Workload &amp; container security

Real-time cloud risk prioritization+11

Aqua Security’s CSPM offering is a multi-cloud posture management product that uses cloud API access and agentless checks to inventory resources, detect misconfigurations, and map findings to compliance requirements. It is positioned for organizations operating AWS, Azure, Google Cloud, and Oracle Cloud that want continuous visibility into cloud configuration drift and prioritization of high-risk issues. Aqua also emphasizes real-time context and correlation of findings to reduce alert noise. The company sells a broader cloud security platform, but this profile is limited to its CSPM capabilities.

AWS

Encryption & Key Management

16 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications. It is positioned for organizations that want key lifecycle control without running their own HSM fleet, and it uses FIPS 140-3 Level 3 validated HSMs under the service boundary. Buyers typically use it for envelope encryption, application signing, and server-side encryption across AWS services. It is best suited to teams standardizing key governance inside AWS rather than managing separate on-premises key systems.

Create and control KMS keys+10

Center for Internet Security (CIS)

Compliance Management

CIS Hardened Images for cloud workloads+5

The Center for Internet Security (CIS) provides Hardened Images and configuration benchmarks that serve as the industry standard for securing cloud operating systems and infrastructure. Their virtual machine images are pre-configured to meet CIS Benchmark standards, providing a secure baseline for AWS, Azure, and GCP environments out of the box. They complement CSPM tools by providing the gold-standard configurations used for compliance auditing and system hardening.

Check Point

Multi-cloud posture management+11

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

CrowdStrike

EDR

12 products

CrowdStrike secures the most critical areas of risk – endpoints and cloud workloads, identity, and data – to keep customers ahead of today's adversaries and stop breaches.

Adversary intelligence profiles+14

CybrHawk

Agentic SOC & Investigations

Natural-language SOC investigation+8

CybrHawk is a leading provider of cybersecurity solutions. Our offerings help organizations to get their cyber-defences attuned to stall, manage, mitigate and prevent breaches. Our solutions help detect real time suspicious activities and respond quickly to prevent breaches besides predicting possible threats. Our solutions are designed to get better off the problems.

Cyngular

Cloud Investigation and Response Automation (CIRA)

2 products

The Agentic SOC of the AI era, a mesh of autonomous AI agents that detect, hunt, investigate, deceive, resolve and report, end-to-end.

Darktrace

NDR

Continuously monitors network traffic+11

Darktrace is a network detection and response vendor centered on self-learning behavioral analytics for north-south and east-west traffic. Its NDR product baselines normal activity for users, devices, and segments, then flags anomalous connections, command-and-control behavior, data transfer outliers, and other suspicious network patterns in on-premises, cloud, and hybrid environments. The platform is aimed at teams that need visibility beyond endpoint telemetry and want automated investigation and containment for network-level threats, including encrypted traffic and novel attack paths. Darktrace also sells adjacent security products, but this profile is limited to NDR capabilities.

Data Theorem

API Security

Continuous API discoveryAPI health analysis+9

Data Theorem is a leading provider in modern application security. Its core mission is to analyze and secure any modern application anytime, anywhere.

Echo

Vulnerability Management

Automated vulnerability scanningIdentification of known vulnerabilities+7

Echo is creating the trusted source for agentic-ready software.

Elastic

SIEM

Centralized security event collection+8

Elastic Security provides an open-source SIEM platform built on the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) for collecting, indexing, and analyzing security logs from endpoints, networks, clouds (AWS, Azure, Google Cloud), and firewalls. It supports ECS-compliant index mappings, threat detection via KQL queries for brute force and lateral movement, correlation rules for multi-stage attacks, IOC matching with enrich policies, and Watcher-based alerting. Best for SOC teams needing scalable search analytics, real-time monitoring, and integration with EDR, XDR, SOAR in resource-constrained environments.

ESET

Email Security

14 products

ESET Mail Security provides multilayered protection for Microsoft Exchange servers, scanning mailboxes, public folders, and hybrid Microsoft 365 environments. It uses proprietary anti-spam engines with SPF/DKIM validation, backscatter protection, and SMTP safeguards, alongside anti-malware scanning for attachments including corrupted or password-protected archives. A 64-bit architecture supports clustering for high-performance mail processing. Optional modules include Advanced Threat Defense and LiveGuard for suspicious emails. Best suited for organizations prioritizing on-premises Exchange security with remote management via ESET PROTECT console and comprehensive rule-based filtering.

Spam filtering for inbound mail+10

Mitiga

Panoramic AwarenessAttack Decoding+2

3 products

Mitiga is a cloud detection and response vendor focused on detecting, investigating, and containing active threats across cloud, SaaS, identity, and AI environments. Its CDR platform emphasizes zero-impact breach prevention, with cloud-native telemetry analysis, attack reconstruction, and guided response for SecOps teams that need visibility beyond CNAPP and posture tools. Mitiga positions itself for enterprises with distributed, multi-cloud and SaaS-heavy footprints that need forensic context and rapid triage without requiring deep cloud expertise.

Oligo Security

CWPP

Runtime workload protection+8

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist. In cloud security evaluations, it is best understood as a platform for detecting and blocking active exploitation in cloud workloads, with emphasis on runtime context rather than posture scanning or misconfiguration management. Its cloud-security materials focus on protecting modern applications, cloud workloads, and AI systems at execution time, which makes it a fit for teams that want runtime threat detection and exploit prevention alongside other cloud security controls.

Orca Security

Agentless cloud misconfiguration detection+11

We're on a mission to provide the world's most comprehensive cloud security platform while adhering to what we believe in: frictionless security and contextual insights, so you can prioritize your most critical risks and operate in the cloud with confidence.

Plerion

Code SecurityCloud Security Posture Management (CSPM)AI Security+1

2 products

We simplify cloud security

Reco

AI Runtime & Agent Security

Runtime prompt and tool-call inspection+9

Reco is the leader in Agentic Ecosystem Security, securing everything around the agent, not just the prompt.

Seceon

Agentic SOC & Investigations

Autonomous alert triage+11

Seceon is a cybersecurity platform vendor positioned for SOC operations, with its aiSOC/aiSIEM and SOC automation offerings used for alert triage, investigation, threat hunting, and response orchestration. In the Agentic SOC & Investigations scope, its pitch centers on correlating logs, flows, identities, cloud, endpoint, and application data to reduce manual analyst work and speed incident decisions. It is best suited for MSSPs, MDR providers, and enterprise SOCs that want multi-tenant operations and automated investigation workflows rather than an endpoint-only tool.

SecPod SanerNow

Vulnerability Management

4 products

SecPod was founded on a clear belief cyberattacks should be prevented, not chased after the damage is done.

Continuous vulnerability scanning and detection+10

Skyhawk Security

Continuously scan cloud resources for misconfigurations

1 product

Skyhawk Security offers a cloud-native platform focused on preemptive threat detection and automated incident response through its AI-based 'Purple Team' engine. It contextualizes cloud security events and CSPM alerts to eliminate alert fatigue and identify actual runtime threats before they lead to data breaches. The platform integrates with existing cloud logs and security tools to provide a unified view of exposure and active threats across Multi-cloud environments.

Sophos

DLP

12 products

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

Monitor and restrict sensitive file transfers+11

Spyderbat

Kernel-level Runtime Visibility & Root Cause AnalysisBehavioral Threat Detection

2 products

Threat Detection, Investigation, and Response for Cloud, Kubernetes, and Linux

Stream.Security

Real-time cloud threat and exposure modeling+8

1 product

StreamSecurity.com helps you spot risk, get matched with vetted security professionals, and harden what matters, without the jargon.

Sweet Security

CNAPP

Real-time posture change monitoring+9

Sweet Security is redefining enterprise cloud protection. As the leading provider of Runtime CNAPP and AI Security solutions, Sweet unifies runtime context with advanced AI intelligence to protect the modern enterprise.

Sysdig

CNAPP

Graph-based cloud risk correlationContinuous cloud posture monitoringAgentless cloud asset scanning+9

Cloud security with zero compromise.

Tenable

Vulnerability Management

9 products

We are dedicated to isolating and eradicating the exposures that hold organizations back.

Vulnerability Priority Rating with threat intelligenceContinuous asset discovery and vulnerability assessment

WatchGuard Technologies

NGFW

Application control and identification+11

For 30 years, WatchGuard has delivered real-world cybersecurity built for constantly evolving threats and limited IT resources. We partner with MSPs to simplify security and protect networks, endpoints, identities, and cloud environments with solutions that scale and last.

Wiz