Browser, mobile &amp; IoT

Pre-delivery phishing detection+10

Cloudflare started as a simple application to find the source of email spam. From there it grew into a service that protects websites from all manner of attacks, while simultaneously optimizing performance.

Armis

Agentless OT and IoT asset discoveryDevice behavior tracking+9

Armis provides agentless IoT security for unmanaged and hard-to-agent devices across enterprise, healthcare, industrial, and critical infrastructure environments. Its Centrix platform uses passive network sensing to discover connected assets, identify device type and behavior, and flag risk from unsupported operating systems, weak configurations, and suspicious communications. In this category, Armis is best suited for organizations that need visibility into IoT, OT, IIoT, and medical devices without installing agents or actively scanning devices that may be fragile or unavailable for software deployment. Adjacent exposure-management features exist, but the IoT security value centers on discovery, monitoring, and response for connected devices.

Bitglass

CASB (Cloud Access Security Broker)

Multi-mode cloud access control+10

Bitglass provides a multi-mode CASB that secures SaaS applications, IaaS instances, data lakes, and private apps via forward proxy, reverse proxy, and API integrations. It delivers real-time data protection and threat prevention using machine-learning to adapt to new cloud apps, malware, and user behaviors. The agentless architecture offers end-to-end visibility, prevents data leakage, and limits external sharing. As part of its integrated SASE platform with SmartEdge SWG and ZTNA, Bitglass suits enterprises adopting cloud and BYOD while addressing compliance gaps in dynamic environments.

Cellebrite

Threat Intelligence

Digital evidence extraction+10

Cellebrite is the global leader in partnering with public and private organizations to transform how data is managed in investigations to protect and save lives, accelerate justice and ensure data privacy.

Censys

Attack Surface Management

Continuous internet exposure discovery+11

Censys provides Attack Surface Management focused on external internet visibility: it continuously scans the public Internet, attributes discovered assets to an organization, and tracks changes in hosts, ports, certificates, services, and exposures. In this category it is known for its Internet-scale dataset, near-real-time exposure monitoring, and evidence-based prioritization of externally reachable risks. It is best suited for security teams that need to discover unknown internet-facing assets, confirm what attackers can actually reach, and route remediation into existing workflows. Censys also sells adjacent products, but this profile is limited to ASM capabilities.

Cisco

CASBCisco SD-WAN integration+16

14 products

Cisco Umbrella is a cloud-delivered Security Service Edge (SSE) solution that enforces zero trust by continuously verifying identity, device posture, and context before granting access to applications. It converges multiple security functions, secure web gateway, firewall-as-a-service, cloud access security broker, and zero trust network access, into a unified cloud platform. Cisco Umbrella serves enterprises requiring distributed security across remote workers, branch offices, and on-premises infrastructure without complete network architecture overhauls.

Claroty

Discover and profile connected devices+11

9 products

Claroty positions its platform for cyber-physical systems and IoT/IIoT security, with deployment options in the cloud as xDome or on-premises as Continuous Threat Detection (CTD). In the IoT Security scope, it focuses on discovering connected devices, profiling their communications and firmware, detecting anomalies, and supporting exposure analysis for industrial and other mission-critical environments. It is best suited for organizations that need passive visibility into unmanaged or fragile devices on operational networks, including manufacturing, utilities, healthcare, and other infrastructure operators. Adjacent modules such as secure remote access exist, but the core IoT Security value is asset discovery, monitoring, and threat detection.

Conceal

Dynamic browser isolation+9

Conceal protects organizations and users from browser-based attacks with runtime enforcement inside the browser and secure, identity-scoped access to private applications without relying on VPN or network extension as the trust model.

Cybereason

Endpoint Detection & Response (EDR)

Behavioral detection of malicious activityAutomated endpoint threat hunting+9

Cybereason provides Endpoint Detection and Response (EDR) that correlates endpoint telemetry across machines into MalOp™ narratives, revealing full attack chains from initial compromise to lateral movement. It uses behavioral analysis, machine learning on threat feeds ranked by historical accuracy, and cross-machine correlation for real-time detection of sophisticated threats. The platform supports instant remediation like process termination, file quarantine, persistence removal, and machine isolation. Best for enterprises needing high analyst efficiency (1:200,000 endpoint ratio) and advanced threat hunting without alert fatigue, as validated by top Forrester Wave and MITRE ATT&CK scores.

Cynerio

Discover connected medical and IoT devicesProfile devices with clinical context+10

Cynerio provides healthcare-focused IoT security for hospitals and other healthcare delivery organizations. Its platform discovers connected medical and IoT devices, classifies them, learns normal communication patterns, and identifies anomalous or malicious activity on the network. The product is strongest in clinical environments where device criticality, patient-care workflows, and uptime constraints matter. It is best suited for healthcare security teams that need device visibility, risk context, and policy enforcement for medical devices without relying on endpoint agents.

Cynet 360 AutoXDR with MDR

Managed Detection & Response (MDR)

24/7 threat monitoring and response+9

At Cynet, we imagine a world where any company can have full cybersecurity protections. At Cynet, we are making enterprise-grade cybersecurity accessible, simple and affordable to organizations that don't have the same resources as the Fortune 1000.

Data Theorem

API Security

Continuous API discoveryAPI health analysis+9

Data Theorem is a leading provider in modern application security. Its core mission is to analyze and secure any modern application anytime, anywhere.

Digital.ai

Endpoint Detection & Response (EDR)

Endpoint telemetry collection+7

Digital.ai is an industry-leading technology company dedicated to helping Global 5000 enterprises achieve digital transformation goals.

DNSFilter

DNS-layer threat blocking+10

2 products

DNSFilter is changing the way people think about DNS security. We're here to help make the internet safer and workplaces more productive.

DoveRunner

Runtime application self-protection for mobile apps

DoveRunner offers complete mobile application and content security solutions that are designed for how the world works today, across applications and across devices, because we are all digitally interconnected.

Dragos

OT and IoT asset visibility+9

We make the industry's most intelligent and intuitive cybersecurity platform for Operational Technology (OT). Customers gain visibility, monitoring, and threat management for the OT, IT, and IoT assets within industrial environments, powered by continuous insights from Dragos's threat intelligence and services team.

Ericom Software

Remote browser rendering in cloud containersEnd-to-end encrypted traffic inspection+10

Protect devices, apps, networks and data with isolation-based security solutions.

Ermetic

CIEM

Discover cloud identities and entitlements+11

Ermetic provides a CIEM platform that discovers and analyzes human and machine identities, entitlements, and access risks across AWS, Azure, and Google Cloud. Acquired by Tenable in 2023 and rebranded as Tenable CIEM, it combines CIEM with CSPM for contextual visibility into IAM policies, network configurations, storage, and secrets. It exposes overprivileged entitlements, toxic combinations, and enforces least privilege via automated remediation and anomaly detection. Best for multi-cloud enterprises needing unified CNAPP capabilities to manage complex entitlement sprawl without agents.

ESET

Email Security

14 products

ESET Mail Security provides multilayered protection for Microsoft Exchange servers, scanning mailboxes, public folders, and hybrid Microsoft 365 environments. It uses proprietary anti-spam engines with SPF/DKIM validation, backscatter protection, and SMTP safeguards, alongside anti-malware scanning for attachments including corrupted or password-protected archives. A 64-bit architecture supports clustering for high-performance mail processing. Optional modules include Advanced Threat Defense and LiveGuard for suspicious emails. Best suited for organizations prioritizing on-premises Exchange security with remote management via ESET PROTECT console and comprehensive rule-based filtering.

Spam filtering for inbound mail+10

Exein

Real-time device behavior monitoring+9

Exein provides device-level security for embedded systems and IoT devices using an edge AI-driven approach. The platform embeds protection directly into the device firmware to detect and block threats locally without requiring constant cloud connectivity. It replaces legacy, perimeter-based IoT security with kernel-level observability and real-time response capabilities for manufacturers and operators of smart devices.

Feroot Security

Compliance & GRC

Automated PCI and privacy complianceWeb compliance scanningClient-side script monitoring+9

Automated PCI, HIPAA & Privacy Compliance

Forescout

Real-time device visibility+11

3 products

Forescout’s IoT Security offering is an agentless device visibility and control platform for unmanaged IoT, OT, and IoMT environments. It identifies devices as they connect, classifies them by type and function, detects weak or factory-default credentials, monitors communications for anomalous behavior, and automates policy actions such as segmentation, quarantine, and least-privilege network access. The product is best suited for enterprises that need passive discovery and enforcement across mixed IT/OT networks, including healthcare, manufacturing, building automation, and critical infrastructure. Forescout also offers adjacent OT and network access control capabilities, but the IoT Security scope centers on device visibility, classification, and containment.

Insane Cyber

Host and network data analysis+9

Insane Cyber specializes in OT security and industrial control system (ICS) protection through its Valkyrie platform. It provides monitoring, threat hunting, and incident response capabilities specifically designed for rugged, remote, or hard-to-reach industrial environments. The solution addresses the 'visibility gap' in legacy OT networks, replacing passive-only monitors with a more active investigative capability for critical infrastructure.

Island

Enterprise browser with native security controls+11

Island provides the Island Enterprise Browser, a Chromium-based browser that replaces or coexists with standard browsers to isolate corporate web activity. It executes all web traffic natively on the endpoint, blocking malicious JavaScript across APIs like WebRTC and WebGL, and enables mitigations including Arbitrary Code Guard, Control Flow Enforcement, and Control Flow Guard. Unlike remote browser isolation, it avoids video streaming latency by rendering directly in-browser. Features include conditional access controls based on identity, device, network, and location; DLP for copy/paste, screenshots, print, and downloads; and app boundaries to prevent data leakage. Best for enterprises seeking zero-trust browser security without VPNs or RBI infrastructure.

Jamf

Device Trust & Endpoint Management

2 products

Jamf’s purpose is to simplify work by helping organisations manage and secure an Apple experience that end users love and organisations trust. Jamf is the only company in the world that provides a complete management and security solution for an Apple-first environment that is enterprise secure, consumer simple and protects personal privacy.

Apple device lifecycle management+10

Lookout

Mobile endpoint threat detection+10

Lookout is a mobile security vendor focused on protecting Android and iOS devices from phishing, malicious apps, unsafe networks, and device theft. In this category, it combines on-device threat detection with cloud-managed administration so organizations can monitor mobile risk and apply policy across employee phones and tablets. It is a fit for enterprises that need mobile threat defense and device loss controls rather than full endpoint or identity platforms. Lookout also offers adjacent identity and endpoint products, but the core mobile security offering centers on device, app, and web threat protection.

Menlo Security

Cloud-based remote browser isolation+11

As a pioneer of browser security, Menlo Security delivers a solution with a comprehensive approach to enterprise browser security, protecting users where they work and securing applications from internet-borne attacks.

NetWitness

SIEM

Enriched log data analysis+10

NetWitness is a comprehensive threat detection and response platform that integrates SIEM, network forensics, endpoint data, and user entity behavior analytics (UEBA). It provides security analysts with deep visibility across the entire attack lifecycle by capturing and analyzing packet-level data alongside logs and endpoint telemetry. The platform is designed for high-scale enterprise environments, replacing fragmented point solutions with a unified workbench for incident investigation and response orchestration.

NinjaOne

Device Trust & Endpoint Management

Centralized endpoint monitoring and control+10

NinjaOne is a cloud-based endpoint management platform focused on centralized device visibility, patching, software deployment, remote administration, and scripted remediation from a single console. It uses an agent-based model to manage internet-connected Windows, macOS, and Linux endpoints, plus servers and workstations, making it a fit for IT and security teams that need to control mixed fleets and remote devices. In this category, it is best suited for midsize to large organizations and MSPs that want operational control over endpoint inventory, update status, and routine maintenance without separate tools for each task.

NordLayer

Zero Trust Network Access with context-based authorization

NordLayer is a cloud-native SASE platform consolidating SD-WAN, firewall-as-a-service (FWaaS), secure web gateway (SWG), cloud access security broker (CASB), and zero trust network access (ZTNA) into a unified service. The vendor targets enterprises transitioning from point-solution security architectures to integrated cloud-delivered frameworks. NordLayer serves organizations requiring secure remote access, hybrid IT environments, and zero trust implementation without hardware-dependent infrastructure.

Nord Security

Cloud-delivered secure access architecture+10

Nord Security offers a suite of business tools including NordLayer for network access and NordPass for credential management, focused on the SMB and mid-market segments. It provides a secure service edge (SSE) approach to remote access, replacing legacy VPNs with a Zero Trust Network Access (ZTNA) model. The platform integrates identity-centric access control with password security and threat exposure monitoring.

Nozomi Networks

Automated IoT device discovery+9

Nozomi Networks delivers an IoT Security solution focused on passive OT and IoT network monitoring to automate device discovery, asset visibility, and threat detection. Their Guardian sensor passively ingests SPAN traffic to decode protocols, identify newly connected assets, and detect anomalies using AI-driven behavioral analysis. The platform prioritizes risks inherent to industrial environments, offering guided remediations to reduce MTTR. Best suited for utilities, manufacturing, and critical infrastructure operators managing complex OT/IoT ecosystems. While they also offer broader OT security capabilities, their IoT solution specifically targets visibility and anomaly detection in heterogeneous device networks.

OneSpan Inc

Multi-Factor Authentication (MFA)

Mobile two-factor authentication with biometrics and OTP

OneSpan specializes in digital identity verification and hardware/software-based multi-factor authentication for high-security environments like banking and enterprise access. The platform supports a wide range of authentication methods including FIDO2, OTP, and mobile push, alongside mobile application shielding to protect against reverse engineering and overlay attacks. It complements IAM stacks by providing the enforcement layer for secure login and transaction signing.

OneTrust

Compliance & GRC

Centralized policy, risk, and control workflows+11

Our mission is to enable innovation through the responsible use of data and AI. We believe that trusted data can be a transformative force in business and society.

Ordr

Discover every connected device+10

We filter out noise and pinpoint critical risks, empowering organizations to safeguard every asset in the cloud, on-premises, or in SaaS environments.

Palo Alto Networks

Firewall / NGFW

21 products

Palo Alto Networks is a major vendor in the Firewall / NGFW market, best known for PAN-OS-based next-generation firewalls and Cloud NGFW. Its firewalls combine application-aware policy, user-based controls, and threat prevention to inspect traffic, including encrypted sessions, and block known and unknown threats. It fits enterprises that need granular segmentation, internet edge protection, and consistent policy across physical and cloud deployments. Adjacent offerings exist, but the core firewall line remains centered on network traffic control, inspection, and prevention.

Active-passive firewall high availability+22

Phosphorus

Uses agentless discovery over native device protocols to inventory connected IoT, OT, IIoT, and IoMT assets without deploying endpoint software or relying on active port scanning.

Phosphorus provides an agentless IoT security platform for connected cyber-physical devices, including IoT, OT, IIoT, and IoMT assets. In this category, it focuses on device discovery, posture assessment, and active remediation rather than passive monitoring alone. The platform is built for enterprises that need to inventory unmanaged devices, identify weak credentials, firmware and certificate issues, and enforce hardening actions across heterogeneous device types. It is best suited for security teams responsible for connected device risk in hospitals, industrial environments, and large enterprise networks.

Pradeo

Mobile threat detection and response+10

Pradeo is a mobile security vendor focused on mobile threat defense for smartphones, tablets, and mobile applications. Its core product, Pradeo Security, is positioned around detecting device, network, and application-level threats, enforcing mobile policy compliance, and integrating with enterprise mobility controls such as MDM and Microsoft Intune. It is best suited for organizations that need risk-based access decisions and remediation for managed mobile fleets, especially where phishing, malicious apps, and network attacks are concerns. The company is described in external sources as a leader or emerging leader in mobile security.

Protectt.ai Labs Pvt. Ltd.

Runtime Application Self-Protection (RASP)+8

Protectt.ai is an AI-native mobile app security platform that provides comprehensive protection for mobile applications, devices, and financial transactions. It offers an integrated XDR-style approach for mobile, featuring Runtime Application Self-Protection (RASP), mobile threat defense (MTD), and advanced fraud control. The platform is designed to secure banking, insurance, and retail apps against sophisticated mobile malware and social engineering.

Replica Cyber

AI Security Posture (AI-SPM)

2 products

At Replica Cyber, we're driven by an unwavering commitment to protecting life in the digital world. We simplify complex isolated environments, fusing patented protection with counterintelligence tradecraft to enable high stakes activities at scale.

AI model and dataset discovery+6

Samsung Knox

Hardware-backed mobile device protection+11

9 products

Samsung Knox is a business platform for configuring and managing mobile devices – offering efficient and customized use in various industries.

SCADAfence

OT and IoT network visibility+11

SCADAfence is an industrial cybersecurity vendor focused on **OT and IoT security** for large-scale networks, with visibility into ICS/SCADA environments and connected devices. Its platform centers on passive monitoring, asset discovery, threat detection, risk management, and security governance rather than endpoint protection. SCADAfence has been positioned as a market leader in OT security and was acquired by Honeywell in 2023, which places it inside a larger industrial software portfolio. It is best suited for critical infrastructure, manufacturing, and building management teams that need device-level visibility and monitoring across complex industrial networks.

SecuriThings

Real-time device monitoringAutomated device remediation+10

Redefining the way organizations manage and secure IoT devices at scale.

Sekant Security

Telemetry can be delivered to SIEMs+1

AI-driven threats are increasingly exploiting the browser, with nearly half of security incidents involving web browsers as per recent industry reports. Sekant Security reimagines defense by embedding runtime intelligence directly into the user’s browser to stop phishing and credential theft, prevent clipboard attacks, block unsafe downloads, and monitor Shadow AI usage in real time, delivering scalable, privacy-preserving protection where attacks actually happen. Our solution is enterprise-grade (featured in BlackHat USA), with the ease-of-use desired by SMB/SME.

Seraphic

Turn any browser into a secure browser+11

3 products

Seraphic provides an enterprise-grade secure browser overlay that transforms existing standard browsers into secure workspaces with built-in DLP and threat prevention. It blocks zero-day exploits, prevents credential phishing, and secures remote access to internal applications without the need for a full VDI or VPN suite. This complements Zero Trust architectures and replaces heavy local agents for web security.

Skyhigh Security CASB

CASB (Cloud Access Security Broker)

Discover unsanctioned cloud services+11

Skyhigh Security CASB is a cloud-based, multi-tenant Cloud Access Security Broker that deploys via forward and reverse proxy modes for real-time control over sanctioned and unsanctioned cloud services. It leverages the Cloud Registry for 50+ attribute risk assessments across 20,000+ services, enabling discovery, classification, and remediation. Key capabilities include DLP policy enforcement synced with endpoint DLP, machine learning-based UEBA for insider threat detection, malware analysis, configuration auditing against benchmarks with automated remediation, and contextual access controls. Best suited for enterprises needing comprehensive visibility and governance across hybrid cloud environments with SharePoint integration.

SmishAlert

Security Awareness & Phishing Simulation

Learn from real messaging attacks+6

SmishAlert is a mobile-first security awareness platform that specializes in defending against SMS-based phishing (smishing), QR code scams (quishing), and mobile social engineering. It provides real-time analysis of incoming messages and reinforces secure user behavior within native mobile workflows. The platform complements traditional email-centric security awareness programs by addressing the growing threat of mobile-based corporate credential theft.

Sophos

Data Loss Prevention (DLP)

12 products

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

Monitor and restrict sensitive file transfers+11

Spharaka

Agentic SOC & Investigations

Autonomous investigation and response+7

Connect. Protect. Simplify. At Spharaka Networks Private Limited, we are reimagining the future of cybersecurity through the power of Agentic AI, an intelligent system that learns, reasons, and collaborates alongside human defenders. Our platform connects fragmented security layers, protects enterprise assets proactively, and simplifies threat management across the organization.

Talon Cyber Security

Chromium-based enterprise browser isolation for SaaS and web access, keeping work sessions inside a controlled browser layer instead of exposing the underlying endpoint to the full internet.

Talon Cyber Security, now part of Palo Alto Networks, built an enterprise browser product for securing SaaS and web access on managed and BYOD endpoints. In the Browser & Web Isolation category, it focuses on keeping work activity inside a controlled Chromium-based browser layer rather than relying on device trust. It is best suited for organizations with hybrid workforces that need browser hardening, data loss controls, and visibility into web activity without deploying a traditional VDI stack. Adjacent Palo Alto Networks SASE features exist, but Talon’s core browser capability is the relevant scope here.

TXOne Networks

Zero-trust endpoint protectionInline industrial network prevention+10

TXOne Networks is an OT-native cybersecurity vendor focused on protecting industrial and IoT-connected environments such as factories, utilities, and medical/production sites. In the IoT Security scope, its portfolio centers on device and network protection for operational assets, including inspection of removable media, endpoint defense for legacy and modern OT systems, and inline network controls for industrial protocols. It is best suited for organizations that need to secure brownfield OT/IoT environments without disrupting operations. TXOne also sells adjacent OT security orchestration and threat intelligence components, but its IoT security value is primarily in asset, endpoint, and network protection.

Upfort

Security Awareness & Phishing Simulation

Auto-generation of mock phishing emails with realistic templates to simulate real-life phishing attacks without requiring security specialty skillsCreation of mock websites and pop-ups that appear suspiciously authentic to test employee recognition of fraudulent domains and interfaces

Upfort is a security awareness and phishing simulation vendor that enables businesses to launch simulated phishing attacks against their teams with minimal IT involvement, using a few-click interface. Its Cyber University delivers enterprise-scale, interactive, on-demand security training covering modern cyber tactics. The platform auto-generates mock phishing emails mimicking real-life attacks via suspiciously authentic emails, websites, or pop-ups, then captures employee response insights to measure preparedness. Upfort is best suited for small to mid-sized businesses and MSPs seeking fast deployment and automated remediation. While it offers the Upfort Shield multi-layer defense platform, its core strength lies in phishing simulation and awareness training.

VMware Workspace ONE

Mobile device management+10

VMware Workspace ONE Mobile Threat Defense (MTD) is a UEM-integrated mobile endpoint security solution for Android, iOS, and Chrome OS, powered by Lookout technology. Delivered through Workspace ONE Intelligent Hub, it provides threat detection and automated remediation without requiring separate application installation. The solution addresses phishing, malware, device vulnerabilities, jailbreak/root detection, rogue Wi-Fi, and SSL stripping attacks. Best suited for enterprises managing heterogeneous mobile device environments seeking consolidated endpoint protection with Zero Trust Network Access capabilities.

wolfSSL

Encryption & Key Management

TLS and DTLS protocol stack+11

wolfSSL is an embedded cryptography vendor best known for its wolfCrypt engine, wolfSSL TLS library, and wolfHSM key-management framework. In the Encryption & Key Management category, it provides software for protecting keys, offloading sensitive cryptographic operations to HSMs, and supporting standards such as PKCS#11 and AUTOSAR SHE. It is strongest for embedded, automotive, RTOS, and constrained-device environments where small footprint, portable C code, and hardware-backed key handling matter. Adjacent products include TLS, SSH, MQTT, and boot/security tooling, but the core fit here is cryptography and key lifecycle control.

Xage Security

Layered multi-factor authentication+10

Xage Security is a zero-trust access vendor whose IAM offering centers on identity-based access for mixed IT, OT, and edge environments. In the IAM scope, it provides multi-factor authentication, federation, single sign-on, and policy-based access orchestration across multiple identity providers and local directories. Xage is best suited for industrial, critical infrastructure, and distributed enterprise buyers that need access control across legacy systems, remote sites, and intermittently connected environments. The company also sells adjacent zero-trust and privileged access capabilities, but its IAM value is rooted in layered identity enforcement.

Zimperium

On-device mobile threat detection+10

Zimperium is a mobile security vendor focused on Mobile Threat Defense for enterprise and government environments. In that category, it protects iOS, Android, and Chromebook endpoints from device, network, phishing, and malicious app threats using on-device detection rather than cloud lookups. It is strongest for organizations managing BYOD and corporate-owned devices that need conditional access signals, privacy-preserving telemetry, and integration with UEM/EMM and SIEM tools. Zimperium also offers adjacent mobile application security capabilities, but its core mobile security offering is endpoint threat defense.

Zscaler