DevSecOps & supply chain

1Password Business

Password Management

3 products

Led by seasoned security and technology executives, 1Password provides trusted access for people and AI agents. We unlock productivity by making security and privacy simple for every person and organization.

ActiveState

DevSecOps & CI/CD Security

1 product

ActiveState is a DevSecOps vendor focused on securing open source dependencies and language runtimes used in software delivery pipelines.

Aikido Security

Software Supply Chain & SBOM

9 products

All the security tools we used were slow, confusing, overpriced and noisy. So we built better ones.

Akeyless

Secrets Management

4 products

Cloud-Native SaaS platform built to secure and manage every identity through a single pane of glass.

Anchore

Software Supply Chain & SBOM

2 products

Anchore is creating a more secure software supply chain for priceless peace of mind.

Apiiro

Software Supply Chain & SBOM

1 product

Apiiro provides supply chain security capabilities as part of its application security platform, with a focus on inventorying software components, tracing code-to-runtime relationships, and detecting supply chain risk across SCM

Appdome

Mobile Threat Defense

2 products

Appdome provides no-code mobile app security for Android and iOS, delivered as build-time and runtime protections inside the mobile CI/CD pipeline.

Aqua Security

CSPM

7 products

Aqua Security’s CSPM offering is a multi-cloud posture management product that uses cloud API access and agentless checks to inventory resources, detect misconfigurations, and map findings to compliance requirements.

A

ARCON

PAM

8 products

ARCON PAM is an enterprise-class privileged access management solution designed for hybrid, multi-cloud, and distributed datacenter environments.

Arnica

Software Supply Chain & SBOM

1 product

Arnica powers the most effective application security programs in the world.

AWS

Encryption & Key Management

12 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications.

B

Binarly

Software Supply Chain & SBOM

1 product

Binarly is a software and firmware supply chain security vendor focused on binary-level analysis of compiled artifacts, including UEFI, BMC, embedded Linux, and other firmware components.

B

Bitwarden

Password Management

5 products

Bitwarden is a trusted security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere.

B

Black Duck

SAST

10 products

Black Duck (formerly Synopsys Software Integrity Group) provides a comprehensive application security platform focusing on Software Composition Analysis (SCA) and static/dynamic testing.

B

Bridgecrew (Palo Alto Networks)

DevSecOps & CI/CD Security

1 product

Bridgecrew, acquired by Palo Alto Networks in 2021 for $156 million, is a developer-first infrastructure-as-code (IaC) security platform integrated into Prisma Cloud.

B

Britive

CIEM

9 products

Britive provides dynamic Cloud Privileged Access Management (CPAM) and Cloud Infrastructure Entitlement Management (CIEM) with patented just-in-time (JIT) ephemeral access across AWS, multi-cloud, SaaS, hybrid, and on-prem

Chainguard

Software Supply Chain & SBOM

7 products

Chainguard provides minimal, distroless container images rebuilt daily from source, achieving 97.6% fewer CVEs than open source alternatives, with SLSA provenance, cryptographic signing, and verification enforcement at registry

C

Chainloop

Software Supply Chain & SBOM

1 product

We help enterprises build and deliver secure and compliant software faster.

Checkmarx

SAST

6 products

Checkmarx One is an application security software platform built to help enterprises secure every stage of the SDLC while reducing engineering costs and accelerating development.

C

Clutch

Secrets Management

4 products

Clutch is an identity security platform that discovers, maps, and governs non-human identities across cloud, SaaS, and AI environments.

Contrast Security

SAST

8 products

Contrast Security provides an IAST platform that embeds agents into running applications, instrumenting code with sensors for real-time vulnerability detection and attack telemetry.

C

ControlMonkey

Backup & DR

2 products

ControlMonkey helps cloud teams strengthen disaster recovery and resilience by backing up and restoring cloud and SaaS configuration across AWS, Azure, GCP, Terraform, identity, networking, and observability platforms.

C

CRACI

Software Supply Chain & SBOM

1 product

Software supply chains are the #1 attack surface. CRACI helps

C

Crash Override

Software Supply Chain & SBOM

1 product

We are Crash Override. Software Observability for the AI era, the data plane for software, from prompt to production.

C

CyberArk (Palo Alto Networks)

PAM

2 products

the next-generation identity security platform that discovers, controls and governs your human and agentic workforce

C

Cycode

Software Supply Chain & SBOM

3 products

AI Writes The Code. We Secure And Govern It.

Datadog

API Security

8 products

Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale.

D

DeepKeep

MLSecOps

8 products

DeepKeep is a model agnostic AI security platform

D

depthfirst

SAST

6 products

depthfirst is an applied AI lab pioneering the future to secure software, and we're just getting started.

Digital.ai

EDR

4 products

Digital.ai is an industry-leading technology company dedicated to helping Global 5000 enterprises achieve digital transformation goals.

D

Doppel

Digital Risk Protection

2 products

The Doppel Platform elevates your social engineering defense from reactive to strategic, combining AI precision, human expertise, and real-time intel to protect what matters most.

D

DuploCloud

DevSecOps & CI/CD Security

1 product

At DuploCloud, we empower developers to focus on innovation and growth, rather than tedious and time-consuming tasks.

Echo

Vulnerability Management

5 products

Echo is creating the trusted source for agentic-ready software.

E

Eclypsium

Software Supply Chain & SBOM

1 product

Hardware security is at the core of what we do and who we are. It's our specialized expertise and our passion, and we're on a mission to help enterprises address the largest blindspot they can't see.

E

Endor Labs

Software Supply Chain & SBOM

3 products

Endor Labs is a software supply chain security platform focused on open source governance and CI/CD risk detection. The platform targets DevSecOps teams seeking to reduce alert fatigue while maintaining security posture.

Fluid Attacks

SAST

6 products

Since 2001, Fluid Attacks has been committed to growing as a team and developing its own technology to contribute to global cybersecurity.

F

Fossa

Software Supply Chain & SBOM

1 product

For a decade, FOSSA has been protecting businesses from the security, license compliance, and code quality risks associated with modern software development, while giving developers back valuable time.

G

GitHub CodeQL

SAST

2 products

GitHub CodeQL is a semantic code analysis engine that performs static application security testing (SAST) by building a queryable database of code facts and running predetermined vulnerability detection queries.

G

GitLab

SAST

2 products

We're the company behind GitLab, the intelligent orchestration platform where teams and their AI agents ship secure software faster.

GuardDog AI

Software Supply Chain & SBOM

1 product

GUARDDOG AI revolutionizes cybersecurity incident response with its cutting-edge DCX Vulnerability + Isolation platform boasting exploit or attack detection times in milliseconds and isolation/containment within seconds, all

H

HashiCorp, an IBM Company

Secrets Management

1 product

HashiCorp Vault is the industry standard for secrets management, providing a centralized system for storing and controlling access to tokens, passwords, certificates, and encryption keys.

H

Hush Security

Secrets Management

1 product

Hush Security provides a machine identity and access platform designed for cloud-native environments and AI agents.

I

Infisical

Secrets Management

1 product

Infisical is an open-source platform for managing secrets, certificates, configurations, and privileged access across development, CI/CD, and cloud infrastructure.

I

InvisiRisk

Software Supply Chain & SBOM

1 product

InvisiRisk is a software supply chain security vendor focused on the CI/CD pipeline, where it inspects build-time behavior instead of relying only on pre- or post-build scanning.

J

JFrog

Software Supply Chain & SBOM

1 product

JFrog provides the JFrog Software Supply Chain Platform, a unified solution for artifact management, security scanning, and release automation across the SDLC.

L

Legit Security

Software Supply Chain & SBOM

1 product

Legit is an AI-native ASPM platform that automates AppSec issue discovery, prioritization, and remediation.

L

Lineaje

Software Supply Chain & SBOM

1 product

Lineaje is a software supply chain security vendor focused on discovering, analyzing, and continuously securing software artifacts across source code, open source dependencies, containers, and third-party software.

M

Mend.io

SAST

6 products

Mend.io is the security platform built for every risk, across application security and AI security, securing the code layer, the AI layer, and the attack surface between them.

N

NetRise

Software Supply Chain & SBOM

4 products

NetRise specializes in the security analysis of compiled binary code, providing visibility into the 'black box' of firmware, IoT devices, and third-party software components.

N

Nullify

SAST

4 products

Nullify is an application security platform centered on SAST and DAST workflows, with continuous code scanning and live endpoint testing aimed at finding exploitable issues before merge or release.

O

Oligo Security

CWPP

7 products

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist.

O

OPSWAT

Vulnerability Management

5 products

OPSWAT prevents known, unknown, and AI-generated threats from reaching the systems the world depends on.

O

OX Security

Software Supply Chain & SBOM

7 products

OX Security is an enterprise software supply chain security platform that focuses on securing code, dependencies, build pipelines, and container artifacts across the SDLC.

P

Parameter

Pentest & Red Team

5 products

Software is changing faster than ever. We're building security that evolves with it: continuous, autonomous, and always on.

P

Phoenix Security

ASPM

5 products

Phoenix Security is AI-native SDLC security. It covers your code from the moment it's written, by a person or by an AI assistant, to the fix in production. Most teams have more scanner findings than they can ever fix. Phoenix checks if the vulnerable code is reachable, from code to cloud. It removes duplicates and finds which team owns each issue. That cuts the noise by up to 98%. Then AI agents write the fix as a pull request. A person reviews it and decides. The agents help, they don't take over. Phoenix was named a Major Player in the IDC MarketScape for ASPM 2025.

P

Phylum

Software Supply Chain & SBOM

1 product

Empower you to build, buy, and run secure software.

P

Promptfoo

AI-SPM

5 products

Promptfoo helps developers and enterprises build secure, reliable AI applications.

P

Prophet Security

Agentic SOC & Investigations

5 products

Prophet Security is building an AI SOC platform that empowers teams to move faster and make better decisions.

Q

QCoreSecure

Encryption & Key Management

4 products

Replace every algorithmically generated random number in critical infrastructure with quantum-sourced entropy that is provably, physically, and absolutely unpredictable.

R

RapidFort

Software Supply Chain & SBOM

1 product

RapidFort is a software supply chain security platform that focuses on reducing the attack surface of containerized applications by removing unused code and packages.

R

Raven

ASPM

2 products

Raven.io provides a runtime application security platform that runs inside cloud-deployed applications to detect and block malicious code execution as it happens, independent of whether a CVE exists.

R

Recorded Future

Threat Intelligence

4 products

Recorded Future secures the world by empowering businesses, governments, and other organizations to stay one step ahead of today's relentless threat actors.

R

ReversingLabs

Software Supply Chain & SBOM

1 product

ReversingLabs provides software supply chain security through Spectra Assure, leveraging a 40 billion file threat repository for binary analysis of OSS packages and commercial binaries.

S

SCANOSS

Vulnerability Management

3 products

SCANOSS finds the cryptography in your source code, the part PKI tools and certificate managers can't see.

S

Scribe Security

Software Supply Chain & SBOM

1 product

Scribe Security is a commercial software supply chain security platform focused on evidence-based assurance for software producers and consumers.

S

Segura

IAM & SSO

6 products

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

S

Snyk

SAST

5 products

Snyk is an application security platform providing SAST (static code analysis), DAST (runtime testing), and SCA (software composition analysis) capabilities integrated into CI/CD pipelines.

S

Socket

Software Supply Chain & SBOM

4 products

Socket is a developer-first supply chain security platform that detects and blocks malicious open source dependencies across JavaScript, Python, and Go ecosystems.

S

Sonar

SAST

8 products

Sonar helps developers deliver high quality and secure software by analyzing code they write, AI-generated code, and code leveraged from third parties (like open source libraries).

S

Sonatype

Software Supply Chain & SBOM

1 product

Sonatype handles the complexity of managing open source software and AI behind the scenes so teams stay focused on innovation, not maintenance.

S

StackHawk

DevSecOps & CI/CD Security

1 product

We built StackHawk out of a need for a more agile, developer-friendly approach to software security.

S

Stacklok

Software Supply Chain & SBOM

1 product

We're a team of AI maximalists on a mission to ensure all knowledge workers can simply and safely lean into AI agents to increase their productivity.

T

TestifySec

Compliance Management

2 products

TestifySec is an evidence-driven security and compliance platform that turns every software build into cryptographic proof, letting teams ship secure, audit-ready software at the speed of development.

T

ThreatModeler

DevSecOps & CI/CD Security

1 product

ThreatModeler is a leader in agentic threat modeling and secure design.

T

Trivy

DevSecOps & CI/CD Security

1 product

Trivy is an open-source vulnerability scanner developed by Aqua Security, designed to identify security issues in container images, Kubernetes clusters, file systems, code repositories, and Infrastructure as Code (IaC)

T

Truffle Security Co.

Software Supply Chain & SBOM

5 products

Truffle Security Co. is best known for TruffleHog, an open-source and enterprise secrets-scanning product that fits software supply chain security by finding exposed credentials before they are committed, shared, or deployed.

V

Veracode

SAST

7 products

Veracode is a cloud-native application security platform providing SAST, DAST, SCA, and runtime analysis capabilities.

Z

ZeroPath

SAST

6 products

ZeroPath is an application security vendor centered on AI-native SAST and dynamic testing for running applications.