Data security posture (DSPM)

Real-time malware detection+10

All the security tools we used were slow, confusing, overpriced and noisy. So we built better ones.

Alation

Discover sensitive data across cloud storesClassify data by sensitivity and business context+9

3 products

We make data answerable and actionable, for people and agents.

AvePoint

Sensitive data discovery and classification+11

AvePoint is the unifying Trust Layer for AI. AvePoint enables more than 28,000 organizations and 6,000 channel partners to protect, secure, and govern their entire AI estate across data, infrastructure, AI and agents for Microsoft, Google, Salesforce, and other leading cloud environments, so that enterprises can deploy AI with confidence and scale innovation without scaling risk.

AWS

Encryption & Key Management

16 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications. It is positioned for organizations that want key lifecycle control without running their own HSM fleet, and it uses FIPS 140-3 Level 3 validated HSMs under the service boundary. Buyers typically use it for envelope encryption, application signing, and server-side encryption across AWS services. It is best suited to teams standardizing key governance inside AWS rather than managing separate on-premises key systems.

Create and control KMS keys+10

BigID

Automated data discovery and classification+11

7 products

BigID is a data intelligence platform that helps organizations discover, classify, secure, govern, and manage enterprise data and AI. BigID connects data sensitivity with identity, access, activity, lineage, ownership, policy, and business context so teams can reduce risk, automate compliance, strengthen privacy, and safely adopt AI.

Binarii Labs

Discovers sensitive data across cloud data stores to build an inventory of known and shadow datasets and reduce blind spots.

4 products

We're committed to pioneering cybersecurity through our innovative patented data security process. Our mission is to ensure that your data remains securely under your control.

Bold Security

Endpoint data classification+8

Bold Security is a cybersecurity vendor whose core product is a local AI agent for endpoint data protection, not a traditional cloud-native DSPM suite. In a DSPM context, it focuses on identifying sensitive data on devices, tracking how that data moves through applications and browser workflows, and blocking risky exfiltration or misuse before data leaves the endpoint. It is best suited for enterprises that want endpoint-level visibility into user-driven data movement, especially where employees use SaaS apps and AI tools.

Cloudian (via integrations)

Backup & DR

S3-compatible object storage backend+11

Cloudian is revolutionizing enterprise storage with its exabyte-scalable data platform software, designed to meet the demands of today's data-intensive AI and analytics workloads.

Concentric AI

Discover sensitive data across all sources+8

We help businesses discover, understand, and protect sensitive information across cloud and on-prem environments. Our AI-powered data security governance solutions deliver precise visibility, automated protection, and safe AI adoption, so organizations can reduce risk, strengthen compliance, and confidently innovate without compromising what matters most.

Cyera

Discover sensitive data across cloud and on-prem+10

Cyera is a pioneer in the data security space that empowers security leaders to discover their data attack surface, control the use of data, monitor, detect, and quickly remediate risk.

D3 Security

SOAR

4 products

D3 Security provides Morpheus AI, an autonomous AI SOC platform that investigates and triages 100% of security alerts in under three minutes using a purpose-built cybersecurity triage LLM and Attack Path Discovery. This traces full attack paths horizontally across email, endpoints, identity, cloud, and network tools, and vertically through historical telemetry, delivering L2+ depth with structured reports including MITRE ATT&CK mapping, entity graphs, and response recommendations. Best for enterprises with high alert volumes seeking to automate L1/L2 SOC tasks while augmenting L3 analysts. Developed over 24 months by 60 specialists.

Autonomous alert investigation+10

DataGrail

Privacy & Consent

6 products

We believe transparency builds trust. That's why we created a platform that is purpose-built for brands to create robust privacy programs with ease.

Automated cookie consent management+10

DataStealth

Cloud and SaaS data discovery+8

DataStealth provides an agentless data protection platform that intercepts traffic at the network layer to discover, classify, and neutralize sensitive data. It utilizes tokenization, masking, and encryption to protect assets on-premises or in the cloud without requiring modifications to the original applications or underlying databases. This solution replaces complex SDK-based encryption and legacy gateway-based masking tools with a transparent, infrastructure-agnostic layer.

DataSunrise Data and AI Security

Protect databases across cloud and on-premises+11

DataSunrise provides a unified platform for database security, auditing, and vulnerability management across heterogeneous database environments. The solution includes a database firewall, dynamic data masking, and continuous activity monitoring (DAM) to defend against SQL injection and unauthorized access. It integrates DSPM capabilities to provide visibility into where sensitive PII/PHI resides across RDS, Redshift, Snowflake, and on-prem SQL servers.

Fasoo

Discover sensitive data across hybrid environmentsClassify sensitive data and data locationsIdentify data security posture risks+5

7 products

Building Digital Trust, and More

Files.com

Managed file transfer workflowsCloud file storage controls+9

founder-led, profitable, and built for the long term

Google Cloud Security

Automatic sensitive data discovery+10

3 products

Google Cloud DLP (now Sensitive Data Protection) is a fully managed service for discovering, classifying, and protecting sensitive data across Google Cloud Platform resources including BigQuery, Cloud Storage, and Datastore. It scans structured/unstructured data, text streams, and images via OCR, using over 200 built-in infoType detectors for PII like credit card numbers and phone numbers. De-identification methods include masking, redaction, tokenization, format-preserving encryption, and date-shifting. Best for enterprises with heavy GCP usage needing automated, scalable scanning of data at rest and in transit via API or console.

Honeycake

File-based sensitive data encryption+7

Honeycake is not a DSPM vendor in the evidence available; its product line is positioned as an enterprise file security and self-protecting file platform. The company says it protects sensitive content in files while users store and share them through existing tools, with desktop/mobile apps, a web dashboard, CLI tools, enterprise products such as Vault and Uploader, and an API. Within the DSPM scope, there is no clear evidence of cloud data discovery, classification, data flow mapping, or shadow-data detection. It appears best suited for teams focused on file-level protection and controlled sharing rather than data posture management.

Laminar

Cloud data discovery and classification+9

Laminar is a data security posture management (DSPM) platform focused on discovering, classifying, and monitoring sensitive data across cloud and SaaS data stores. It is designed to show where sensitive data lives, who can access it, and where exposure or anomalous access creates risk. Public materials describe support for AWS, Azure, GCP, and Snowflake, with a deployment model that keeps scanning in the customer tenant and returns only metadata. It is best suited for enterprises that need cloud data visibility and remediation guidance without moving data into a third-party cloud.

Lepide

Unified auditing and reporting+11

Lepide helps organizations protect sensitive data and strengthen identity security across on-premises and hybrid environments. Our Data Security Platform provides deep visibility into Active Directory, file servers, and Microsoft 365, enabling teams to discover sensitive data, analyze and remediate excessive permissions, monitor changes in real time, and detect suspicious behavior.

LightBeam

Discover sensitive data across data estates+9

Lightbeam is built for those who believe sensitive data should be understood, governed, and protected before AI can expose it.

Microsoft

CSPM

14 products

Microsoft Defender for Cloud is a multicloud CSPM platform that provides continuous security posture assessment across Azure, AWS, and GCP. It delivers agentless vulnerability scanning, misconfiguration detection, and compliance monitoring against industry benchmarks (CIS, NIST, ISO, PCI-DSS). The platform generates hardening recommendations ranked by risk and includes attack path analysis to identify exploitable chains. Defender for Cloud serves enterprises managing hybrid and multicloud infrastructure seeking unified posture visibility and compliance reporting.

Agentless vulnerability scanning+21

Netwrix

IGA

Automate joiner mover leaver workflows+11

Netwrix provides a SaaS-based Identity Governance and Administration (IGA) platform, primarily through Netwrix Identity Manager (formerly Usercube), automating identity lifecycle management across hybrid IT environments. It handles provisioning, deprovisioning, access reviews, and policy enforcement for joiner-mover-leaver processes. The solution builds role catalogs mapping technical entitlements to business roles, detects toxic role combinations and Segregation of Duties (SoD) conflicts, and generates compliance reports. Best suited for mid-to-large enterprises needing scalable IGA for Active Directory, Azure AD, and multi-system access governance to enforce least privilege and support audits.

OPSWAT

Vulnerability Management

Detect and report installed software vulnerabilities

OPSWAT prevents known, unknown, and AI-generated threats from reaching the systems the world depends on. The MetaDefender Platform, OPSWAT's AI-powered cybersecurity solution, secures every file, device, and data transfer across IT, OT, and cross-domain environments.

ORION Security

Behavior-driven data loss prevention+7

We believe organizations should be able to trust their data in motion. Not by locking it down, slowing people down, or writing endless rules, but by understanding where data is going, how it is being used, and when movement becomes risk.

Polar Security

Discover sensitive cloud data stores+6

Polar Security is a DSPM vendor focused on discovering, classifying, and mapping sensitive data across cloud and SaaS environments, including shadow data. IBM acquired Polar Security to add DSPM capabilities to its Guardium portfolio, which suggests Polar’s market role was as an early specialist in cloud data discovery and data-flow visibility rather than a broad security platform. It is best suited for security teams that need agentless visibility into where sensitive data resides, how it moves, and who can access it across cloud stores and SaaS applications.

Privicore

AI-SPM

AI asset discovery and inventoryAI configuration and exposure scanningTraining data and model classification+3

The Data Control Layer™ for the AI Era

Proofpoint

Email Security

Detect AI-augmented email threats+11

Proofpoint is a human-centric cybersecurity platform focused on protecting organizations from email-based and identity-driven attacks such as phishing, business email compromise (BEC), and social engineering. It secures inbound and outbound communications using advanced threat detection, AI-driven impersonation analysis, URL and attachment sandboxing, and behavioral risk signals. Beyond email protection, it extends into data loss prevention (DLP), insider threat detection, and security awareness training to reduce human risk across the organization. The platform integrates across email, cloud applications, and collaboration tools to protect sensitive data and stop attacks targeting users.

Relyance AI

Continuous sensitive data discovery+10

To secure the future of data-driven enterprises by making every data journey visible, controlled, and compliant, from the first line of code to the final AI output.

Row Zero

Direct warehouse-connected spreadsheetsCloud-based spreadsheet access controlRow-level data protection+7

We believe in the spreadsheet

SafePaaS

IGA

Policy-based access governance+9

The governance control fabric that shields identity, transactions, data and applications across the enterprise.

SailPoint

IGA

Automated identity lifecycle management+10

For over 20 years, SailPoint has helped the world's largest organizations secure and govern every identity, human, machine, and now AI.

Securiti

Privacy & Consent

Website cookie scanning and consent banner integration

At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.

Sentra

Discover sensitive data across cloud environments

Sentra operates at the intersection of data, AI, and security, the three disciplines no prior platform was built to address simultaneously. One platform. Continuous AI data readiness and governance at enterprise scale and speed.

Skyhigh Security CASB

SSE

Discover unsanctioned cloud services+11

Skyhigh Security CASB is a cloud-based, multi-tenant Cloud Access Security Broker that deploys via forward and reverse proxy modes for real-time control over sanctioned and unsanctioned cloud services. It leverages the Cloud Registry for 50+ attribute risk assessments across 20,000+ services, enabling discovery, classification, and remediation. Key capabilities include DLP policy enforcement synced with endpoint DLP, machine learning-based UEBA for insider threat detection, malware analysis, configuration auditing against benchmarks with automated remediation, and contextual access controls. Best suited for enterprises needing comprehensive visibility and governance across hybrid cloud environments with SharePoint integration.

Spirion

Discovers sensitive data across cloud storage, databases, file systems, SaaS repositories, and on-premises sources to map where regulated records such as PII, PHI, and PCI are stored.

3 products

In a world that relies more and more on data, understanding and protecting it is crucial. That's why at Spirion, we're dedicated to helping organizations around the world protect their most sensitive information.

Ubiq Security

Encryption & Key Management

Integrated key management with secure storage+11

Ubiq Security is an identity-driven encryption and key management platform focused on client-side protection of sensitive data before it reaches storage or downstream services. It provides application-level encryption, tokenization, and masking with integrated master key lifecycle management, so teams do not need to operate a separate KMS or HSM for common deployments. The product is aimed at engineering, security, and compliance teams that need to bind data access to IAM policies and enforce policy-controlled cryptography across applications, databases, data warehouses, API gateways, and cloud workloads. It is best suited to organizations that want data-level control rather than storage-layer encryption alone.

Varonis