Network edge & segmentation

Act Security

Microsegmentation

2 products

Action-Centric Cloud Security

AhnLab

Endpoint Detection & Response (EDR)

5 products

AhnLab provides endpoint security products centered on Windows endpoint protection and centralized management. Its V3 Endpoint Security line uses anti-malware scanning, URL and DNS protection, device control, and cloud-assisted detection through Smart Defense. AhnLab Endpoint PLUS consolidates endpoint controls into a single management console, and the vendor also offers EDR and OT endpoint security adjacent to the core endpoint portfolio. It is best suited for enterprises that want endpoint prevention and response from a vendor with long-standing experience in anti-virus and endpoint control, especially in Windows-heavy environments.

Akamai

Zero Trust / SASE / SSE

10 products

We make life better for billions of people, trillions of times a day

AlgoSec

Network Access Control (NAC)

5 products

AlgoSec provides a security policy management platform that automates the orchestration of connectivity and security policies across hybrid cloud and on-premise environments. It provides deep visibility into complex network topologies, enabling automated risk analysis and firewall rule changes without manual intervention. The platform replaces manual CLI-based firewall management and integrates with ITSM tools to streamline security operations.

AlienVault USM (AT&T Cybersecurity)

SIEM

6 products

AT&T Cybersecurity AlienVault USM Anywhere is a cloud-hosted SIEM platform that unifies asset discovery, vulnerability assessment, intrusion detection, behavioral monitoring, and incident response for on-premises, cloud, and hybrid environments. It correlates security events from logs, network traffic, and cloud APIs like AWS CloudTrail and CloudWatch, retaining data for 90 days. Integrated with OTX threat intelligence and AlienLabs feeds, it targets SMBs and resource-constrained teams needing all-in-one threat detection without separate tools. OSSIM offers a limited open-source alternative for single-server on-premises use.

Area 1 Security (Cloudflare)

Email Security

7 products

Cloudflare started as a simple application to find the source of email spam. From there it grew into a service that protects websites from all manner of attacks, while simultaneously optimizing performance.

Arista Networks (Awake Security)

Network Detection & Response (NDR)

5 products

Arista Networks is an industry leader in data-driven, client to cloud networking for large data center/AI, campus and routing environments. Arista's award-winning platforms deliver availability, agility, automation, analytics and security through an advanced network operating stack.

Aruba ClearPass

Network Access Control (NAC)

1 product

HPE Aruba Networking ClearPass Policy Manager is an on-premises Network Access Control (NAC) platform providing role- and device-based secure access across multi-vendor wired, wireless, and VPN infrastructures. It delivers device profiling via DHCP and TCP fingerprinting, posture assessment through OnGuard persistent and dissolvable agents, guest management with self-service portals, and automated enforcement using RADIUS, TACACS+, and OnConnect. ClearPass supports Zero Trust with real-time visibility, integrates with 150+ third-party systems including SIEM and MDM, and serves over 10,000 customers in healthcare, finance, education, and government for compliance and IoT security.

AT&T Business

Security Operations

5 products

AT&T Business offers **Security Operations Center (SOC)** services that combine managed monitoring, correlation, alerting, and incident response for enterprise networks and applications. In this category, it is positioned as a telecom-scale managed security provider that operationalizes security processes around AT&T network visibility and service management. The offering is best suited to organizations that want outsourced 24x7 security operations, alarm validation, and response support without building a full internal SOC. AT&T also sells adjacent cybersecurity products, but the core Security Operations scope here is its managed SOC/MDR services.

AWS

Encryption & Key Management

16 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications. It is positioned for organizations that want key lifecycle control without running their own HSM fleet, and it uses FIPS 140-3 Level 3 validated HSMs under the service boundary. Buyers typically use it for envelope encryption, application signing, and server-side encryption across AWS services. It is best suited to teams standardizing key governance inside AWS rather than managing separate on-premises key systems.

Axonius

Network Access Control (NAC)

1 product

Axonius is a Cybersecurity Asset Management Platform that aggregates device data from NAC, firewalls, vulnerability scanners, EDR, SIEM, MDM, and other security tools to provide unified visibility across IT, OT, IoT, and medical devices. The platform correlates data from siloed systems to enable automated discovery, policy enforcement, and remediation. Positioned for enterprises requiring comprehensive asset inventory and compliance across heterogeneous environments, with specialized support for healthcare organizations.

Barracuda

Email Security

8 products

Barracuda is a leading cybersecurity company providing complete protection against complex threats

Bitglass

CASB (Cloud Access Security Broker)

6 products

Bitglass provides a multi-mode CASB that secures SaaS applications, IaaS instances, data lakes, and private apps via forward proxy, reverse proxy, and API integrations. It delivers real-time data protection and threat prevention using machine-learning to adapt to new cloud apps, malware, and user behaviors. The agentless architecture offers end-to-end visibility, prevents data leakage, and limits external sharing. As part of its integrated SASE platform with SmartEdge SWG and ZTNA, Bitglass suits enterprises adopting cloud and BYOD while addressing compliance gaps in dynamic environments.

Cequence Security

API Security

4 products

Cequence Security sells API Security as part of its Unified API Protection platform, focusing on runtime discovery, inventory, compliance checks, and attack detection for internal, external, third-party, managed, unmanaged, shadow, and zombie APIs. It integrates with API gateways and reverse proxies to inspect live traffic and evaluate API usage and risk without adding client-side instrumentation. The product is best suited for enterprises that need continuous API attack-surface visibility and runtime protection across SaaS, on-premises, or hybrid environments. Cequence also offers adjacent bot management and WAAP capabilities, but its API Security scope centers on discovery, conformance, and blocking API abuse.

Check Point

Cloud Security / CSPM

7 products

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

C

Cisco

Zero Trust / SASE / SSE

14 products

Cisco Umbrella is a cloud-delivered Security Service Edge (SSE) solution that enforces zero trust by continuously verifying identity, device posture, and context before granting access to applications. It converges multiple security functions, secure web gateway, firewall-as-a-service, cloud access security broker, and zero trust network access, into a unified cloud platform. Cisco Umbrella serves enterprises requiring distributed security across remote workers, branch offices, and on-premises infrastructure without complete network architecture overhauls.

Cloudian (via integrations)

Backup & Disaster Recovery

5 products

Cloudian is revolutionizing enterprise storage with its exabyte-scalable data platform software, designed to meet the demands of today's data-intensive AI and analytics workloads.

ColorTokens

Microsegmentation

1 product

ColorTokens' enterprise microsegmentation platform gives you the peace of mind of knowing that your computing environment is always prepared for a breach-by-design. With our Xshield platform, your critical business systems are protected by micro-perimeters, preventing the spread of malware or ransomware.

CyberSentriq

Email Security

6 products

Complete email security, backup, retention, and recovery in one unified platform - helping you protect customers, simplify management, reduce risk, and grow predictable recurring revenue with confidence.

DataSunrise provides a unified platform for database security, auditing, and vulnerability management across heterogeneous database environments. The solution includes a database firewall, dynamic data masking, and continuous activity monitoring (DAM) to defend against SQL injection and unauthorized access. It integrates DSPM capabilities to provide visibility into where sensitive PII/PHI resides across RDS, Redshift, Snowflake, and on-prem SQL servers.

DeepWatch

Managed Detection & Response (MDR)

7 products

Deepwatch® is the leader in Precision MDR powered by AI and humans. We amplify human expertise with AI insights to reduce the risks that matter most to your business.

Elisity

Microsegmentation

2 products

Elisity is a leap forward in network segmentation architecture. We enable CISOs to lead the enterprise effort to achieve Zero Trust maturity, proactively prevent security risks, and reduce network policy management complexity.

Extreme Networks ExtremeControl

Network Access Control (NAC)

3 products

Extreme Networks ExtremeControl is a centralized Network Access Control (NAC) solution that enforces role-based access policies for wired, wireless LAN, and VPN users across multi-vendor switches and access points. It integrates authentication via 802.1X, Web-based, Kerberos, and RADIUS; vulnerability assessment for security posture checks; and location services to authorize endpoints. ExtremeControl engines detect devices by MAC/IP addresses, assign VLANs or policy roles on Extreme switches, support RFC 3580 quarantine, IPv6, Microsoft NAP, and TNC interoperability. Best for enterprises with Extreme Networks infrastructure seeking BYOD, IoT, and granular post-connect enforcement with assisted remediation.

F5 Advanced WAF

API Security

9 products

We deliver and secure every app

Fastly

Firewall / NGFW

3 products

Developers change the way the world experiences the web: they drive the next groundbreaking innovation, power the companies that connect us, and create experiences that can transform our lives. And we built Fastly to make sure they always have what they need to make it happen.

FireMon

Firewall / NGFW

6 products

FireMon is a network security company focused on firewall policy control for the hybrid enterprise. FireMon helps organizations manage and analyze security policy across multi-vendor firewalls, cloud networks, and microsegmentation environments with real-time change visibility, risk analysis, automation, and continuous compliance.

Forescout

IoT Security

3 products

Forescout’s IoT Security offering is an agentless device visibility and control platform for unmanaged IoT, OT, and IoMT environments. It identifies devices as they connect, classifies them by type and function, detects weak or factory-default credentials, monitors communications for anomalous behavior, and automates policy actions such as segmentation, quarantine, and least-privilege network access. The product is best suited for enterprises that need passive discovery and enforcement across mixed IT/OT networks, including healthcare, manufacturing, building automation, and critical infrastructure. Forescout also offers adjacent OT and network access control capabilities, but the IoT Security scope centers on device visibility, classification, and containment.

Fortinet

Firewall / NGFW

9 products

Fortinet’s FortiGate line is the company’s Firewall/NGFW offering, covering stateful firewalling, application control, IPS, web filtering, SSL/TLS inspection, and threat-intelligence-backed blocking. It is widely deployed from branch and edge sites to enterprise perimeter and segmentation use cases, with hardware, virtual, and cloud form factors managed through the same Fortinet policy stack. Buyers typically choose it when they need firewall enforcement plus inline inspection and VPN capability in one appliance, especially in environments that already use FortiGuard threat feeds or the Fortinet Security Fabric. Adjacent products include SD-WAN and ZTNA, but those are not the core scope here.

Genians Genian NAC

Network Access Control (NAC)

1 product

Genian NAC is a 4th generation Network Access Control solution from Genians that delivers real-time visibility into IP-enabled devices using Layer 2 Network Sensors connected to broadcast domains, supporting legacy networks without infrastructure changes. It profiles endpoints by over 500 criteria, including EOS/EOL status, vulnerabilities, and manufacturer details, enforcing policies via multi-layered methods like ARP control, built-in RADIUS for 802.1x, DHCP server, SPAN-based TCP reset, and agent-based NIC/power control. Ideal for enterprises with heterogeneous IT/IoT/OT environments seeking non-disruptive surveillance and dynamic compliance enforcement.

Huskeys

Firewall / NGFW

1 product

Huskeys is an edge security management platform for organizations running multi-cloud and multi-WAF environments. It applies an AI-driven, agentic layer across CDN, WAF, and edge infrastructure to unify configuration, rule, and policy management across otherwise disconnected security tools. The platform gathers signals from existing WAFs, enriches them with environmental context, and analyzes traffic behavior, business logic, and risk to continuously adapt rules and policies. It is deployed as a cloud-based control plane layered on top of a customer's existing WAF and CDN providers rather than replacing them, with integration designed to take hours rather than weeks. The product targets security teams managing heterogeneous, multi-vendor edge security stacks who need centralized visibility and orchestration without migrating away from current tools.

Illumio

Microsegmentation

1 product

Illumio is the first and only platform built for breach containment. Powered by an AI security graph. Enabling your Zero Trust journey.

Infoblox DDI with NAC

Network Access Control (NAC)

1 product

Infoblox NIOS DDI is a cloud-managed platform delivering DNS, DHCP, and IP address management (IPAM) across hybrid and multi-cloud networks. The platform integrates with NAC solutions through RADIUS authentication, RPZ threat forwarding, and vendor-agnostic enforcement capabilities. Infoblox provides network context, device discovery, DNS security events, IP tracking, that NAC systems leverage for threat prioritization and real-time quarantine decisions. Best suited for enterprises managing distributed networks requiring centralized DDI control with security integration.

Juniper Networks

Firewall / NGFW

1 product

Juniper Networks provides SRX Series firewalls and Juniper Secure Edge for firewall/NGFW use cases, with policy enforcement across physical, virtual, containerized, and as-a-service deployments. In this category, it is positioned for enterprise campus, data center, branch, and regional headquarters networks that need application-aware traffic control, intrusion prevention, URL filtering, SSL inspection, and malware detection in a single firewall stack. Its value is strongest for organizations already using Juniper networking gear or looking for centralized policy management through Security Director Cloud and JUNOS OS.

N-able Mail Assure

Email Security

9 products

N-able Mail Assure is a cloud-based email security gateway for MSPs and Microsoft 365 environments. In scope for email security, it filters inbound and outbound mail, blocks spam and email-borne threats, supports policy-based controls, and provides quarantine, archiving, and continuity functions through a web console. N-able positions it for service providers and IT teams that need centralized protection for multiple domains and tenants, plus message-level visibility and administrative reporting. Adjacent capabilities include a private portal for handling sensitive messages and Microsoft 365 add-ons, but the core product is email gateway protection.

Netscout Arbor

Firewall / NGFW

5 products

NETSCOUT Arbor is a DDoS protection platform with 25+ years of market presence, not a traditional firewall/NGFW. The Arbor Edge Defense (AED) appliance deploys inline between internet router and firewall to provide stateless, always-on DDoS mitigation. Arbor monitors 800Tbps of traffic across 550+ customers representing ~50% of global internet traffic. Best suited for enterprises requiring carrier-class DDoS defense with integrated threat intelligence and outbound compromise detection.

Netskope

Zero Trust / SASE / SSE

4 products

Netskope provides Netskope One Data Loss Prevention (DLP), a cloud-delivered solution integrated into its Security Service Edge (SSE) platform for zero trust data protection. It secures sensitive data across SaaS, IaaS, private apps, web, email, endpoints, and AI environments using unified classification, policy enforcement, and incident management. The patented lightweight endpoint agent enables context-aware inspection of local peripherals like USB drives with cloud-based ML classifiers, OCR, file fingerprinting, and exact data matching (EDM). Best for enterprises needing consistent DLP coverage in hybrid and cloud-native setups with high detection accuracy.

Nile Access Service

Network Access Control (NAC)

8 products

Nile Access Service is a cloud-native Network-as-a-Service platform delivering wired and wireless campus infrastructure with embedded zero-trust security. The vendor eliminates standalone NAC appliances by natively integrating identity-based access control and microsegmentation into the network fabric using Layer 3 architecture. Nile serves over 150 customers across 30 countries and targets enterprises seeking to reduce NAC complexity and operational overhead while enforcing continuous device authentication and least-privilege access.

OPSWAT

Vulnerability Management

9 products

OPSWAT prevents known, unknown, and AI-generated threats from reaching the systems the world depends on. The MetaDefender Platform, OPSWAT's AI-powered cybersecurity solution, secures every file, device, and data transfer across IT, OT, and cross-domain environments.

Ordr

IoT Security

4 products

We filter out noise and pinpoint critical risks, empowering organizations to safeguard every asset in the cloud, on-premises, or in SaaS environments.

PacketFence

Network Access Control (NAC)

1 product

PacketFence is a free, open-source Network Access Control (NAC) system for securing small to large heterogeneous networks. It provides out-of-band enforcement via SNMP or RADIUS, full 802.1X support with FreeRADIUS using PEAP-TLS, EAP-TLS, EAP-PEAP, and EAP-TTLS methods, captive portal for registration and remediation, and VLAN isolation for non-compliant or compromised devices. Integrates with Snort NIDS, Nessus/OpenVAS vulnerability scanners, and syslog parsing in tools like FortiSIEM. Best for organizations needing flexible deployment across managed switches, wireless controllers, and legacy equipment without inline traffic processing.

P

Palo Alto Networks

Firewall / NGFW

21 products

Palo Alto Networks is a major vendor in the Firewall / NGFW market, best known for PAN-OS-based next-generation firewalls and Cloud NGFW. Its firewalls combine application-aware policy, user-based controls, and threat prevention to inspect traffic, including encrypted sessions, and block known and unknown threats. It fits enterprises that need granular segmentation, internet edge protection, and consistent policy across physical and cloud deployments. Adjacent offerings exist, but the core firewall line remains centered on network traffic control, inspection, and prevention.

Portnox CLEAR

Network Access Control (NAC)

5 products

Portnox CLEAR is a cloud-native NAC-as-a-Service platform that provides continuous risk monitoring and access control for endpoints across wired, wireless, VPN, and virtual networks. It discovers devices, authenticates via cloud RADIUS and Active Directory integration, enforces role- and risk-based policies, and automates quarantine of non-compliant devices using AgentP for enrolled endpoints. Vendor-agnostic with zero on-premises footprint, it supports managed, BYOD, IoT/OT devices in distributed environments. Best for mid-sized enterprises (500-10,000 employees) needing SASE-aligned NAC without hardware maintenance.

Pulse Secure Pulse Policy Secure

Network Access Control (NAC)

7 products

Secure Access Made Easy, Comprehensive, and Flexible

Radware AppWall is Radware’s web application and API protection offering, positioned around positive security policy enforcement for HTTP-based services. In the API security scope, it protects REST, GraphQL, and SOAP endpoints with auto-generated policies, request validation, and attack blocking for abuse, injection, authentication bypass, and data theft attempts. It is best suited for enterprises that already use Radware application delivery infrastructure or need API protection tied to WAF policy enforcement rather than a standalone API gateway. The product is also used in environments with PCI-driven web application security requirements.

Sangfor Technologies

Firewall / NGFW

6 products

Sangfor Technologies’ Network Secure is its firewall/NGFW product, positioned around application-layer control, malware inspection, and integrated web application protection. In this category it combines traditional NGFW functions with malware detection, intrusion prevention, application control, and NG-WAF capabilities in a single appliance. It is best suited for enterprises that want perimeter enforcement plus web application and ransomware-focused controls without adding separate firewall and WAF stacks. Sangfor also pairs the firewall with its own endpoint and network security products for correlated response, but those adjacent capabilities are secondary in this profile.

Simbian

Agentic SOC & Investigations

5 products

Simbian is Building the Self-Improving Defense Platform to Stop AI Attacks

Skyhigh Security CASB

CASB (Cloud Access Security Broker)

8 products

Skyhigh Security CASB is a cloud-based, multi-tenant Cloud Access Security Broker that deploys via forward and reverse proxy modes for real-time control over sanctioned and unsanctioned cloud services. It leverages the Cloud Registry for 50+ attribute risk assessments across 20,000+ services, enabling discovery, classification, and remediation. Key capabilities include DLP policy enforcement synced with endpoint DLP, machine learning-based UEBA for insider threat detection, malware analysis, configuration auditing against benchmarks with automated remediation, and contextual access controls. Best suited for enterprises needing comprehensive visibility and governance across hybrid cloud environments with SharePoint integration.

Sophos

Data Loss Prevention (DLP)

12 products

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

SpamTitan by TitanHQ

Email Security

9 products

SpamTitan by TitanHQ is a cloud-based or on-premises email security gateway that filters inbound and outbound emails, blocking spam, phishing, malware, ransomware, and APTs with a 99.99% spam catch rate and 0.003% false positive rate. It integrates with Office 365, Google Workspace, Active Directory, and LDAP via a web-based admin portal. Designed for MSPs with multitenancy and granular per-domain policies, it serves SMBs, enterprises, and service providers seeking rapid deployment without agents.

Stormshield

Firewall / NGFW

6 products

Stormshield Network Security (SNS) is the company’s firewall and NGFW line, aimed at organizations that want perimeter and segmentation controls with integrated inspection, IPS, VPN, and application control. Its product pages describe real-time protection, URL filtering, IP geolocation controls, and multi-WAN routing, which places it in the UTM-style NGFW segment rather than a pure packet-filtering firewall. It is typically positioned for enterprises, public-sector networks, and distributed sites that need on-premises firewall appliances and centralized management.

TierPoint

Security Operations

7 products

We are security-focused, cloud-forward, and data center-strong, a champion for untangling the hybrid complexity of modern IT, so you can free up resources to innovate, exceed customer expectations, and drive revenue.

Trinity Cyber

Network Detection & Response (NDR)

4 products

Trinity Cyber is a network security vendor centered on Full Content Inspection (FCI), which inspects full internet sessions in both directions and neutralizes malicious content in transit. In the NDR scope, its value is highest where teams need deep north-south traffic inspection, visibility into encrypted sessions, and inline response at the network edge. Trinity Cyber is best suited for mid-market and enterprise buyers that want active network threat prevention rather than alert-only detection. The company also offers managed services and adjacent controls, but its core differentiator is inline session-level traffic analysis and modification.

TrueFort

Microsegmentation

1 product

TrueFort is a workload protection and microsegmentation vendor focused on blocking lateral movement across hybrid environments. Its platform builds behavioral baselines from workload telemetry, then generates segmentation policies and pushes enforcement to host firewalls or supported workload agents. The product is aimed at enterprises running mixed Windows, Linux, virtualized, container, Kubernetes, on-premises, and cloud workloads that need application-level segmentation without relying only on network-based controls. TrueFort is positioned as a specialist in zero-trust segmentation and runtime workload protection, with an emphasis on application behavior visibility, policy automation, and containment of ransomware, compromised credentials, and insider threats.

Twingate

Zero Trust / SASE / SSE

4 products

Twingate provides Zero Trust Network Access (ZTNA) using software-defined perimeters to hide resources from public and private networks, enabling direct encrypted tunnels between authenticated users and resources. It acts as a cloud-native control layer for Zero Trust orchestration, integrating with identity providers, MDM, and EDR tools. Positioned as a lightweight SASE alternative to VPNs, it supports phased deployments without infrastructure changes. Best for organizations seeking rapid ZTNA adoption for remote access to critical resources while maintaining existing networks.

Unisys Stealth

Microsegmentation

5 products

Unisys Stealth is a zero-trust microsegmentation platform that uses identity-based access controls and cryptographic cloaking to transform networks into segmented environments. The suite includes Stealth(core) for enforcement via micro-segmentation and encryption, and Stealth(aware) for network discovery and policy automation. Deployed across on-premises, AWS, and Azure environments, Stealth holds NSA NIAP certification and serves government and enterprise customers requiring east-west traffic isolation and dynamic workload protection.

Versa Networks

Firewall / NGFW

9 products

Versa Networks, the leader in SASE, combines extensive security, advanced networking, full-featured SD-WAN, genuine multitenancy, and sophisticated analytics via the cloud, on-premises.

WatchGuard Technologies

Firewall / NGFW

9 products

For 30 years, WatchGuard has delivered real-world cybersecurity built for constantly evolving threats and limited IT resources. We partner with MSPs to simplify security and protect networks, endpoints, identities, and cloud environments with solutions that scale and last.

wolfSSL

Encryption & Key Management

8 products

wolfSSL is an embedded cryptography vendor best known for its wolfCrypt engine, wolfSSL TLS library, and wolfHSM key-management framework. In the Encryption & Key Management category, it provides software for protecting keys, offloading sensitive cryptographic operations to HSMs, and supporting standards such as PKCS#11 and AUTOSAR SHE. It is strongest for embedded, automotive, RTOS, and constrained-device environments where small footprint, portable C code, and hardware-backed key handling matter. Adjacent products include TLS, SSH, MQTT, and boot/security tooling, but the core fit here is cryptography and key lifecycle control.

YazamTech

Email Security

9 products

YazamTech Ltd. is a specialized cybersecurity vendor focused on Content Disarm & Reconstruction (CDR) technology, not a dedicated Email Security platform. While their CDR solutions can be applied to sanitize files within email streams to block infected attachments, they do not offer core email security capabilities like spam filtering, phishing detection, BEC prevention, or secure email gateways. The company is best positioned as a data security specialist for organizations needing to neutralize advanced threats in file streams, rather than as an email security buyer's primary solution. Their market position is niche within data sanitization, not email protection.

Zentera Systems, Inc.

Zero Trust / SASE / SSE

5 products

Zentera Systems offers a Zero Trust Network Access (ZTNA) and microsegmentation platform centered around its Virtual Chamber technology. It provides a secure overlay for IT, OT, and AI infrastructure that requires no changes to underlying network architecture. It is often used to replace traditional VPNs and complex firewall-based segmentation with a more agile identity-centric access model.

Zero Networks

Microsegmentation

4 products

Zero Networks is a microsegmentation vendor that automates network asset discovery, policy creation, and enforcement to stop lateral movement and reduce blast radius. Its Segment product is positioned for enterprises that want segmentation across on-premises, cloud, and OT/IoT environments without manually building firewall rules or deploying agents. The company also sells adjacent zero trust capabilities, but its microsegmentation offer centers on agentless, identity-driven segmentation with MFA-controlled access for workloads and unmanaged devices. It appears aimed at organizations replacing legacy segmentation projects with faster policy rollout and centralized control.

Zscaler

Zero Trust / SASE / SSE

11 products

Zscaler provides a cloud-native Zero Trust Exchange platform with over 150 global POPs, processing 200 billion+ daily transactions for secure user-to-application connectivity. It delivers Zscaler Internet Access (ZIA) as a security service edge (SSE) with secure web gateway (SWG), full SSL inspection, and Zscaler Private Access (ZPA) for zero trust network access (ZTNA) replacing VPNs. Backed by machine learning from massive scale, it offers 200,000+ daily security updates. Best for distributed enterprises needing low-latency protection for remote users, SaaS, and private apps without legacy hardware.