Vulnerability management

Real-time vulnerability detection+9

Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies.

Acunetix (by Invicti Security)

Automated web vulnerability scanning+11

The Invicti Web + API (formerly Acunetix) legacy is built on runtime accuracy, speed, and proof your team can trust.

Adaptiva

Autonomous endpoint management+10

Adaptiva, the autonomous endpoint management company, delivers the fastest way to patch and manage endpoints at scale.

Aisy Ai

aisy helps security teams move from isolated vulnerability tickets to the threats they actually care about.

Arctic Security

Continuous vulnerability monitoring+8

Arctic EWS provides a comprehensive and international early warning service for distributed organizations, expanding on the scope of services available from the government.

ArmorCode

ASPM

ArmorCode is redefining security governance in the AI era as the agentic control plane for Unified Exposure Management.

ArmorPoint is a cloud-native managed security operations platform built for midsize enterprises and the partners who serve them.

Avertro

Encryption & Key Management

CyberHQ by Avertro is a cloud-native cyber resilience platform that unifies governance, risk, and compliance into a single, operationally integrated system.

AWS

12 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications.

Create and control KMS keys+10

Backline

Since 1995, BACKLINE has been providing professional musicians, bands and studios with top quality equipment rentals. More than just a rental company, we are a full-service backline company.

Agentic SOC & Investigations

BlinkOps

AI agents investigate incoming alerts+8

BlinkOps is an agentic security automation platform that utilizes AI-driven agents to handle end-to-end security operations tasks including alert triage, investigation, and incident containment.

Brinqa

Unify vulnerability and risk data+11

Brinqa helps exposure management teams reduce risk faster by unifying data across IT, security, cloud, identity, and application security through 240+ pre-built connectors and the Cyber Risk Graph™, creating a single source of

Cantina

AI Runtime & Agent Security

Cantina is the world's first truly agentic security platform: autonomous AI agents that don't just detect threats, but understand, respond, and adapt in real time.

Claroty

OT & IoT Security

Discover and profile connected devices+11

Claroty positions its platform for cyber-physical systems and IoT/IIoT security, with deployment options in the cloud as xDome or on-premises as Continuous Threat Detection (CTD).

Commugen

Inherent risk evaluationResidual risk calculation+5

Commugen is a market leader in GRC management solutions

Contrast Security

SAST

8 products

Contrast Security provides an IAST platform that embeds agents into running applications, instrumenting code with sensors for real-time vulnerability detection and attack telemetry.

Crimson7

adversary emulationAEVCTEM+4

C7PLATFORM is a threat-informed defense platform for CTEM programs that starts from cyber threat intelligence. It combines adversary emulation, detection validation and threat hunting, so users can see how their defenses respond to attacks. Findings are turned into detection and response as code.

CrowdStrike

Adversary intelligence profiles+14

9 products

CrowdStrike Falcon is a cloud-native endpoint detection and response (EDR) platform that unifies endpoint protection, threat hunting, and managed response services to defend against advanced adversaries.

Cybereason

Automated endpoint threat hunting+9

7 products

Cybereason provides Endpoint Detection and Response (EDR) that correlates endpoint telemetry across machines into MalOp™ narratives, revealing full attack chains from initial compromise to lateral movement.

CyLock

Website vulnerability assessmentIT system vulnerability testing+2

I could not verify a CyLock vulnerability management product from the provided search results or from the information available to me here.

Cytidel

Real-time CVE risk rating+10

Cytidel helps security teams identify and prioritise the top 1% of vulnerabilities that pose real risk.

DarkInvader

External asset discovery+7

DarkInvader is an external attack surface management vendor that includes vulnerability scanning for internet-facing assets.

DeepWatch

MDR

AI-powered Threat Detection and Response+3

Deepwatch® is the leader in Precision MDR powered by AI and humans. We amplify human expertise with AI insights to reduce the risks that matter most to your business.

Dragos

OT & IoT Security

OT and IoT asset visibility+9

We make the industry's most intelligent and intuitive cybersecurity platform for Operational Technology (OT).

Dream

Dream provides sovereign AI-powered cyber-defense platforms for governments and critical infrastructure.

Echo

Automated vulnerability scanningIdentification of known vulnerabilities+7

Echo is creating the trusted source for agentic-ready software.

F-Secure Radar

F‑Secure is a human-first, AI‑powered consumer cyber security experience company with 38 years of expertise in tackling digital threats.

+11

Furl

Autonomous vulnerability remediation+5

Furl is an autonomous remediation platform that closes security findings such as vulnerabilities, misconfigurations, and endpoint hardening gaps after they are identified by existing vulnerability scanners.

Greenbone Enterprise Appliance

Network vulnerability scanning appliance+9

Greenbone Enterprise Appliance (also known as OpenVAS, Open Vulnerability Assessment System, Greenbone's open-source scanner) provides professional vulnerability management built on the OpenVAS framework.

Intruder

Continuous attack surface monitoring+10

Intruder provides a cloud-based vulnerability management platform founded in 2015 by Chris Wallis to address prioritization challenges in vulnerability scanning.

MazeBolt

Agentless vulnerability scanning+21

RADAR provides the missing DDoS vulnerability data layer that pinpoints what can bypass your protections. It prioritizes the fixes that matter most, and ensures defenses are always validated, always optimized, and always ready.

Microsoft

CSPM

14 products

Microsoft Defender for Cloud is a unified cloud security platform that provides cloud security posture management (CSPM), cloud workload protection, DevOps security, and AI workload protection across hybrid and multicloud environments including Azure, AWS, and on-premises infrastructure.

Mimic

Backup & DR

Backup server continuity+8

Mimic is a security vendor whose backup and disaster recovery offering centers on automated recovery of business-critical applications and data into a clean environment within 24 hours.

Mondoo

Mondoo provides an AI-native security platform that integrates agentic automation with human expertise to manage the lifecycle of vulnerability remediation.

Nagomi Security

Software Supply Chain & SBOM

Nagomi Security provides a threat exposure management platform that bridges the gap between identification and remediation within a Continuous Threat Exposure Management (CTEM) framework.

+11

NetRise

Binary software visibility+10

NetRise specializes in the security analysis of compiled binary code, providing visibility into the 'black box' of firmware, IoT devices, and third-party software components.

NinjaOne

Endpoint Management & Device Trust

7 products

NinjaOne is a cloud-based endpoint management platform focused on centralized device visibility, patching, software deployment, remote administration, and scripted remediation from a single console.

Nucleus Security

Nucleus Security is the leader in Unified Exposure Management turning exposure into measurable exposure reduction at enterprise scale.

Octopus Cybersecurity

change analysisconfiguration validation+5

Octopus VAR is a validation, analysis and reporting tool for configuration and operational security risk. It automates verification of configurations against security standards using built-in, customizable per-vendor templates, and analyzes operational changes to flag security risk violations. It reports and alerts when the security posture is violated and is aimed at risk managers and CISOs.

Offensylab

API testingDevSecOpsmobile app testing+4

OffensyLab offers Pentest as a Service, a cloud platform for scheduling penetration tests, collaborating with pentesters and tracking findings. Findings are posted as tickets and sent to developers' issue trackers, and reports are produced for executive teams, auditors and customers.

Oligo Security

CWPP

7 products

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist.

Runtime workload protectionReal-time exploitation detection+7

Onit Security

Onit Security is an AI-native exposure management platform that helps security teams reduce risk by automating vulnerability triage, prioritisation, ownership assignment, and remediation workflows.

OPSWAT

OPSWAT prevents known, unknown, and AI-generated threats from reaching the systems the world depends on.

Outpost24

Continuous vulnerability scanningRisk-based vulnerability prioritization+10

Leading Global Provider of Exposure, Identity and Access Management, made in Europe

Patch My PC

Patch My PC provides automated patch management for third-party applications, integrating directly with Microsoft Configuration Manager (ConfigMgr/SCCM), WSUS, and Intune.

Pentera

Risk-based remediation prioritization+8

Pentera sets the global standard for exposure validation by building the most advanced attack emulation platform, easily applied to any attack surface.

Phoenix Security

ASPM

Code-to-cloud reachability analysis+11

Phoenix Security is AI-native SDLC security. It covers your code from the moment it's written, by a person or by an AI assistant, to the fix in production. Most teams have more scanner findings than they can ever fix. Phoenix checks if the vulnerable code is reachable, from code to cloud. It removes duplicates and finds which team owns each issue. That cuts the noise by up to 98%. Then AI agents write the fix as a pull request. A person reviews it and decides. The agents help, they don't take over. Phoenix was named a Major Player in the IDC MarketScape for ASPM 2025.

Picus Security

We are on mission to reduce cyber risk through security validation.

Plainsea

Automated infrastructure mapping+4

Plainsea is a cybersecurity service-delivery platform whose vulnerability management scope centers on mapping assets, identifying weaknesses, and prioritizing remediation for pentest and security teams.

PlexTrac

Pulse Secure Pulse Policy Secure

Meet PlexTrac, the #1 offensive security management and reporting automation platform.

NAC

6 products

Secure Access Made Easy, Comprehensive, and Flexible

Context-aware access controlAutomated BYOD onboarding+10

Qualys

Continuous vulnerability scanning+10

Qualys provides Vulnerability Management, Detection and Response (VMDR), a cloud-based platform that automatically discovers assets across on-premises, cloud, and mobile environments, including unmanaged devices.

Quantro Security

Quantro is an AI-native vulnerability and exposure management platform that continuously discovers, validates, prioritizes, and remediates security exposures.

Rapid7

9 products

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience.

+11

RedMimicry

Breach and attack emulation software+7

RedMimicry is a breach-and-attack emulation vendor, not a traditional vulnerability management scanner.

Reflectiz

Continuously monitor web exposure+11

Reflectiz is the AI-powered web exposure platform that continuously monitors and protects what executes on your websites.

ReliaQuest

Agentic SOC & Investigations

ReliaQuest delivers an Agentic AI Security Operations platform, GreyMatter, that unifies detection, investigation, and response across SIEM, EDR, and Cloud environments.

runZero

Unauthenticated asset discoveryNetwork-wide asset inventory+10

See what others miss. Secure what others can't.

SCANOSS

SCANOSS finds the cryptography in your source code, the part PKI tools and certificate managers can't see.

SecPod SanerNow

Risk-Based PrioritizationAI-Optimized Security Operations+2

SecPod was founded on a clear belief cyberattacks should be prevented, not chased after the damage is done.

SecureVisio connects the dots between Incidents, Vulnerabilities, Assets, and Risks, empowering your team with AI-assisted guided response and risk-based prioritization.

Strobes Security

Strobes is an exposure management platform that uses autonomous AI agents to validate findings the way an attacker would.

Real-time posture change monitoring+8

Sweet Security

CNAPP

6 products

Sweet Security is redefining enterprise cloud protection. As the leading provider of Runtime CNAPP and AI Security solutions, Sweet unifies runtime context with advanced AI intelligence to protect the modern enterprise.

Swimlane

SOAR

Autonomous AI investigation agents+7

Swimlane provides Swimlane Turbine, an agentic AI automation platform for AI SOCs, integrating AI agents, low-code playbooks, case management, dashboards, and reporting with infinite integrations.

Tanium

Continuous vulnerability data importNear real-time risk posture visibilityRemediation prioritization support+9

Tanium is the Autonomous IT company

Tenable

We are dedicated to isolating and eradicating the exposures that hold organizations back.

ThreatAware

ThreatAware transforms the way organisations secure their cyber assets globally.

ThreatDown

Advanced behavioral threat detectionMulti-level endpoint isolation+4

6 products

ThreatDown is redefining cybersecurity for businesses of all sizes.

Tidal Cyber

BAS control validation and tuning+7

Tidal Cyber is primarily a threat-informed defense platform, not a traditional vulnerability management scanner.

Tonic Security

It's not just another dashboard. It's a context-driven decision and execution engine for exposure management.

Tromzo

Tromzo is a vulnerability management platform focused on triage, ownership assignment, prioritization, governance, and remediation reporting across software delivery environments.

TuxCare

Linux vulnerability scanning+9

TuxCare’s vulnerability management offering centers on Linux and open-source environments, combining TuxCare Radar for CVE discovery and risk-based prioritization with patch-aware validation and adjacent remediation workflows.

VALIENTE TECHNOLOGİES

cloud securitycompliance consultingDAST+5

Valiente Technologies is a cybersecurity services company based in Antalya that provides penetration testing and offensive security services. Its offering covers red teaming, application security testing with SAST and DAST, cloud configuration review, phishing and social engineering simulations, and compliance consulting for KVKK, GDPR, ISO 27001 and NIST.

Vendict

8 products

Vendict is redefining how organizations manage third-party risk.

Veriti

Agentic Exposure Validation+3

Veriti is an exposure assessment and remediation vendor that sits near the vulnerability management market, but its focus is broader than traditional scanning.

Vulners

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Workspace Audit

Google Workspace security assessment+5

Workspace Audit provides a security assessment solution specifically designed for Google Workspace.

XM Cyber

EASM

Continuous external asset discovery+11

XM Cyber is a leader in exposure management that uses attack path modeling to show how attackers can navigate hybrid cloud and on-prem environments.

XRATOR

Insurance“For the first time, I can verify our provider's work and present our priorities to the board without translating. Leadership understands where the budget goes, and why.”

Yottasecure, Inc

Yottasecure provides contextual risk intelligence designed to filter out CVE noise and focus remediation on truly exploitable vulnerabilities.

Zafran Security

Zafran is an AI-native Threat Exposure Management platform that automates the mitigation and remediation of exploitable vulnerabilities.

ZeroPath is an application security vendor centered on AI-native SAST and dynamic testing for running applications.