AI security posture (AI-SPM)

Automated vulnerability detectionCustom security boundary testing+4

the pioneering GenAI bug bounty platform designed to safeguard the future of artificial intelligence

42Crunch

MCP DiscoveryMCP Inventory+10

42Crunch is the API and MCP security governance company. We help enterprises secure every interface their applications and AI agents depend on, from REST and GraphQL APIs to the Model Context Protocol (MCP) servers that give agents access to business systems. Our approach is contract-first. A machine-readable contract defines what each API or MCP server is allowed to do, and every audit, scan and runtime decision is checked against it. The result is security that developers can act on early, and evidence that auditors can rely on later. API Security Platform Audit: scores OpenAPI and GraphQL contracts at design time, with fixes inside the developer's IDE. Scan: tests live APIs for OWASP API Top 10 vulnerabilities and contract drift. Protect: enforces the contract at runtime with a lightweight micro API firewall. Govern: Security Quality Gates in CI/CD hold every team to the same standard. MCP Security Governance AI agents now call tools on their own, and unregistered MCP servers create shadow paths around enterprise controls. 42Crunch extends the same Contract, Audit, Scan and Protect model to MCP: it discovers MCP servers, generates a contract for each, scores their posture, tests them for OWASP MCP Top 10 risks such as tool poisoning, rug pulls and excessive permissions, and blocks non-compliant servers in CI/CD. Compliance evidence built in Scoring is deterministic, not judged by an LLM, so the same server or API always gets the same result. Findings map to NIST AI RMF, OWASP MCP Top 10, the EU AI Act, ISO/IEC 42001 and the CSA AI Controls Matrix, and every decision produces a versioned record that exports for auditors, regulators and customer security reviews. Built for how teams already work 42Crunch runs in developer IDEs, CI/CD pipelines and AI coding assistants such as GitHub Copilot, and integrates with Microsoft Defender for Cloud and Microsoft Sentinel. It is trusted by banks, fintechs, telcos and enterprises, and 42Crunch is ISO/IEC 27001 certified.

Security Awareness & Phishing Simulation

Adaptive Security

AI-driven security awareness trainingRealistic attack simulations+8

Unified security awareness training, email security, and AI governance built for the AI era.

AIBound

AI asset discovery and inventory+10

Your Control Plane for Secure AI

Aim Security (Cato Networks)

Continuously discover AI assets+9

Aim Security provides AI security posture management and runtime protection for enterprise GenAI deployments.

Airrived

AI Security Posture Management (AI-SPM)+8

The Agentic OS for the enterprise. Redefining how organizations run cybersecurity, IT, and business operations in the agentic era, by making intelligence native, not bolted on.

AiStrike

AI asset discovery and inventory+10

The AI-native security operations platform built for enterprise. Preemptive, autonomous, and continuously self-improving.

Akto

Automated AI asset discovery+4

The Enterprise Platform for AI Security & Governance

Alice

AI application risk testingRuntime guardrail enforcement+3

Keeping communicative tech safe, secure, and reliable.

AnyInsight.ai

Continuous discovery of AI assets+6

AnyInsight.ai is a Zero Trust platform designed to secure the deployment of GenAI agents within the enterprise.

AppOmni

SSPM

Agentless SaaS configuration monitoring+11

AppOmni is positioned as a SaaS Security Posture Management (SSPM) platform, not a traditional multi-cloud CSPM vendor.

AQtive Guard by SandboxAQ

AI inventory and bill of materials+5

AQtive Guard by SandboxAQ is a specialized security platform focusing on cryptographic discovery and AI risk management in the face of quantum computing threats.

ArmorCode is redefining security governance in the AI era as the agentic control plane for Unified Exposure Management.

Artemis is a specialized AI Security Posture Management (AI-SPM) platform focused on discovering, inventorying, and securing AI models, datasets, and notebooks across cloud environments.

Aurascape

To enable businesses to innovate fearlessly in the age of AI by transforming how they safeguard themselves with the world's most advanced AI security platform.

Aurva

Runtime monitoring for AI stack+9

Aurva provides a runtime security layer specifically designed for agentic AI architectures and LLM-driven workflows.

Backslash Security

ASPM

Reachable package vulnerability analysis+10

The Security Platform for The New Agentic AI Fabric.

Barndoor AI

AI asset discovery and inventory+7

Barndoor is one platform for AI access, safety, and control.

BeyondGuard

AI agent discovery and inventory+8

BeyondGuard is the control plane for enterprise AI security. Inspecting every prompt, enforcing every policy, and auditing every decision your AI makes. AI security you can prove.

Bifrost (by Maxim AI)

Unified multi-provider AI routingGateway-layer content guardrails+10

At Maxim, we are building an enterprise-grade AI evaluation and observability platform to empower developers to ship their applications with quality, reliability, and speed.

Bishop Fox (CAST)

EASM

Human-led exposure validation+10

Staying ahead of attackers requires thinking like one. Our offensive security approach adapts to today's evolving threats, helping you find and fix vulnerabilities before they become incidents.

BotCity

No verified AI-SPM capability found+5

BotCity Sentinel provides full visibility and governance for Python and AI running on endpoints.

CalypsoAI (F5)

Runtime prompt injection blocking+8

CalypsoAI, acquired by F5 in 2025 and rebranded as F5 AI Guardrails (formerly Inference Defend), delivers runtime security for AI models, agents, and applications.

Capsule Security

Enterprise AI agent runtime security+10

Capsule Security provides runtime security for AI agents. Using patented fine-tuned small language models, Capsule monitors autonomous AI agents in real time, detecting and stopping risky behavior before damage is done.

Cranium

AI asset discovery and inventory+6

Born from KPMG Studio, Cranium gives enterprise teams one place to discover, observe, govern, secure and prove every AI and agentic system they build, buy or rely on, so innovation never outruns trust.

Cycode

Software Supply Chain & SBOM

AI Writes The Code. We Secure And Govern It.

Cyera

DSPM

DataSunrise Data and AI Security

Cyera is a pioneer in the data security space that empowers security leaders to discover their data attack surface, control the use of data, monitor, detect, and quickly remediate risk.

+10

DSPM

Support SQL and NoSQL platforms+10

DataSunrise provides a unified platform for database security, auditing, and vulnerability management across heterogeneous database environments.

DeepKeep

Discovers AI modelsnotebooksdatasets+21

8 products

DeepKeep is a model agnostic AI security platform

Dynamo Ai

Dynamo AI specializes in the governance and security of Large Language Models (LLMs) and Generative AI agents.

FireTail

Continuous AI Discovery and InventoryShadow AI Usage Discovery+7

One platform to discover, assess, and protect all AI usage across your organization. FireTail gives you complete coverage across every employee, browser, device, application, and agent.

Gray Swan

Automated adversarial testingContinuous vulnerability probing+4

Gray Swan is an AI security vendor best known for adversarial red-teaming and continuous testing of AI applications, with a separate runtime protection product.

Groovy Security

Whiteout AI: Shadow AI discovery+8

Groovy Security helps enterprises adopt AI without losing control of their data, an AI Security Posture Management (AI-SPM) and GenAI data-protection platform built for complete visibility and inline control.

Harmonic Security

Discover AI usage and assets+9

Harmonic provides the control layer for the AI-first workforce. We empower confident adoption that secures the business without slowing down employees.

Harness

Harness aims to enable every software engineering team in the world to deliver code reliably, efficiently and quickly to their users.

Helmet Security

AI asset discovery and inventory+11

We are a team of security engineers and GRC experts dedicated to making agentic workflows safe for enterprise.

HiddenLayer

Agent runtime visibility+10

At HiddenLayer, we believe AI's success depends on security. Founded by security researchers who uncovered the first-ever AI-specific malware, we've built a company dedicated to protecting the next era of intelligent systems.

Kindo

AI application and agent inventory+6

Kindo offers an enterprise-grade AI governance and orchestration platform that provides a control plane for LLM usage and agentic workflows.

Knostic

AI/MLOps securityaudit evidence+8

Knostic discovers and secures AI agents and coding assistants, as well as associated supply chain risks, including MCP servers, skills, IDE extensions, and rules

KvantumCI continuously verifies how software and AI are built in CI/CD pipelines, checking whether security scans, approval gates and repository rules are declared, enabled and enforced. It reports gaps, classifies findings by risk and pipeline stage, and gives pipeline-aware fix guidance. It is aimed at DevOps, security, platform teams and CISOs, and connects to GitHub, GitLab and Azure Repos.

Lasso Security

Lasso Security provides an AI Security Platform focused on securing AI adoption at enterprise scale, offering visibility, control, and protection across AI models, agents, and applications.

Matters.AI

Powering modern security teams with AI that understands context, models intent, and protects what matters: your data, your people, your reputation.

MATVIS

AI inventory managementFull-stack attack path analysis+4

Enterprise AI is moving fast. The security infrastructure isn't keeping up.

Mend.io

SAST

6 products

Mend.io is the security platform built for every risk, across application security and AI security, securing the code layer, the AI layer, and the attack surface between them.

Metomic

DLP

Metomic is AI data security for enterprise SaaS, the control plane for sensitive data across every SaaS tool and every AI surface. We find it, fix it, and prove it.

Mindgard

7 products

Mindgard gives organizations the visibility and protection to discover, assess, and defend their AI systems and agents.

+10

Mirror Security

Discover AI assets across environmentsInventory AI models and resources+8

Mirror Security provides a privacy-preserving AI inference platform utilizing Fully Homomorphic Encryption (FHE) to secure Large Language Model (LLM) operations.

NeuralTrust

Runtime agent protection+5

NeuralTrust is an AI security platform that discovers and protects autonomous AI agents, models, and tools across an enterprise.

Runtime workload protectionReal-time exploitation detection+7

Oligo Security

CWPP

7 products

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist.

Openlayer

6 products

Openlayer is the AI governance platform that helps enterprises discover, test, monitor, govern, and optimize AI systems across their entire lifecycle, from prototype to production.

Operant Networks

Operant is built by a world-class team with decades of experience in networking, machine communications, and cybersecurity.

Opsin, Inc.

Opsin provides a specialized security posture management platform for enterprise AI applications like Microsoft 365 Copilot and ChatGPT Enterprise.

Orca Security

CSPM

Software Supply Chain & SBOM

We're on a mission to provide the world's most comprehensive cloud security platform while adhering to what we believe in: frictionless security and contextual insights, so you can prioritize your most critical risks and operate

+11

OX Security

7 products

OX Security is an enterprise software supply chain security platform that focuses on securing code, dependencies, build pipelines, and container artifacts across the SDLC.

Pillar Security provides an AI security platform designed to discover, govern, and secure AI agents across an organization.

AI Discovery & Posture+3

Ploy

Real-time AI prompt inspection+11

Ploy is an identity governance layer that sits on top of your IdP (Okta/ Entra etc.) to help you control access across the apps that matter - including the long tail outside SSO.

We provide on-premise, zero-trust AI that detects deepfakes, prevents data leaks, and ensures compliance.

Privicore

AI asset discovery and inventoryAI configuration and exposure scanning+4

The Data Control Layer™ for the AI Era

Promptfoo

Promptfoo helps developers and enterprises build secure, reliable AI applications.

Push Security

AI asset discovery and inventory+7

Push is the most powerful AI-native security tool in the browser.

Qevlar AI

Connects to SIEM, EDR, XDR, SOAR+5

Our mission is to help security teams move beyond the endless cycle of alert triage and focus on what actually makes organizations safer.

Ray Security

Discover AI assets across environments+8

Ray Security provides the first remediation-focused data security platform that delivers visibility and real-time control over how data is accessed, by users, applications, LLMs, AI agents, and shadow AI, and automatically

Replica Cyber

AI model and dataset discoveryAI configuration and exposure scanning+5

At Replica Cyber, we're driven by an unwavering commitment to protecting life in the digital world.

Resemble AI

Discover AI models and services+10

the only platform securing enterprise generative AI from creation through distribution, across every modality where synthetic media gets used to deceive.

Securiti

Privacy & Consent

8 products

At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.

Every company should be able to innovate with AI as confidently as they build in the cloud.

Real-time GenAI usage visibility+8

SplxAI

AI agent inventory discovery+6

SPLX helps global enterprises secure AI systems end-to-end, with scalable red teaming, real-time threat protection, and automated AI compliance and governance.

Straiker is an agentic AI security vendor whose AI-SPM offering centers on discovery and posture management for AI agents rather than general cloud posture.

SurePath AI

Govern generative AI deployments+8

For continuous command over AI risks, F5 delivers the most adaptable platform for securing AI apps, models, agents, and the APIs connecting them.

Sweet Security

CNAPP

6 products

Sweet Security is redefining enterprise cloud protection. As the leading provider of Runtime CNAPP and AI Security solutions, Sweet unifies runtime context with advanced AI intelligence to protect the modern enterprise.

Real-time posture change monitoring+9

ThreatLens

Agentic SOC & Investigations

AI-agent-driven autonomous investigation+10

ThreatLens builds AI-augmented security products that help organizations investigate threats, secure AI adoption, and make evidence-backed decisions across modern security operations.

TrendAI

AI stack discovery and inventory+6

TrendAI’s AI Security Posture Management (AI-SPM) capability is part of Trend Vision One and is positioned to give security teams visibility into the cloud assets used to build AI services, including threats, misconfigurations,

TrojAI

AI asset discovery and inventory+4

TrojAI is a Canadian AI security vendor focused on securing AI models, applications, and agents across build-time and runtime, with a separate emphasis on AI model testing and policy enforcement.

Valence Security

SSPM

SaaS application discovery and inventory+10

Valence Security offers a comprehensive SaaS Security Posture Management (SSPM) platform that extends into AI governance and identity threat detection.

Varonis

DSPM

Discover and classify sensitive data+10

Varonis is a data security platform vendor positioned in DSPM for enterprises that need to find, classify, and control sensitive data across cloud, SaaS, and on-premises stores.

Vega

Scan cloud estates for AI inventory+9

Vega delivers federated and AI-native search, detection, and investigation that strengthens coverage, speeds response, and gives SecOps unified access to all security data through its Security Analytics Mesh (SAM) platform.

Verno Labs

Adversarial testing for AI agents+4

We're building the offensive AI that the next decade of enterprise security will depend on, and putting it in the hands of the companies who can't afford to wait.

Versa Networks

NGFW

9 products

Versa Networks, the leader in SASE, combines extensive security, advanced networking, full-featured SD-WAN, genuine multitenancy, and sophisticated analytics via the cloud, on-premises.

Stateful firewall traffic control+11

Vijil

Vijil is the trust infrastructure that enterprises need to use AI agents with reliability, security, and safety.

Votal AI

Continuous AI model discovery+6

Secure every AI interaction, from prompt to tool call, guardrails, identity, data policies, and tool authorization in real time.

Wiz

CSPM