Security awareness

Real-threat phishing simulations+11

An AI-Native Company Dedicated to Cybersecurity. Built by AI insiders with an outsider's perspective: Behavior is the future of cyber defense.

Abnormal Security

Behavioral AI email threat detectionAPI-based cloud email protection+10

8 products

Behavioral AI that protects email, identity, and AI, and stops insider threats.

Adaptive Security

AI-driven security awareness training+9

Unified security awareness training, email security, and AI governance built for the AI era.

Akamai

Zero Trust / SASE / SSE

10 products

We make life better for billions of people, trillions of times a day

Zero Trust Network Access as a serviceDevice posture based adaptive access+10

Arkose Labs

Unified fraud prevention platform+11

Arkose Labs provides fraud detection and prevention focused on account fraud, bot abuse, credential stuffing, fake account creation, and automated abuse across web and mobile touchpoints. Its platform combines real-time risk scoring with challenge-response enforcement to distinguish legitimate users from suspicious sessions and to raise the cost of abuse. The product is best suited for consumer-facing digital businesses such as ecommerce, financial services, and online platforms that need to stop automated and human-operated fraud without blocking valid traffic. Arkose also advertises AI-agent policy enforcement, but its core value in this category is adaptive fraud deterrence and step-up authentication.

Beyond Identity

Multi-Factor Authentication (MFA)

8 products

Beyond Identity provides passwordless, phishing-resistant MFA built around device-bound cryptographic keys and device-native biometrics. Its MFA offering is aimed at organizations trying to replace passwords, push approvals, and OTPs with stronger authentication for workforce access. The platform uses an authenticator on endpoints and a cloud policy engine to verify both user identity and device trust at login. It is best suited for security teams that want MFA with continuous device posture checks and support for managed and unmanaged endpoints, while avoiding legacy second factors that can be phished or replayed.

Phishing-resistant passwordless MFA+11

Brain

AI-driven adaptive training+7

AI is everywhere. Most teams aren't ready. Brain fixes that. We're the platform companies use to drive AI adoption : measure it, prove it, and make it stick. Through micro-exercises, real usage data, and an AI mastery score per employee. 500,000+ employees trained. Deployed in days. 🤖 AI adoption : Prompting, AI Act compliance, risk detection. Measurable. Auditable. 🔐 Cybersecurity : Phishing, social engineering, data protection. Built as reflexes, not lectures.

BrainStorm Inc.

Realistic phishing campaign delivery+8

BrainStorm Inc. provides a security awareness platform designed to reduce human-centric risk through personalized education and remedial training focused on behavior change. It utilizes 'Threat Defense Packs' that combine proactive learning with just-in-time training triggered by risky user actions. The solution provides measurable insights into security culture, helping organizations fulfill compliance requirements and reduce successful phishing and social engineering attacks.

Cequence Security

API Security

Complete API visibility and monitoring+10

Cequence Security sells API Security as part of its Unified API Protection platform, focusing on runtime discovery, inventory, compliance checks, and attack detection for internal, external, third-party, managed, unmanaged, shadow, and zombie APIs. It integrates with API gateways and reverse proxies to inspect live traffic and evaluate API usage and risk without adding client-side instrumentation. The product is best suited for enterprises that need continuous API attack-surface visibility and runtime protection across SaaS, on-premises, or hybrid environments. Cequence also offers adjacent bot management and WAAP capabilities, but its API Security scope centers on discovery, conformance, and blocking API abuse.

Chainalysis

Blockchain Security

Real-time transaction monitoring and threat detection

Chainalysis is the blockchain data platform. We provide data, AI-powered software, services, and research to government agencies, exchanges, financial institutions, and cybersecurity companies in over 70 countries.

Cofense

Post-delivery phishing threat detectionThreat remediation and containment+10

Smarter Phishing Defense. Stronger Human Security.

Coro

AI-driven phishing and malware prevention+11

Most security stacks get unmanageably complex as your business grows. Coro consolidates endpoint, email, cloud, network, identity, data protection, and security awareness training into one unified platform.

Criminal IP

IP address threat analysis+8

Criminal IP delivers Decision-Ready Intelligence powered by AI and OSINT, enabling precise threat analysis and deep investigations into IPs, domains, and URLs with reputation data, threat scoring, along with real-time detection of malicious indicators such as C2, IOCs, and other critical threats. Its API is designed to integrate seamlessly with workflows SIEM, SOAR, and XDR for enhanced visibility and automation.

Curricula

Threat-intel backed training episodes+9

Curricula, now part of Huntress Managed Security Awareness Training, provides security awareness training focused on employee behavior change through story-based lessons, phishing simulations, and reporting. In this category it is aimed at SMB and mid-market buyers that need recurring training without building a large internal program. The platform covers phishing, social engineering, password hygiene, and compliance-oriented awareness content, with assignments and tracking for administrators. It is positioned as a managed SAT product rather than a broad human-risk platform, with adjacent capabilities such as phishing simulation and reporting supporting the training workflow.

CybeReady

Automated security awareness training+11

Sharpen every employee's instincts to spot deception and stop attacks, while easing the burden on CISOs

CyberSentriq

MX-based gateway email security with sandboxing

Complete email security, backup, retention, and recovery in one unified platform - helping you protect customers, simplify management, reduce risk, and grow predictable recurring revenue with confidence.

CYJAX

Filters and summarizes global threat data+9

Real-time threat intelligence, curated analysis, and actionable insights. All in one unified platform.

CyLock

Vulnerability Management

Website vulnerability assessment+3

I could not verify a CyLock vulnerability management product from the provided search results or from the information available to me here. The sources returned in the query do not include an official CyLock product page, technical documentation, pricing, or integration list. For a CISO evaluating vulnerability management, that means I cannot factually describe CyLock’s scanner coverage, prioritization logic, remediation workflow, or deployment model without inventing details. If CyLock is a private vendor, its public footprint appears too limited in the supplied material to support a reliable profile.

DataDome

Real-time bot detection and mitigation+11

DataDome provides real-time fraud detection and bot management for web applications, mobile apps, public APIs, and MCP servers. In the fraud-prevention market, it is positioned around stopping account takeover, fake account creation, credential stuffing, card testing, and other automated abuse before requests reach the backend. The product classifies each request as human, bot, or trusted partner using request-level signals, device and browser data, and behavioral models. It is best suited for e-commerce, marketplaces, fintech, and other businesses where automated abuse directly affects customer accounts, checkout flows, and dispute volume.

Deception Check

Multi-channel deception simulations+5

Catch threats your other tools miss. Adaptive honeypots that look and act like your real systems, so attackers reveal themselves the moment they touch one.

Egress

Outbound email encryption+11

Enable secure and compliant email communication without adding friction. Make it easy for your teams, customers, and partners to work securely and prevent data leaks using encrypted email and simplified DLP policies.

ESET

Spam filtering for inbound mail+10

14 products

ESET Mail Security provides multilayered protection for Microsoft Exchange servers, scanning mailboxes, public folders, and hybrid Microsoft 365 environments. It uses proprietary anti-spam engines with SPF/DKIM validation, backscatter protection, and SMTP safeguards, alongside anti-malware scanning for attachments including corrupted or password-protected archives. A 64-bit architecture supports clustering for high-performance mail processing. Optional modules include Advanced Threat Defense and LiveGuard for suspicious emails. Best suited for organizations prioritizing on-premises Exchange security with remote management via ESET PROTECT console and comprehensive rule-based filtering.

Evervault

Encryption & Key Management

Store keys while data stays encrypted+9

Evervault is a developer-focused encryption and data de-identification platform used to protect sensitive fields while keeping applications able to process data without exposing plaintext. In the Encryption & Key Management category, it centers on application-level encryption, tokenization, and key handling built around its Evervault Encryption Engine (E3) running in an AWS Nitro Enclave. It is best suited for teams handling payments, cardholder data, and other regulated records that need encryption patterns embedded into application workflows rather than managed as a standalone vault. Adjacent functions such as secure enclaves and payment-specific tooling exist, but the core value here is encrypting data in transit and at rest with vendor-managed cryptographic operations.

F5 Advanced WAF

API Security

API endpoint discovery and inventoryGraphQL, REST, XML, and GWT protocol securityOWASP API Top 10 protection+9

We deliver and secure every app

Fable Security

Realistic phishing attack simulations+11

Fable brings together the best of engineering, behavioral science, and AI to solve one of security's hardest problems.

Falkin

No verified data available+6

Falkin combines early threat intelligence, AI and 1st party user data to surface scam operations from even a single suspicious interaction. Our mission is simple: to make scams preventable and proactive digital safety a standard feature of everyday banking. We can help everyday consumers detect signs of danger in online purchases, messages, investment offers, phone calls, emails and more.

Fastly

Firewall / NGFW

Automatic DDoS detection and mitigation+10

Developers change the way the world experiences the web: they drive the next groundbreaking innovation, power the companies that connect us, and create experiences that can transform our lives. And we built Fastly to make sure they always have what they need to make it happen.

Feedzai

Real-time fraud and scam detection+11

11 products

Feedzai provides fraud detection and prevention for banks, fintechs, and payment providers using real-time decisioning across cards, RTP, ACH, transfers, digital banking, and account opening. The platform combines behavioral biometrics, device identity, malware detection, and network-level fraud intelligence to score sessions and transactions before authorization or account action completes. Feedzai is positioned as an end-to-end financial crime platform, but for this category the focus is on fraud and scam prevention rather than AML workflow. It fits institutions that need low-latency scoring, explainable alerts, and models that adapt to changing fraud patterns.

Flashpoint

Deep and dark web search+10

Harness the power of data, human expertise, and automated analysis with Flashpoint's threat intelligence platform. Identify and remediate risk and take rapid, decisive action against cyber threats, fraud, vulnerability, physical, and national security threats.

Forter

Real-time transaction fraud prevention+8

AI built for the humans behind every fraud, abuse, and payments decision, so your best customers feel less friction, and you leave no revenue behind.

Frame Security

Personalized security training+11

We are a team of security experts who believe resilience starts with people. We helps organizations empower their employees to understand modern threats and act as the strongest line of defense.

Fraud.net

Real-time transaction monitoring+10

Fraud.net provides transaction fraud detection and prevention for digital enterprises, with a focus on e-commerce, travel, and financial services. Its platform scores transactions in real time, uses rules and machine-learning models to flag suspicious activity, and can block or hold payments for review before authorization completes. Fraud.net is positioned for organizations that need low-latency fraud controls across online payment flows and want to use shared fraud signals, device and behavioral data, and case review workflows. Adjacent capabilities such as case management and broader risk tooling exist, but the core value here is real-time fraud interception.

GetReal Security

GetReal Security is primarily a **deepfake and identity verification** vendor, not a classic phishing-simulation suite. Within security awareness, its nearest fit is training and testing employees against synthetic-media impersonation and AI-driven deception, including deepfake audio/video and collaboration-platform fraud. The company is best suited for enterprises, government, media, and high-risk organizations that need to validate authenticity in live communications and prepare staff for impersonation-based social engineering. Public materials emphasize real-time content verification, forensic inspection, and awareness preparation rather than broad email-phishing campaign management.

Deepfake detection+9

GhostEye

AI-generated personalized simulations+10

GhostEye is a human-risk security vendor focused on security awareness and phishing simulation through personalized, multi-channel social-engineering tests. It maps employee-facing exposure from public web and organizational data, then uses that context to generate phishing, voice, SMS, and deepfake simulations tied to current events and real attacker tactics. The platform is best suited to security teams that want continuous human-layer testing rather than classroom-style awareness training. Adjacent offerings are limited to contextual training tied to simulation outcomes.

Hoxhunt

Adaptive phishing simulations+11

Hoxhunt offers a security awareness training platform focused on behavior change through personalized phishing simulations, micro-training, and gamified employee coaching. The product is positioned for organizations that want to move beyond annual compliance modules to ongoing, role-aware training across email, Slack, and Microsoft Teams. It is strongest for enterprise and global teams that need multilingual content, adaptive difficulty, and audit-ready training records. Hoxhunt also has adjacent response capabilities, but the core SAT offering centers on employee training and phishing resilience.

Immersive

Simulation-based phishing smishing and vishing training

Immersive is a British cybersecurity company helping organizations prove cyber resilience in the AI era.

Imper.ai

Real-time fake interaction detectionMulti-channel phishing defenseIdentity-first prevention workflows+8

Detect and prevent impersonation attacks on your workforce.

Infosec (now a Cengage Company)

Phishing simulator and awareness training+7

Infosec, now part of Cengage Group, sells security awareness training through Infosec IQ for organizations that want to reduce phishing, social engineering, and unsafe user behavior. The platform combines role-based training, phishing simulations, and recurring microlearning, with content that can be delivered in multiple formats to employees and contractors. It is positioned for security teams and L&D groups that need measurable awareness programs rather than one-off training. Infosec also offers adjacent cybersecurity skills training, but those products are outside this profile.

IronCircle

Phishing simulation campaignsSecurity awareness training+9

IronCircle is a browser-based cybersecurity training platform that includes security awareness training, phishing simulation, hands-on labs, and scenario-based certification. In the security awareness and phishing simulation category, it is positioned more as a training platform than a pure phishing simulator, with emphasis on realistic practice and behavior change. It is best suited for organizations that want awareness content tied to practical security exercises and role-based skill validation rather than simple email-only simulations. The company also sells broader cyber training content, but its awareness capabilities are the relevant scope here.

Keepnet Labs

AI-powered phishing simulation across email, SMS, voice, QR codes, MFA, and callback channels using 1600+ ready-to-test scenarios in 160+ languages to assess employee vulnerability to social engineering

We ensure continuous protection for all sizes of businesses against human-targeted threats!

KnowBe4

Security awareness training modulesSimulated phishing campaigns+9

KnowBe4 empowers modern workforces to make smarter security decisions every day

KONG

API Security

Authorization and access control+11

Kong enables the connectivity layer for the agentic era – securely connecting, governing, and monetizing APIs and AI tokens across any model or cloud.

LexisNexis Risk Solutions

Identity fraud detection scoring+10

LexisNexis Risk Solutions provides fraud detection and prevention products focused on new-account fraud, identity misuse, synthetic identity, and application fraud. Its Fraud Intelligence and ThreatMetrix offerings combine identity events, device and behavioral data, and application signals to score risk in real time and flag suspicious transactions or registrations for review. It is best suited to banks, card issuers, lenders, telecom providers, utilities, and other organizations that need decisioning at onboarding and during account lifecycle management. Adjacent identity verification and compliance products exist, but the fraud portfolio is the relevant scope here.

Living Security

Risk-based training targeting and deployment+11

Living Security was born from a vision to revolutionize human risk management. Founded by cybersecurity experts, we've moved beyond compliance to empower organizations with data-driven security cultures.

Memcyco

Digital Risk & Executive Protection

Real-time digital impersonation detection+10

Memcyco provides real-time protection against customer-facing digital impersonation, phishing, and account takeover attempts by identifying fake websites and spoofed portals as they go live. In a Data Protection context, it helps limit exposure of credentials, personal data, and session details by detecting victims, compromised sessions, and attacker infrastructure early in the attack lifecycle. The product is aimed at organizations with consumer-facing web properties that need to reduce credential theft and fraud without adding endpoint agents or user friction. It also exposes high-granularity attack telemetry that can feed downstream security and fraud systems.

MetaCompliance

Automated tailored phishing simulationsCompliance-focused security awareness training+7

MetaCompliance provide effective, personalised and measurable Security Awareness Training to companies and organisations.

Mimecast

Inbound and outbound email threat scanningURL and attachment threat detection+9

10 products

Mimecast protects the work of every person in the organization, across every channel, from every actor, human and AI.

NINJIO Cybersecurity Awareness Training

Narrative cybersecurity awareness episodes+11

NINJIO provides a human risk management platform that utilizes personalized security coaching and story-based awareness training to reduce the likelihood of social engineering attacks. The platform generates an Emotional Susceptibility Profile for users to identify specific psychological triggers and tailor content accordingly. It replaces generic, compliance-only training with behavioral science-driven modules to change organizational security culture.

OpenAI

AI Security Posture (AI-SPM)

AI asset discovery and inventory+3

OpenAI is an AI research and deployment company. Our mission is to ensure that artificial general intelligence benefits all of humanity.

PhishFirewall

AI-generated phishing simulations customizable by tone, industry, and language to mimic real-world threats

PhishFirewall Analytics is a commercial phishing simulation tool designed to help security teams assess and reduce human cyber risk through realistic, AI-generated attack scenarios. It specializes in customizable simulations by tone, industry, and language, paired with real-time user behavior tracking during campaigns. The platform enables risk-based targeting, automated follow-up training, and detailed analytics tied to human risk reduction. Best suited for mid-to-large organizations seeking to strengthen security awareness without complex deployment, it operates within the broader Human Risk category. While adjacent products may exist, PhishFirewall Analytics is focused exclusively on phishing simulation capabilities.

Phriendly Phishing

Customizable phishing simulations with email attachments to test employee handling of malicious file downloads

Phriendly Phishing's mission is to transform how organisations manage human cyber risk and build resilient cyber cultures grounded in empathy, education, and measurable impact.

Pindrop

Multifactor fraud detection for contact centers+10

Pindrop is a cybersecurity company delivering the Real Human + Right HumanTM platform with continuous identity verification and deepfake detection across voice, video, and digital communications in real time.

Pistachio

Identity Threat Detection & Response (ITDR)

Identity attack detection and responseActive Directory and Entra ID protection+4

We make cybersecurity a seamless part of everyday work.

Proofpoint

Detect AI-augmented email threats+11

Proofpoint is a human-centric cybersecurity platform focused on protecting organizations from email-based and identity-driven attacks such as phishing, business email compromise (BEC), and social engineering. It secures inbound and outbound communications using advanced threat detection, AI-driven impersonation analysis, URL and attachment sandboxing, and behavioral risk signals. Beyond email protection, it extends into data loss prevention (DLP), insider threat detection, and security awareness training to reduce human risk across the organization. The platform integrates across email, cloud applications, and collaboration tools to protect sensitive data and stop attacks targeting users.

Proofpoint 365 Total Protection

Automated awareness benchmarking+10

Proofpoint 365 Total Protection is a Microsoft 365 security suite that includes built-in security awareness training and adaptive phishing simulations for user behavior testing. In the security awareness scope, it is positioned around realistic spear-phishing exercises, multilingual phishing tests, and reporting-focused training for Microsoft 365 customers, including MSP-managed environments. It fits buyers that want awareness content tied to Proofpoint threat intelligence and user-risk measurement without adopting a separate standalone awareness platform. Adjacent Microsoft 365 security functions exist in the broader bundle, but are outside this scope.

PsyberCog Labs Inc.

Behavioral science-based risk scoringPATHMap predictive workforce modeling+4

PsyberCog Labs provides a human risk management platform that applies behavioral science to quantify and mitigate workforce security risks. The PATH™ and PATHMap™ platforms move beyond basic training to provide data-driven measurement of security culture and predictive modeling for employee behavior. This solution complements traditional SAT (Security Awareness Training) by providing CISOs with validation metrics and decision-support tools for human-centric security investments.

Recorded Future

Real-time threat intelligenceThreat data collection and aggregation+10

Recorded Future secures the world by empowering businesses, governments, and other organizations to stay one step ahead of today's relentless threat actors.

Redflags

Delivers real-time desktop nudges that intercept users during high-risk actions and prompt them to reconsider before proceeding.Uses contextual security awareness prompts to react to user activity in the moment, rather than relying only on scheduled training modules.

Redflags is a human risk management platform that utilizes on-device behavioral telemetry to provide real-time 'nudges' or interventions at the point of risk. Unlike traditional periodic training, it identifies risky user behavior, such as clicking suspicious links or downloading unvetted files, as it happens and educates the user in context. This approach aims to build secure habits and reduce the human attack surface without disrupting the user's workflow.

Right-Hand Cybersecurity

Adaptive phishing simulations+10

Right-Hand Cybersecurity is a security awareness and phishing simulation vendor focused on behavior-based human risk reduction. Its platform creates organization-specific phishing and vishing simulations, uses employee behavior and live security signals to tailor interventions, and delivers reporting and remediation through email and collaboration workflows. It is best suited for teams that want phishing readiness, report-button workflows, and training tied to real user actions rather than static annual compliance content. The company also offers broader human risk management capabilities, but the profile here is limited to awareness and simulation.

Riot Security

Chat-based awareness training in Slack and TeamsPhishing testing and drills+7

8 products

Riot Security is a security awareness and employee security posture management platform focused on reducing human-risk exposures through training, phishing simulations, and employee-facing security nudges. Based on the available product information, it is positioned for companies that want to run ongoing awareness programs for distributed teams rather than one-off training courses. The product appears best suited for small to mid-sized organizations that need Slack- or Teams-based delivery, breach notifications, and phishing exercises as part of a structured awareness program. Adjacent employee posture features are mentioned by the vendor, but the core fit is security awareness.

Riskified

Real-time fraud decisioningAI-based order approvalChargeback protection+7

AI fraud prevention fueling ecommerce success

SafeHabits

Security Awareness Training

Fully managed awareness campaigns7 employee habits + 3 governance habits+6

SafeHabits is a fully managed human risk management platform providing habit-driven security awareness and audit-ready compliance evidence. Designed for lean organizations from startups to mid-market, it delivers immediate value with no program administration on your side.

SANS Security Awareness

Security awareness training modules+11

SANS Security Awareness is the workforce training line from SANS Institute focused on helping organizations build security awareness programs for end users, managers, and technical staff. It is positioned around expert-authored, role-specific content rather than generic compliance video courses, with separate offerings for general workforce training, phishing, and specialized roles such as developers, IT administrators, ICS engineers, and business leaders. It is best suited for regulated and risk-sensitive organizations that want SANS-branded content and measurable awareness outcomes. Adjacent offerings include broader workforce security and risk training programs.

SecureAuth

Multi-Factor Authentication (MFA)

Push-based login approval+10

We envision a world where more security doesn't equal more obstacles, where protection and experience work together.

Secure Code Warrior

Hands-on secure coding training+10

Secure Code Warrior is a developer-centric security platform that focuses on building secure coding skills through gamified learning and real-time coaching. It integrates directly into the developer's workflow (IDE) to provide context-aware security guidance, reducing the introduction of vulnerabilities at the source. The platform replaces generic, compliance-driven security training with tiered, language-specific challenges that help organizations move toward a preventative DevSecOps model.

SecureFlag

Hands-on secure coding labsWeb-based vulnerability simulations+10

Building foundations for a future free of Software Vulnerabilities

Security Journey

Role-based developer learning paths+11

At Security Journey, we believe that software security starts with the developer. Our mission is to engage and educate developers and their organizations in secure coding through a learner-first approach, delivering the highest-quality, most relevant training that empowers them to address real-world challenges and strengthen digital security.

SEON

Real-time device intelligence+11

SEON's mission is to redefine global fraud prevention by safeguarding the entire customer journey, allowing businesses to operate confidently and stay ahead of evolving risks.

Sift

Instant fraud detectionMachine learning risk scoringCustom fraud rules+7

The Fraud Platform That Turns Risk Into Revenue

Signifyd

Real-time fraud decisioning+11

We empower friction-free commerce: Friction-free customer experience without worry about fraud and consumer abuse

SmishAlert

Learn from real messaging attacks+6

SmishAlert is a mobile-first security awareness platform that specializes in defending against SMS-based phishing (smishing), QR code scams (quishing), and mobile social engineering. It provides real-time analysis of incoming messages and reinforces secure user behavior within native mobile workflows. The platform complements traditional email-centric security awareness programs by addressing the growing threat of mobile-based corporate credential theft.

Sophos

Data Loss Prevention (DLP)

12 products

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

Monitor and restrict sensitive file transfers+11

Spambrella

Spam and phishing detection+10

Spambrella is the best email security and continuity solution to strengthen your business reputation, encrypt sensitive data, and meet regulatory requirements. We provide effective email protection services and real-time cyber threat detection while spreading user awareness among stakeholders.

SpamTitan by TitanHQ

Phishing and malicious email blocking+11

SpamTitan by TitanHQ is a cloud-based or on-premises email security gateway that filters inbound and outbound emails, blocking spam, phishing, malware, ransomware, and APTs with a 99.99% spam catch rate and 0.003% false positive rate. It integrates with Office 365, Google Workspace, Active Directory, and LDAP via a web-based admin portal. Designed for MSPs with multitenancy and granular per-domain policies, it serves SMBs, enterprises, and service providers seeking rapid deployment without agents.

Spikerz

Identity & Access Management (IAM)

Protect social media account access+7

Spikerz is the digital marketing security platform built for modern brands, marketing teams, and security leaders.

SpyCloud

Recaptured darknet identity intelligence+9

SpyCloud pioneered the category of identity threat protection: transforming stolen identity data like breached credentials, malware-exfiltrated data, and phishing intelligence into automated action that prevents account takeover, fraud, ransomware, and session hijacking.

Stripe Radar

Machine learning fraud detection+10

Stripe Radar is Stripe’s fraud detection and prevention product for payment businesses that want real-time screening of card-not-present transactions, account takeovers, and customer abuse within the Stripe stack. It uses machine learning, device and behavioral signals, and configurable rules to block, review, or allow payments before authorization completes. Radar is strongest for teams already processing through Stripe because it is built into the payments platform and requires little or no separate deployment. It is used by merchants that need automated fraud controls plus dispute-related fraud prevention, rather than a standalone fraud platform.

Terranova Security

Role-based security awareness training+11

Terranova Security is Fortra’s security awareness training product focused on changing employee behavior through phishing simulations, training content, and program reporting. In this category, it is positioned for organizations that want to run recurring awareness campaigns, test human risk, and track participation and learning outcomes. Its core value is combining training delivery with simulated attack exercises and measurement of knowledge retention. It is best suited for security teams, compliance teams, and larger enterprises that need structured awareness programs rather than standalone learning content.

Threatcop Inc.

AI-powered adaptive phishing simulationMulti-vector attack simulation support+4

Threatcop is focused on keeping your people safe against the evolving cyber threats.

ThreatLocker Ops

Ongoing cybersecurity training sessions+11

ThreatLocker Ops is described in public material as part of ThreatLocker’s broader endpoint and zero-trust security portfolio, not as a standalone security awareness training suite. In the security awareness training category, the available evidence is limited to high-level claims about educating users around real-world threats, so buyers should treat it as an adjunct awareness capability rather than a dedicated LMS-style platform. It is best suited for organizations already using ThreatLocker that want threat-context education tied to policy and endpoint behavior.

Transmit Security

Multi-Factor Authentication (MFA)

Passwordless MFA with passkeys+11

Transmit Security is an enterprise identity vendor whose MFA capabilities are delivered through its Mosaic platform, which combines passwordless authentication, biometrics, and step-up controls for customer-facing logins. In the MFA category, it is best known for FIDO-based authentication and app-less biometric methods that reduce password dependence while supporting high-assurance access. Its core buyers are large enterprises in regulated sectors such as banking, insurance, and retail that need strong customer authentication across web and mobile channels. The company also sells adjacent CIAM and fraud-prevention capabilities, but those are outside this profile’s scope.

Trustmi

Behavioral AI fraud detection+10

Trustmi is an AI-powered business payments security platform designed to eliminate cyber-enabled fraud and Business Email Compromise (BEC). It sits between email communications and financial systems to identify behavioral anomalies in the payment lifecycle, replacing fragmented manual verification processes. The solution provides visibility into the end-to-end money movement process to detect vendor impersonation and unauthorized account changes.

TryHackMe

Interactive cyber security awareness training+10

TryHackMe’s Security Awareness offering is a browser-based training module focused on teaching end users how to recognize and respond to common cyber threats through interactive scenarios and hands-on exercises. Within the security awareness category, it stands out for using lab-style, practical content rather than static slide decks or policy quizzes. It is best suited for organizations that want to train employees on phishing, account security, and safe security behavior, as well as teams that need awareness content for onboarding or recurring reinforcement. The platform also supports individual learners and broader cybersecurity training, but those adjacent uses are secondary here.

Upfort

Auto-generation of mock phishing emails with realistic templates to simulate real-life phishing attacks without requiring security specialty skills

Upfort is a security awareness and phishing simulation vendor that enables businesses to launch simulated phishing attacks against their teams with minimal IT involvement, using a few-click interface. Its Cyber University delivers enterprise-scale, interactive, on-demand security training covering modern cyber tactics. The platform auto-generates mock phishing emails mimicking real-life attacks via suspiciously authentic emails, websites, or pop-ups, then captures employee response insights to measure preparedness. Upfort is best suited for small to mid-sized businesses and MSPs seeking fast deployment and automated remediation. While it offers the Upfort Shield multi-layer defense platform, its core strength lies in phishing simulation and awareness training.

Vircom modusCloud

Spam and phishing protectionMulti-layer anti-virus defense+10

Protect more without growing your team. Get leading email security, enhanced by Vircom.

Zepo Intelligence