometrics to ensure a real human is present, effectively neutralizing deepfake-based spoofing. The solution replaces manual KYC/onboarding workflows and complements existing IAM stacks by providing a stronger root-of-trust for high-risk transactions.

Iru

Identity & Access Management (IAM)

Iru’s IAM product is **Workforce Identity**, a passwordless workforce access platform focused on securing employee sign-in and application access. It sits inside a broader IT and security suite, but its IAM scope centers on replacing passwords with hardware-backed passkeys, single sign-on, and context-aware access decisions. The product is aimed at organizations that want stronger workforce authentication without adding friction for employees or IT admins, especially teams standardizing on modern device-managed environments. Public materials position it as part of Iru’s integrated identity, endpoint, and compliance platform rather than a standalone IAM-only vendor.

JumpCloud

Identity & Access Management (IAM)

JumpCloud provides a cloud directory platform for IAM, centralizing user identities and extending access to devices, applications, files, networks, and servers across cloud, on-premises, and hybrid environments. It integrates with Active Directory as the authoritative source, using protocols like LDAP, SAML, RADIUS, SSH, and REST for federation. Features include automated provisioning/deprovisioning, role-based access control, SSO, MFA with TOTP and push notifications, and MDM for device policies, patch management, and remote wipe. Best for SMBs and mid-market organizations migrating from on-premises directories to cloud IAM without infrastructure.

Keyfactor

Identity & Access Management (IAM)

Keyfactor is best known for machine identity and PKI automation, but in IAM terms it sits in the identity layer for non-human identities: certificates, SSH keys, and code-signing trust. Its core fit is for enterprises that need to discover, issue, rotate, revoke, and govern machine credentials across hybrid infrastructure and DevOps pipelines. Keyfactor is strongest where IAM overlaps with certificate lifecycle management and authentication for services, devices, and applications rather than workforce SSO or directory management. It also supports on-premises, hybrid, and SaaS deployment models, which suits regulated environments with mixed PKI estates.

Keystrike

Identity & Access Management (IAM)

Keystrike is an intent-based security platform for governing AI agents and critical systems

Laminar

Data Security Posture Management (DSPM)

Laminar is a data security posture management (DSPM) platform focused on discovering, classifying, and monitoring sensitive data across cloud and SaaS data stores. It is designed to show where sensitive data lives, who can access it, and where exposure or anomalous access creates risk. Public materials describe support for AWS, Azure, GCP, and Snowflake, with a deployment model that keeps scanning in the customer tenant and returns only metadata. It is best suited for enterprises that need cloud data visibility and remediation guidance without moving data into a third-party cloud.

Lepide

Data Security Posture Management (DSPM)

Lepide helps organizations protect sensitive data and strengthen identity security across on-premises and hybrid environments. Our Data Security Platform provides deep visibility into Active Directory, file servers, and Microsoft 365, enabling teams to discover sensitive data, analyze and remediate excessive permissions, monitor changes in real time, and detect suspicious behavior.

LightBeam

Data Security Posture Management (DSPM)

Lightbeam is built for those who believe sensitive data should be understood, governed, and protected before AI can expose it.

OAuth Remediation Agent

Identity & Access Management (IAM)

Stops malicious OAuth applications from gaining unauthorized access to workspace accounts and provides visibility into actual app activity.

Mesh Security

Cloud Security / CSPM

Mesh Security provides a Cybersecurity Mesh Architecture (CSMA) platform that serves as a horizontal execution layer across the security stack. It connects siloed security tools (IAM, SaaS, Cloud, Core) to provide visibility into cross-domain attack paths. The platform maps identities to sensitive assets to identify and eliminate high-risk lateral movement paths that point products often miss.

Microsoft Defender for Cloud

Cloud Security / CSPM

Microsoft Defender for Cloud is a multicloud CSPM platform that provides continuous security posture assessment across Azure, AWS, and GCP. It delivers agentless vulnerability scanning, misconfiguration detection, and compliance monitoring against industry benchmarks (CIS, NIST, ISO, PCI-DSS). The platform generates hardening recommendations ranked by risk and includes attack path analysis to identify exploitable chains. Defender for Cloud serves enterprises managing hybrid and multicloud infrastructure seeking unified posture visibility and compliance reporting.

Entra

Identity & Access Management (IAM)

Unified identity and network access solution that secures access for workforce, customer, and agentic identities to any AI, apps, data, and multicloud resources.

Microsoft Entra ID (formerly Azure Active Directory)

Identity & Access Management (IAM)

Microsoft Entra ID is a cloud-based identity and access management service, formerly Azure Active Directory, providing directory services, authentication, and authorization for Microsoft 365, Azure, Dynamics 365, and third-party SaaS applications. It supports single sign-on via work or school accounts for cloud and on-premises apps. Key security includes conditional access policies, risk-based authentication using machine learning on trillions of signals, and identity protection in P2 tier. Market leader in hybrid IAM for enterprises using Microsoft ecosystems, ideal for organizations needing centralized identity governance across multitenant environments.

Purview

Data Security Posture Management (DSPM)

Unified data protection and governance platform that discovers, classifies, and protects sensitive data across on-premises, multicloud, and SaaS environments.

Entra ID

Identity & Access Management (IAM)

A cloud-based identity and access management solution that secures and manages identities across cloud and on-premises environments, preventing identity attacks through strong authentication and risk-based policies.

Minimus

Container Security / CNAPP

We're a team of security nerds and passionate innovators, committed to our customers.

Hardened Container Images

Container Security / CNAPP

Distroless container images, rebuilt continuously from source with approximately 97% fewer CVEs than public images

Miniorange

Identity & Access Management (IAM)

miniOrange has established itself as a cybersecurity leader in identity, data security, and privacy, helping organizations protect human and non-human identities, safeguard sensitive data, and secure AI systems across today's digital landscape. Our expertise also includes offering new-age security solutions for popular CMS and project management platforms like Atlassian, WordPress, Joomla, Drupal, Shopify, BigCommerce, and Magento.

Mitiga

Cloud Detection & Response (CDR)

Mitiga is a cloud detection and response vendor focused on detecting, investigating, and containing active threats across cloud, SaaS, identity, and AI environments. Its CDR platform emphasizes zero-impact breach prevention, with cloud-native telemetry analysis, attack reconstruction, and guided response for SecOps teams that need visibility beyond CNAPP and posture tools. Mitiga positions itself for enterprises with distributed, multi-cloud and SaaS-heavy footprints that need forensic context and rapid triage without requiring deep cloud expertise.

Agentic Runtime Security

Cloud Detection & Response (CDR)

Delivers runtime defense across cloud, SaaS, identity, and AI infrastructure, detecting and stopping active attacks before they impact the business.

Native

Cloud Security / CSPM

Native provides a unified security control plane designed to orchestrate and manage native security capabilities across AWS, Azure, GCP, and OCI. It addresses the complexity of multi-cloud environments by standardizing security configurations and policies across disparate CSP native tools. The platform complements existing CSPM tools by providing a 'secure-by-design' management layer that ensures consistency without requiring heavy third-party agents.

1Secure

Data Security Posture Management (DSPM)

Unified SaaS platform providing comprehensive visibility into data and identity risks across Microsoft environments with threat detection, compliance reporting, and secure AI adoption.

Access Analyzer

Data Security Posture Management (DSPM)

Data Security Posture Management solution that discovers and classifies sensitive data, continuously monitors risk, automates governance, and keeps AI adoption under control.

NewCore

Identity & Access Management (IAM)

NewCore is a workforce identity platform positioned for IAM use cases across humans and non-human identities. Its published materials emphasize identity discovery, SSO, MFA, lifecycle management, directory services, and inline policy enforcement, with support for deploying alongside an existing IdP rather than replacing it. It appears best suited to enterprise security and identity teams that need to unify access control for employees and AI agents, especially where browser-based authentication, agent governance, and token-based access control are in scope.

Identity Security

Identity & Access Management (IAM)

Delivers SSO, passkeys, phishing-resistant MFA, and security-aware policies for every human and AI agent.

Cloud Security

Cloud Security / CSPM

Continuously audits AWS, GCP, Azure, and Kubernetes environments against compliance frameworks, traces misconfigurations back to source code repositories, and analyzes attack paths for real exploitability.

Oak

Identity & Access Management (IAM)

Oak is an AI-native identity operating system focused on Identity & Access Management for enterprises that need to govern human, machine, and AI-agent identities in one control plane. It builds a live identity graph from raw evidence, then uses that graph to manage access, detect permission drift, and drive real-time remediation. Oak appears positioned for enterprise CISOs and IAM teams modernizing from periodic reviews to continuous identity governance. The company came out of stealth in July 2026, is generally available, and has publicly described enterprise deployments and a $60M seed round.

Offroad

Identity & Access Management (IAM)

Offroad is a newly launched **agentic identity security platform** that sits in the IAM-adjacent identity security layer rather than a classic SSO or directory product. According to its site and launch coverage, it helps enterprises move from identity visibility to identity resolution by investigating, governing, remediating, and verifying identity risk across human users, machine identities, OAuth applications, service accounts, and AI agents. It appears best suited for security and identity teams that need evidence-driven analysis of access and ownership issues across distributed systems.

Okta is a cloud-based Identity and Access Management (IAM) platform that provides centralized identity governance, authentication, and authorization across on-premises, hybrid, and cloud environments. The vendor serves mid-market to enterprise organizations requiring SSO, MFA, and lifecycle management at scale. Okta is positioned as a foundational identity layer for hybrid infrastructure, with particular strength in organizations managing complex multi-application access across dispersed user bases.

Okta is The World's Identity Company™. We provide cloud-based identity and access management (IAM) solutions that securely connect the right people to the right technologies at the right time.

Build secure customer identity experiences that drive growth and protect user data

A comprehensive identity platform that secures every identity and interaction across your organization

Secure workforce access with single sign-on, multi-factor authentication, and lifecycle management

Oligo Security

Cloud Workload Protection (CWPP)

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist. In cloud security evaluations, it is best understood as a platform for detecting and blocking active exploitation in cloud workloads, with emphasis on runtime context rather than posture scanning or misconfiguration management. Its cloud-security materials focus on protecting modern applications, cloud workloads, and AI systems at execution time, which makes it a fit for teams that want runtime threat detection and exploit prevention alongside other cloud security controls.

Cloud Application Detection & Response

Cloud Detection & Response (CDR)

Catches zero-days and active exploits using eBPF technology

Container Scanning

Container Security / CNAPP

Scans containers for vulnerabilities and security issues

Runtime Security Platform

Cloud Workload Protection (CWPP)

Real-time runtime intelligence across code, cloud, and AI systems for the AI era

OneLogin (a product of One Identity)

Identity & Access Management (IAM)

OneLogin is a cloud-first Identity and Access Management (IAM) platform acquired by One Identity in 2024, providing single sign-on (SSO) and access control for workforce, customer, and partner identities. The platform supports both cloud and on-premises deployments with integration into One Identity's broader Unified Identity Security Platform alongside Privileged Access Management (PAM), Identity Governance (IGA), and Active Directory Management solutions. OneLogin serves enterprises requiring consolidated identity verification and real-time suspicious login monitoring across hybrid environments.

CIAM (Customer Identity and Access Management)

Identity & Access Management (IAM)

Secures customer identities and delivers seamless, customised sign-in experiences for consumer-facing applications.

Desktop

Identity & Access Management (IAM)

Extends identity to the endpoint: users log in once to reach every app in the OneLogin Portal, and with Desktop Pro sign into Windows or Mac with their OneLogin password via an installed certificate.

OneLogin Access

Identity & Access Management (IAM)

Replaces legacy access management tools with single-click access to both SaaS and on-premise applications from any device through the OneLogin portal.

Single Sign-On (SSO)

Identity & Access Management (IAM)

Users enter one set of credentials to access web apps in the cloud and behind the firewall, across desktops, smartphones and tablets. Pre-integrated with thousands of web applications.

Opnova

Identity & Access Management (IAM)

Opnova's agentic AI bridges disconnected apps and automates the high-friction tasks no integration could reach before. The result: tighter access controls, faster provisioning, and an IAM program that finally works end-to-end.

Platform

Identity & Access Management (IAM)

An AI-native identity governance solution that automates identity governance tasks across disconnected enterprise applications through autonomous AI agents that learn from video demonstrations.

MetaDefender Cloud

Cloud Security / CSPM

Cloud-native file threat prevention platform combining multiscanning, Deep CDR technology, and AI-powered malware detection to secure file uploads and shared content across cloud environments

MetaDefender Storage Security

Data Security Posture Management (DSPM)

Enterprise-grade file security platform that protects data at rest by inspecting files in real time across on-premises, hybrid, and cloud storage environments

Optimal IdM

Identity & Access Management (IAM)

Optimal IdM is a global provider of innovative and affordable identity access management solutions.

Federation & Identity Services

Identity & Access Management (IAM)

Provides seamless and secure access to thousands of applications using Single Sign-On technology and manages user authentication and authorization across multiple systems.

LDAP Proxy Firewall

Identity & Access Management (IAM)

Acts as a barrier between client applications and data stored in Active Directory, preventing direct access while providing real-time access when needed.

OptimalCloud

Identity & Access Management (IAM)

Cloud-based Identity and Access Management solution delivering scalable and affordable identity and access management for today's business security and usability needs.

Optimal PeoplePicker for SharePoint

Identity & Access Management (IAM)

Re-enables search capability for SharePoint when using federated claims authentication and allows users to locate and select individuals and groups from on-premises directories.

Virtual Identity Server

Identity & Access Management (IAM)

Universal directory solution that provides a single, real-time view of identity data from any data store and acts as an LDAP proxy firewall.

VIS for Office 365

Identity & Access Management (IAM)

Extends Office 365 with multi-forest, multi-platform, two-factor authentication and Denial of Service prevention and detection capabilities.

VIS for SharePoint

Identity & Access Management (IAM)

Extends SharePoint functionality to create a more secure, manageable environment and enhance authentication and authorization across multiple Active Directory forests.

Orca Security

Cloud Security / CSPM

We're on a mission to provide the world's most comprehensive cloud security platform while adhering to what we believe in: frictionless security and contextual insights, so you can prioritize your most critical risks and operate in the cloud with confidence.

AI AppGen Security

Cloud Security / CSPM

Keep shadow AI applications visible, compliant, and secure across AI app generator platforms.

Code Securely

Container Security / CNAPP

Scan code, IaC, containers, and secrets agentlessly and prioritize findings by real cloud exposure.

Protect Workloads

Cloud Workload Protection (CWPP)

Secure containers, Kubernetes, VMs, serverless, and APIs agentlessly with runtime risk traced back to code origins.

Reduce Cloud Risk

Cloud Security / CSPM

Unify CSPM, CIEM, vulnerability management, workloads, and compliance in one platform so security teams can act on real risk.

Secure AI

Cloud Security / CSPM

Discover every AI asset in your cloud, monitor runtime activity, and connect data security to AI risk with no agents and no blind spots.

ORION Security

Data Security Posture Management (DSPM)

We believe organizations should be able to trust their data in motion. Not by locking it down, slowing people down, or writing endless rules, but by understanding where data is going, how it is being used, and when movement becomes risk.

Cloud

Cloud Security / CSPM

Cloud and runtime security with code-level context for applications deployed in cloud environments.

P0 Security

CIEM

P0 Security provides a cloud identity security platform that focuses on eliminating standing privileges through JIT (Just-in-Time) access and least-privilege enforcement. The solution automates the governance of human, workload, and AI agent identities across multi-cloud environments, ensuring that high-risk access is ephemeral and strictly vetted. It replaces traditional static PAM for cloud environments and complements CSPM by securing the identity layer.

P0 Security for Users

Identity & Access Management (IAM)

Dynamic, policy-driven authorization that enables developers to request access when needed with just-enough privilege, just-in-time, replacing static credentials and manual approval processes.

P

Prisma Cloud

Cloud Security / CSPM

Palo Alto Networks Prisma Cloud is a cloud security posture management (CSPM) platform that provides agentless visibility and misconfiguration detection across AWS, Azure, and GCP. It delivers continuous asset inventory, configuration assessment against 3,000+ built-in policies, and compliance monitoring across 100+ frameworks including CIS, NIST, PCI-DSS, and SOC 2. The platform correlates misconfigurations with vulnerabilities and excessive permissions to identify attack paths. Prisma Cloud is positioned for enterprises managing hybrid and multicloud infrastructure at scale, with FedRAMP Moderate authorization available for government use.

Cloud Security

Cloud Security / CSPM

Autonomous security platform that identifies vulnerabilities in cloud environments by mapping every resource across AWS, Google Cloud, and Azure, and tracing real attack paths.

Discover

Identity & Access Management (IAM)

Identity inventory and visibility tool that provides comprehensive discovery and classification of human, non-human, and AI identities across cloud and on-premises environments.

Risk Score Engine

Identity & Access Management (IAM)

Quantifies identity risk across human, non-human, and AI identities by tracking behavior, likelihood of compromise, and potential business impact in a single, explainable score.

Persona

Identity & Access Management (IAM)

Persona provides an identity verification (IDV) platform that automates the collection and verification of government IDs, biometrics, and behavioral data throughout the employee and customer lifecycle. It integrates directly into existing IAM platforms and HRIS systems to provide high-assurance identity proofing without requiring a full infrastructure overhaul. The tool replaces manual verification processes with automated, compliant workflows that reduce friction while enhancing security.

Ping Identity

Identity & Access Management (IAM)

Ping Identity provides an enterprise IAM platform with PingOne for cloud-native deployments, PingFederate for federated SSO using SAML and OIDC, and hybrid support across on-premises and cloud environments. It processes 200M daily logins for over 60% of Fortune 100 companies, offering Zero Trust architecture through adaptive MFA via PingID, passwordless FIDO2/WebAuthn with YubiKey and platform authenticators, and policy-based authorization with PingAuthorize using ABAC. Best suited for large enterprises needing scalable identity governance, API access control via PingAccess, and directory services with PingDirectory for millions of identities.

Plerion

Cloud Detection & Response (CDR)

We simplify cloud security

An AI identity agent that automates access control tasks, handling requests, reviews, and revocations, rather than merely suggesting them.

Polar Security

Data Security Posture Management (DSPM)

Polar Security is a DSPM vendor focused on discovering, classifying, and mapping sensitive data across cloud and SaaS environments, including shadow data. IBM acquired Polar Security to add DSPM capabilities to its Guardium portfolio, which suggests Polar’s market role was as an early specialist in cloud data discovery and data-flow visibility rather than a broad security platform. It is best suited for security teams that need agentless visibility into where sensitive data resides, how it moves, and who can access it across cloud stores and SaaS applications.

DSPM Platform

Data Security Posture Management (DSPM)

Agentless data security posture management platform that automatically discovers, classifies, and maps sensitive data across cloud and SaaS environments

Port0 is a network security platform with an integrations hub and connector framework, but the available public material does not show a dedicated Identity & Access Management (IAM) product. For an IAM buyer, it appears best fit only where identity data, access signals, or directory-related context need to be connected into a broader security graph. Its published content emphasizes integrations, live querying, and data fusion rather than core IAM functions such as SSO, provisioning, or MFA.

RADIUS

Identity & Access Management (IAM)

Cloud-hosted RADIUS authentication service with identity-based network access, certificate-based access and automation, 802.1X/MAB/passwordless authentication support.

Primary

Identity & Access Management (IAM)

A Zero Trust Data Control Plane built from the ground up with the cybersecurity and encryption tools demanded by companies of all sizes.

Data Control Layer

Data Security Posture Management (DSPM)

The Data Control Layer™ for the AI Era - providing data tokenization, distributed storage, and contextual authorization

365 Total Protection

Cloud Security / CSPM

AI-powered Microsoft 365 security suite combining email protection, data backup, compliance management, and security awareness training.

Data Security Posture Management

Data Security Posture Management (DSPM)

Discover, classify, and govern sensitive data at scale across cloud and hybrid environments using AI-powered, agentless scanning.

Prowler

Cloud Security / CSPM

Building a transparent, open, secure future.

Prowler Cloud

Cloud Security / CSPM

The Agentic Cloud Defender - a managed SaaS platform for continuous cloud security monitoring and compliance automation across multi-cloud environments.

Prowler OSS

Cloud Security / CSPM

The most widely adopted open-source cloud security tool with hundreds of auditable security checks across multi-cloud platforms and framework alignment.

TotalCloud

Container Security / CNAPP

Cloud-native application protection platform for securing cloud infrastructure and SaaS environments

InsightCloudSec

Cloud Security / CSPM

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers.

FusionID

Identity & Access Management (IAM)

Acts as an identity registrar, cleaning, matching, and governing identity data at the source so every downstream system works correctly.

RapidIdentity Lifecycle

Identity & Access Management (IAM)

Automates provisioning, deprovisioning, account changes, credential monitoring and access management for educational institutions at scale.

Threat Detection & Response

Cloud Detection & Response (CDR)

Prioritizes and contextualizes security alerts for action

Relyance AI

Data Security Posture Management (DSPM)

To secure the future of data-driven enterprises by making every data journey visible, controlled, and compliant, from the first line of code to the final AI output.

Data Security Posture Management

Data Security Posture Management (DSPM)

Continuously discovers and classifies sensitive data, tracks data flows between systems, maps access permissions, and enforces automated policy controls across cloud environments.

Resourcely

Cloud Security / CSPM

Resourcely enables platform, security, and DevOps engineering teams to offer simple self-service to their developers. Self-service allows developers to move at the speed of the cloud while ensuring that best practices are met. Resourcely guardrails ensure infrastructure is set up correctly the first time, reducing fix campaigns and vulnerability management toil.

Row Zero

Data Security Posture Management (DSPM)

We believe in the spreadsheet

ID Plus

Identity & Access Management (IAM)

Cloud identity and access management platform delivering complete authentication and access capabilities for government, finance, and high-assurance organizations operating across cloud, hybrid, and on-premises environments.

SecurID

Identity & Access Management (IAM)

On-premises authentication and identity management solution designed to secure access for financial services, government agencies, and other high-assurance organizations.

DataProbeETL

Data Security Posture Management (DSPM)

Data discovery and integration platform that extracts, consolidates, and analyzes data from multiple systems to detect access risks.

Cloud Infrastructure Entitlement Management

CIEM

Simplifying cloud governance by extending identity security to cloud infrastructure and governing cloud entitlements across multi-cloud environments

Data Access Security

Data Security Posture Management (DSPM)

Govern and secure access to sensitive data for humans and machines, enabling secure AI-powered business

Application Access Governance

Identity & Access Management (IAM)

Implement AI-driven app governance to secure critical apps, cut compliance costs, and prevent fraud.

External Identity Management

Identity & Access Management (IAM)

Simplify and accelerate secure access for external identities such as contractors, vendors, and temporary employees.

aiSIEM CGuard

Cloud Detection & Response (CDR)

Next-generation cloud security platform delivering unified visibility, automated response, and complete protection across Microsoft 365, Azure, AWS, and GCP

SANER Cloud

Cloud Workload Protection (CWPP)

AI-fortified Cloud Native Application Protection Platform that unifies posture, identity permissions, anomalies, and asset exposure across cloud infrastructure.

Sectona

Identity & Access Management (IAM)

Sectona provides a modern infrastructure access layer for the new-age workforce to build, confidently access, and operate faster, more secure technology environments. As a leader in Privileged Access Management (PAM), Sectona helps mitigate the risk of privileged account abuse. Its integrated platform simplifies password and privilege management, enables just-in-time access, and enhances endpoint and remote security.

B2B Authority

Identity & Access Management (IAM)

Partner and supplier identity management designed to manage intricate partner ecosystems with enterprise-grade identity controls.

Workforce Authority

Identity & Access Management (IAM)

Employee identity and secure access providing modern access management that anticipates compromise and adjusts dynamically.

CMDB & BIA

Cloud Security / CSPM

Unified platform for security operations teams that consolidates asset inventory and business impact analysis to provide complete visibility of cyber infrastructure and detect threats faster.

Securiti AI

Data Security Posture Management (DSPM)

At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.

Data Security Posture Management

Data Security Posture Management (DSPM)

Secure sensitive data everywhere from hybrid multicloud to SaaS

Segura

Identity & Access Management (IAM)

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

Cloud Entitlements

CIEM

Provides maximum visibility and control over permissions in multi-cloud environments by discovering, managing, and securing IAM entitlements.

Cloud Entitlements

CIEM

A Cloud Infrastructure Entitlements Management solution that delivers maximum visibility and control over permissions in multi-cloud environments (AWS, Azure, GCP, Oracle Cloud).

Singularity Cloud

Cloud Security / CSPM

Secure the Cloud That Runs Your AI, defending production workloads, cloud and AI infrastructure, and data stores.

Sentra

Data Security Posture Management (DSPM)

Sentra operates at the intersection of data, AI, and security, the three disciplines no prior platform was built to address simultaneously. One platform. Continuous AI data readiness and governance at enterprise scale and speed.

Data Security Platform

Data Security Posture Management (DSPM)

Continuous discovery, classification, hygiene, and access governance at petabyte scale to make data AI ready

Skyhawk Security

Cloud Detection & Response (CDR)

Skyhawk Security offers a cloud-native platform focused on preemptive threat detection and automated incident response through its AI-based 'Purple Team' engine. It contextualizes cloud security events and CSPM alerts to eliminate alert fatigue and identify actual runtime threats before they lead to data breaches. The platform integrates with existing cloud logs and security tools to provide a unified view of exposure and active threats across Multi-cloud environments.

Cloud-Native Application Protection Platform

Container Security / CNAPP

Enables organizations to secure cloud-native applications and infrastructure for their DevOps teams by identifying hidden risks from misconfigurations, threats, and vulnerabilities across cloud environments.

Data Security Posture Management

Data Security Posture Management (DSPM)

Provides a unified solution for managing and securing your organization's data assets by combining intelligent data classification with real-time policy enforcement across hybrid and multi-cloud environments.

Smallstep

Identity & Access Management (IAM)

Smallstep provides a Device Identity Platform that enables high-assurance Zero Trust security through automated, short-lived PKI certificates and device-bound authentication. It streamlines authentication workflows to eliminate phishing risks and password dependency by ensuring only managed, healthy devices can access sensitive resources. The solution replaces legacy static credential systems and complements existing SSO providers with granular device-level visibility.

Container

Container Security / CNAPP

Snyk Container is a developer-first container and Kubernetes security platform that scans container images, base image dependencies, and Kubernetes workload configurations for vulnerabilities. It integrates across the SDLC from IDE and Git through CI/CD pipelines and container registries (Docker Hub, ECR, ACR, GCR, Artifactory, Harbor, Quay). The platform prioritizes vulnerabilities using runtime data and exploit maturity signals, then provides automated remediation including base image upgrade recommendations. Best suited for DevSecOps teams seeking to shift container security left while maintaining continuous monitoring of deployed workloads.

Infrastructure as Code

Cloud Security / CSPM

Find and fix misconfigurations in your infrastructure as code before they reach production by scanning Terraform, CloudFormation, Kubernetes, and other IaC formats within development workflows.

Sonrai Security

CIEM

Sonrai Security provides a CIEM platform that analyzes identities, entitlements, and resource relationships across AWS, Azure, and GCP to identify excessive access and misconfigurations. It uses an identity graph to map effective permissions and toxic permission combinations, enabling cloud security, IAM, and compliance teams to discover privilege risks and enforce least privilege. The Cloud Permissions Firewall automates real-time restriction of unused permissions and dormant identities based on actual usage. Extended with CWPP via Sonrai Dig, it links workload vulnerabilities to identity paths for prioritized remediation, distinguishing it from visibility-only CIEM tools.

Cloud Optix

Cloud Security / CSPM

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

(Cloud Workload Protection)

Cloud Workload Protection (CWPP)

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

Spikerz

Identity & Access Management (IAM)

Spikerz is the digital marketing security platform built for modern brands, marketing teams, and security leaders.

Account Takeover Protection

Identity & Access Management (IAM)

Eliminates shared credentials, locks down 2FA, and gives marketing teams secure access while detecting both internal and external security threats to social accounts

Permissions Management

Identity & Access Management (IAM)

Gives complete visibility and control over who can access social media accounts across multiple platforms in a centralized dashboard

Spirion

Data Security Posture Management (DSPM)

In a world that relies more and more on data, understanding and protecting it is crucial. That's why at Spirion, we're dedicated to helping organizations around the world protect their most sensitive information.

Sensitive Data Manager

Data Security Posture Management (DSPM)

On-premises solution for scanning, classifying, and remediating sensitive data to comply with privacy regulations and protect against data breaches.

Sensitive Data Platform

Data Security Posture Management (DSPM)

Privacy-Grade data discovery and purposeful classification in a highly scalable SaaS hybrid architecture for scanning, classifying, and remediating sensitive information.

Spyderbat

Cloud Detection & Response (CDR)

Threat Detection, Investigation, and Response for Cloud, Kubernetes, and Linux

Spyderbat Platform

Cloud Detection & Response (CDR)

Spyderbat is a cybersecurity platform that uses eBPF technology to deliver cloud-native detection and response capabilities across hybrid and multi-cloud environments.

Stack Identity

CIEM

Stack Identity provides a unified identity access risk management platform with integrated CIEM and ITDR for human and machine identities across multi-cloud and multi-SaaS environments. It delivers asset inventory, lifecycle management, observability, and remediation for cloud identity and database entitlements. The platform continuously monitors for identity posture risks, account takeovers, privileged access abuse, and lateral movement threats, mapping pathways to ransomware and data exfiltration. Best suited for enterprises needing to consolidate CIEM, IGA, and ITDR workflows with real-time risk context and integrations like Jira, Slack, PagerDuty, SIEM, and SOAR.

Stackrox by Red Hat (OpenShift Container Security)

Container Security / CNAPP

We work alongside a global community of contributors, customers, and partners to bring the best ideas to life. This process delivers flexible hybrid cloud solutions, like Linux®, AI, virtualization, and automation, giving critical organizations the consistency, choice, and control to innovate with confidence.

S

Stream.Security

Cloud Detection & Response (CDR)

StreamSecurity.com helps you spot risk, get matched with vetted security professionals, and harden what matters, without the jargon.

KubeStudio

Container Security / CNAPP

Rust-native Kubernetes client and dashboard enabling fast cluster management, debugging, team collaboration, and direct integration with Strike48 autonomous agents.

StrongDM

Identity & Access Management (IAM)

Delinea and StrongDM extend privileged access management into a continuous, real-time authorization model, with a single identity security control plane.

S

Stytch

Identity & Access Management (IAM)

Stytch is on a mission to help developers protect their applications and make auth that's simple and scalable so that teams can stay focused on building differentiated products.

S

SubImage

Cloud Security / CSPM

SubImage is an open-core cloud security graph product that maps infrastructure across cloud and on-prem environments and presents CSPM-style posture checks through a queryable graph. In the CSPM scope, it focuses on agentless discovery, misconfiguration detection, compliance mapping, and attack-path analysis so teams can see which issues create real exposure. It appears best suited for security teams that want graph-based context and precise remediation guidance rather than a standalone checklist scanner. The vendor also references CNAPP and PAM capabilities, but its core CSPM value is posture visibility and path-based prioritization.

S

Agentic Vulnerability Remediation

Container Security / CNAPP

AI-powered system that identifies critical security vulnerabilities in container images and automatically creates prioritized, actionable remediation plans.

S

AI Asset Inventory

Cloud Security / CSPM

Discovers and manages infrastructure assets including AI agents, models, and cloud resources through a graph-based system.

S

CSPM

Cloud Security / CSPM

Runs cloud security posture checks and prioritizes remediation based on actual risk on dangerous paths.

S

Logs for Security

Cloud Security / CSPM

Integrated cloud security platform designed to secure, comply, and respond by collecting and analyzing cloud-specific logs to detect infrastructure risks and enable rapid incident investigation.

S

Sweet Security

Container Security / CNAPP

Sweet Security is redefining enterprise cloud protection. As the leading provider of Runtime CNAPP and AI Security solutions, Sweet unifies runtime context with advanced AI intelligence to protect the modern enterprise.

S

Cloud Detection & Response

Cloud Detection & Response (CDR)

A runtime cloud protection platform that consolidates threat detection and response across cloud environments using AI-powered analysis and behavioral baselines.

S

Cloud Security Posture Management

Cloud Security / CSPM

A cloud security solution that combines runtime security insights with traditional posture management to manage real-time posture changes, remediate misconfigurations, and meet compliance standards.

S

Runtime CNAPP

Container Security / CNAPP

A cloud protection platform that unifies insights from applications, workloads, and cloud infrastructure to identify and resolve security threats quickly.

S

Sysdig

Container Security / CNAPP

Cloud security with zero compromise.

S

GenAI Assistant

Cloud Detection & Response (CDR)

A purpose-built AI tool that delivers conversational, contextual guidance to accelerate cloud security investigation and response by understanding your environment.

S

Secure

Container Security / CNAPP

The real-time cloud defense platform that combines AI-powered protection with runtime insights for prevention, detection, and response across cloud environments.

S

Syteca

Identity & Access Management (IAM)

Intelligent PAM with built-in ITDR

T

Teleport

Identity & Access Management (IAM)

We deliver trusted computing to modern infrastructure

T

OneWelcome Identity Platform

Identity & Access Management (IAM)

Unified cloud-based platform that manages customer, business, gig worker, and workforce identities while balancing security with user convenience.

T

Tigera Calico

Container Security / CNAPP

Secure your Kubernetes workloads. Govern your AI agents.

T

Calico

Container Security / CNAPP

Networking, network security, and observability that works across any Kubernetes distribution, trusted and proven in over 1 million clusters globally.

T

Calico Cloud

Container Security / CNAPP

Fully-managed SaaS solution providing unified network security and observability for any Kubernetes distribution in the cloud, on-premises or at the edge.

T

Calico Enterprise

Container Security / CNAPP

Self-managed deployment providing unified network security and observability solution for any Kubernetes distribution in the cloud, on-premises or at the edge.

T

HelloID

Identity & Access Management (IAM)

Cloud-based Identity and Access Management solution that automates user lifecycle management, access control, and identity governance with integrated provisioning, service automation, access management, and governance modules.

T

NIM

Identity & Access Management (IAM)

On-premises enterprise Identity and Access Management solution designed for complex, large-scale environments with powerful customization, unlimited scalability, and support for 150+ system integrations.

T

Mosaic User Management

Identity & Access Management (IAM)

Cloud-native solution to manage and unify user identities at scale

T

Cloud One

Cloud Security / CSPM

Trend Micro Cloud One is Trend Micro’s cloud security platform with a CSPM-focused posture offering for AWS, Azure, and GCP environments. In this category, it is centered on detecting misconfigurations, mapping cloud resource exposure, and validating configurations against compliance baselines. It is a fit for security teams that want posture management tied to a broader cloud security vendor, especially organizations already using Trend Micro for cloud or endpoint controls. Cloud One also includes adjacent services such as workload and container security, but those are separate capabilities from its CSPM function.

Cloud One - Container Security

Container Security / CNAPP

Trend Micro Cloud One - Container Security, part of Trend Vision One™, provides container image scanning via Trend Micro Artifact Scanner (TMAS) for vulnerabilities, malware, secrets, keys, and compliance issues in CI/CD pipelines. It enforces policy-based admission control through native Kubernetes integration, blocking deployments based on scan results and pod properties. Runtime protection includes detection and response for workloads in Kubernetes clusters. Suited for enterprises running containerized applications on Kubernetes, integrating with Deep Security for comprehensive coverage from build to runtime.

Cloud Security

Cloud Security / CSPM

Protect cloud infrastructure and workloads with comprehensive visibility and control across multiple cloud environments

T

Container Security

Container Security / CNAPP

Simplifies image scanning, monitors Docker environments, and helps resolve vulnerabilities

T

Tufin

Cloud Security / CSPM

Tufin is best known for network security policy orchestration, but its cloud security offering extends that policy management model into public cloud environments. In the Cloud Security/CSPM scope, it provides visibility into cloud assets, security groups, firewalls, and access paths across AWS, Azure, and Google Cloud, with misconfiguration detection and compliance validation. It is a fit for teams that want cloud posture findings tied to network policy and change workflows, especially in hybrid environments where on-prem and cloud controls are managed together. Adjacent CIEM and DSPM content exists, but they are separate capabilities.

T

Turbot

Cloud Security / CSPM

Turbot offers an automated cloud governance and remediation platform that enforces real-time guardrails across AWS, Azure, and GCP. It differentiates itself from traditional CSPMs by moving beyond simple alerting to active prevention and auto-remediation of misconfigurations. The platform manages cloud infrastructure drift and ensures compliance with frameworks like CIS, NIST, and HIPAA through programmable policy-as-code.

T

Guardrails

Cloud Security / CSPM

Real-time cloud governance platform that automatically detects and remediates cloud misconfigurations across multiple cloud providers through event-driven automation and policy-driven remediation.

T

Pipes

Cloud Security / CSPM

Cloud intelligence and security platform that enables users to query and visualize cloud security posture using SQL, functioning as a PostgreSQL database for direct querying of cloud infrastructure data.

U

Runtime Data Security Platform

Data Security Posture Management (DSPM)

The runtime data security platform that combines identity-driven data protection across enterprise environments.

Digital Identity and Access Management

Identity & Access Management (IAM)

Identity-centric security approach with passwordless authentication, single sign-on, role-based access controls, and gap analysis to mitigate insider threats

U

Unixi

Identity & Access Management (IAM)

Unixi is an IAM vendor focused on extending single sign-on and access control to browser-based SaaS applications that traditional SAML/SCIM integrations do not cover. Its platform is positioned around "universal SSO" for unmanaged apps, with emphasis on passwordless authentication, SaaS discovery, and role- or group-based access control. It is best suited to organizations that have significant shadow SaaS, shared accounts, or app sprawl and want to reduce dependence on per-application integrations while keeping an existing IdP such as Okta or Microsoft Entra.

U

Access Management

Identity & Access Management (IAM)

Enable central control over app access and permissions for unmanaged applications without API integrations.

U

Discovery

Identity & Access Management (IAM)

Map identities and uncover Shadow SaaS applications bypassing IT oversight through browser-based visibility.

U

Lifecycle Management

Identity & Access Management (IAM)

Automate user provisioning and deprovisioning across SaaS applications with centralized inventory management.

U

Risk Analysis

Identity & Access Management (IAM)

Surface security threats including weak passwords, credential reuse, and anomalous login patterns.

U

Shadow AI Governance

Identity & Access Management (IAM)

Detect unauthorized AI tool adoption and enforce access controls to prevent corporate data exposure.

U

Universal SSO

Identity & Access Management (IAM)

Enable single sign-on for any browser-based SaaS application without integrations or passwords.

Uptycs

Cloud Security / CSPM

Uptycs offers CSPM as part of its broader cloud security platform, focused on continuously inventorying cloud assets, detecting misconfigurations, and mapping them to compliance requirements. In this category, it is aimed at teams operating AWS, Azure, and GCP environments that need posture monitoring, drift detection, and audit-ready evidence for standards such as CIS, PCI-DSS, SOC 2, HIPAA, and ISO 27001. Uptycs also exposes attack-path and exposure analysis to help prioritize cloud configuration issues, but its CSPM profile should be viewed as one component of a larger CNAPP portfolio rather than a standalone niche tool.

CNAPP

Container Security / CNAPP

Cloud Native Application Protection Platform that consolidates cloud security with unified discovery, prevention, and response capabilities across workloads, containers, and Kubernetes environments.

U

Upwind

Container Security / CNAPP

Upwind is a runtime-powered Cloud Native Application Protection Platform (CNAPP) that consolidates vulnerability management, CSPM, DSPM, container security, CWPP, CDR, API security, and identity security into a unified platform. The vendor uses eBPF sensors and agentless deployment to provide real-time threat detection across VMs, containers, and serverless workloads. Upwind targets enterprises securing cloud-native infrastructure from development through production, emphasizing runtime context and application-layer behavior analysis for faster incident response.

V

Personnel and Access

Identity & Access Management (IAM)

Centralizes personnel management, access control, and device security to streamline onboarding/offboarding and maintain audit-ready compliance.

Varonis

Data Security Posture Management (DSPM)

Varonis is a data security platform vendor positioned in DSPM for enterprises that need to find, classify, and control sensitive data across cloud, SaaS, and on-premises stores. Within DSPM, it emphasizes data discovery, permission and exposure analysis, sensitive data flow visibility, and automated remediation of risky access paths. Varonis is best suited for security teams managing large, mixed data estates in Microsoft 365, file shares, databases, and cloud object storage. Its broader platform also includes adjacent insider risk and threat detection capabilities, but the DSPM scope centers on data posture and exposure reduction.

Data Security Platform

Data Security Posture Management (DSPM)

Continuously discovers what data exists, classifies it, right-sizes permissions, and monitors everything in real time.

V

Venice

Identity & Access Management (IAM)

Venice was founded to make PAM work - today.

V

Container Security

Container Security / CNAPP

Inspects and corrects container images and Infrastructure as Code files to detect vulnerabilities, misconfigurations, and exposed secrets across containerized development.

CloudGuard

Cloud Security / CSPM

Cloud security and workload protection platform for securing cloud infrastructure and applications.

V

Omnissa Access

Identity & Access Management (IAM)

Simplify identity and access management by enforcing access based on device posture and user identity.

W

IDaaS

Identity & Access Management (IAM)

Streamlines access, fortifies security, and elevates user experience across in-house or cloud applications through Single-Sign-On, Multi-Factor Authentication, and Zero Trust frameworks.

W

ONE

Identity & Access Management (IAM)

A security-on-demand SaaS platform that provides identity and access management services with zero-trust security capabilities.

CloudDR

Cloud Detection & Response (CDR)

Cloud detection and response for discovering and responding to cloud application risks

W

Wiz

Cloud Security / CSPM

Wiz is a cloud security posture management (CSPM) platform that detects and remediates misconfigurations across multi-cloud environments (AWS, Azure, GCP) and infrastructure-as-code templates. The platform uses agentless API-based scanning to inventory cloud assets and correlate risks across network exposures, secrets, vulnerabilities, and identities via a graph-based engine. Wiz is positioned as a modern CSPM alternative to legacy point tools, ranked among top CSPM solutions for enterprises managing complex cloud deployments.

W

Cloud

Cloud Security / CSPM

Provides agentless visibility across cloud infrastructure including PaaS, virtual machines, containers, serverless functions, and repositories.

W

Defend

Cloud Detection & Response (CDR)

Delivers runtime threat detection and response using the Wiz Sensor for real-time protection against cloud and AI-native threats.

W

Agent ID

Identity & Access Management (IAM)

An identity and access management solution providing first-class identity for AI agents with context-aware policies and secure Model Context Protocol interactions.

W

Identity Server

Identity & Access Management (IAM)

The developer-first identity and access management platform designed to secure humans, apps, and AI agents everywhere with an API-first architecture.

W

Security Token Service

Identity & Access Management (IAM)

A specialized token engine serving as a central trust anchor that exchanges, transforms, and brokers identities across any domain to secure microservices, APIs, and AI agents.

X

Cloud Exposures

Cloud Security / CSPM

Identifies and eliminates validated attack paths across cloud environments within hybrid infrastructure.

Z

Compromised Credential Monitoring

Identity & Access Management (IAM)

Continuously scans stealer markets and dark web forums to detect exposed employee, executive, and vendor credentials, enabling security teams to respond before attackers exploit them.

Z

Identity Segmentation

Identity & Access Management (IAM)

Restrict Admin & Service Account Access to Operational Needs Only - automatically discovers and restricts privileged accounts, service accounts, and admin access to operational needs while enforcing multi-factor authentication on sensitive logons.

Z

ZEST Security

Cloud Security / CSPM

With ZEST, it’s not about opening tickets; it’s about closing them. ZEST offers an Agentic Exposure Management platform that redefines how security teams resolve vulnerabilities and misconfigurations. The platform leverages AI Agents to automatically map risks to high-impact resolution pathways that remediate, mitigate, and prevent exposure at a scale and speed not previously possible.

Z

Zoho Vault

Identity & Access Management (IAM)

Zoho Vault is Zoho’s cloud password manager positioned for identity and access management use cases centered on credential storage, controlled sharing, and single sign-on. In IAM terms, it is best suited for small to mid-sized organizations that want to manage privileged and team passwords alongside basic access controls without deploying a separate identity suite. The product exposes SAML-based SSO, MFA, password policies, access restrictions, emergency access, and audit trails. Zoho also bundles Vault with adjacent IAM functions in Zoho Directory and Zoho Workplace, but Vault itself focuses on credential-centric access administration.

Z

Directory

Identity & Access Management (IAM)

Identity and access management for organizational user management

Z

Zero Trust Cloud

Cloud Workload Protection (CWPP)

Cloud-native platform that transforms workload security from firewalls to zero trust with threat protection, lateral movement prevention, and microsegmentation