Vulnerability management

Automated web vulnerability scanning+11

The Invicti Web + API (formerly Acunetix) legacy is built on runtime accuracy, speed, and proof your team can trust. We pioneered the DAST market 20+ years ago and continue to drive AppSec forward with innovations in AI, code-to-runtime correlation, and vulnerability management.

Adaptiva

Autonomous endpoint managementAutonomous patch management+9

Adaptiva, the autonomous endpoint management company, delivers the fastest way to patch and manage endpoints at scale.

Aisy Ai

Attack chain-based vulnerability analysis+4

aisy helps security teams move from isolated vulnerability tickets to the threats they actually care about. We build context from an offensive security perspective ahead of time, clean up findings, and feed the recurring patterns into their coding agent as they build - so every finding makes the next one less likely.

Arctic Security

Continuous vulnerability monitoring+9

Arctic EWS provides a comprehensive and international early warning service for distributed organizations, expanding on the scope of services available from the government. Our service lets you split your organization into areas of responsibility, and automatically routes the security warnings to the right people. Our monitoring can also cover your suppliers.

ArmorCode

Application Security Posture Management (ASPM)

Aggregate findings from security scanners+11

ArmorCode is redefining security governance in the AI era as the agentic control plane for Unified Exposure Management.

ArmorPoint

Managed Detection & Response (MDR)

24x7x365 professional SOC team performing continuous monitoring, alert investigation, validation, and escalation to incident with SANS-based incident response protocols

ArmorPoint is a cloud-native managed security operations platform built for midsize enterprises and the partners who serve them. The platform brings detection, response, risk, and compliance together within a shared operations environment where customers, partners, and ArmorPoint's 24/7 U.S.-based SOC work side by side.

Avertro

Authenticated and unauthenticated vulnerability checks

CyberHQ by Avertro is a cloud-native cyber resilience platform that unifies governance, risk, and compliance into a single, operationally integrated system. It replaces fragmented spreadsheets and siloed workflows with dynamic modules spanning risk registers, capabilities assessments, threat modelling, issue tracking, and board-ready reporting. Its multi-workspace architecture lets organisations manage risk locally while maintaining enterprise-wide visibility from a single pane of glass

AWS

Encryption & Key Management

16 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications. It is positioned for organizations that want key lifecycle control without running their own HSM fleet, and it uses FIPS 140-3 Level 3 validated HSMs under the service boundary. Buyers typically use it for envelope encryption, application signing, and server-side encryption across AWS services. It is best suited to teams standardizing key governance inside AWS rather than managing separate on-premises key systems.

Create and control KMS keys+10

Backline

Consolidate vulnerabilities from existing scanners

Since 1995, BACKLINE has been providing professional musicians, bands and studios with top quality equipment rentals. More than just a rental company, we are a full-service backline company. Our technicians will deliver, set up and strike the equipment, leaving the musician with only one job: plug in and play.

Backline AI

Attack Surface Management

Autonomous vulnerability remediation+8

Backline is an agentic security platform, built for Autonomous Exposure Remediation, Gartner's newly named category for fixing vulnerabilities, not just finding them. It ingests multi-scanner findings and delivers verified, production-ready fixes – closing the gap between detection and resolution safely, reliably, and at scale. Built by veteran enterprise security founders.

Binarly

Binary-level supply chain analysis+11

Binarly is a software and firmware supply chain security vendor focused on binary-level analysis of compiled artifacts, including UEFI, BMC, embedded Linux, and other firmware components. In this category, it is used to generate and validate SBOMs and CBOMs, assess third-party software before deployment, and surface vulnerabilities, secrets, and crypto issues without source code. Its position is strongest for hardware vendors, OEMs, embedded product teams, and enterprise security groups that need defensible evidence about what is actually inside shipped binaries. The company also offers adjacent firmware security and risk intelligence capabilities, but its supply-chain value centers on binary transparency and post-build verification.

BitSight

Compliance & GRC

12 products

Risk now moves across enterprises, supply chains, cloud environments, and digital identities, and AI is accelerating how quickly vulnerabilities can be exploited. Bitsight continuously maps assets and vulnerabilities, prioritizing them with real-time threat intelligence so teams can see where risk is building, focus on what matters, and act before exposure becomes disruption.

Third-party risk monitoring and onboarding+10

BlinkOps

Agentic SOC & Investigations

AI agents investigate incoming alerts+8

BlinkOps is an agentic security automation platform that utilizes AI-driven agents to handle end-to-end security operations tasks including alert triage, investigation, and incident containment. It replaces traditional, manual SOAR playbooks with LLM-powered agents that can interpret natural language instructions to execute complex workflows across disparate security tools. The platform provides a low-code/no-code interface for building scalable security automations that reduce Mean Time to Respond (MTTR).

BreachLock

Penetration Testing & Red Team

Penetration testing as a service+9

BreachLock offers a unified offensive security platform that provides Penetration Testing as a Service (PTaaS) and Continuous Threat Exposure Management (CTEM). It combines human-led expertise with AI-driven automated scanning to provide real-time visibility into vulnerabilities across web, cloud, and network environments. The platform facilitates rapid remediation through direct integration with developer workflows and provides verifiable evidence of security posture for compliance audits.

Brinqa

Unify vulnerability and risk data+11

Brinqa helps exposure management teams reduce risk faster by unifying data across IT, security, cloud, identity, and application security through 240+ pre-built connectors and the Cyber Risk Graph™, creating a single source of truth. AI agents improve data quality by identifying owners, deduplicating findings, and assessing real exploitability. SmartFlows automate remediation across teams without custom code.

Cantina

AI Runtime & Agent Security

Real-time prompt injection detection and blocking for AI agents running on Bedrock, OpenAI, and Azure OpenAI to prevent direct and indirect injection attacks

Cantina is the world's first truly agentic security platform: autonomous AI agents that don't just detect threats, but understand, respond, and adapt in real time.

Casco

Penetration Testing & Red Team

3 products

Casco provides an autonomous security testing platform designed to simulate advanced adversary tactics across web applications, APIs, and cloud infrastructure. The platform utilizes AI-driven orchestration to perform continuous automated penetration testing, replacing periodic manual engagements with 24/7 vulnerability discovery and validation. It complements existing CI/CD pipelines by providing real-time risk assessment and proactive exploitability analysis for AI systems and traditional web stacks.

Autonomous security testing for web apps+10

Center for Internet Security (CIS)

Compliance & GRC

CIS Hardened Images for cloud workloads+5

The Center for Internet Security (CIS) provides Hardened Images and configuration benchmarks that serve as the industry standard for securing cloud operating systems and infrastructure. Their virtual machine images are pre-configured to meet CIS Benchmark standards, providing a secure baseline for AWS, Azure, and GCP environments out of the box. They complement CSPM tools by providing the gold-standard configurations used for compliance auditing and system hardening.

Claroty

OT & ICS Security

Discover and profile connected devicesCentralized asset inventory+10

Claroty positions its platform for cyber-physical systems and IoT/IIoT security, with deployment options in the cloud as xDome or on-premises as Continuous Threat Detection (CTD). In the IoT Security scope, it focuses on discovering connected devices, profiling their communications and firmware, detecting anomalies, and supporting exposure analysis for industrial and other mission-critical environments. It is best suited for organizations that need passive visibility into unmanaged or fragile devices on operational networks, including manufacturing, utilities, healthcare, and other infrastructure operators. Adjacent modules such as secure remote access exist, but the core IoT Security value is asset discovery, monitoring, and threat detection.

Cline

AI Runtime & Agent Security

Human-in-the-loop approval for actionsPlan and Act mode workflow control+9

Cline provides a secure, enterprise-grade execution environment for autonomous coding agents and LLM-driven development systems. It addresses the 'agentic security' gap by offering VPC and on-prem deployment options that ensure proprietary code and data never leave the corporate perimeter. The platform enables enterprises to govern agentic workflows with granular controls and IDE-agnostic integration, replacing unmanaged local AI browser extensions.

Commugen

Inherent risk evaluationResidual risk calculation+5

Commugen is a market leader in GRC management solutions

Contrast Security

Agent-based runtime vulnerability detection+9

Contrast Security provides an IAST platform that embeds agents into running applications, instrumenting code with sensors for real-time vulnerability detection and attack telemetry. Unlike external DAST scans or static SAST analysis, it analyzes data flows, application logic, and runtime behavior across development, CI/CD pipelines, and production. This reduces false positives by validating vulnerabilities in context, supports DevSecOps integration, and offers continuous monitoring for web apps, APIs, and microservices. Best for organizations prioritizing accurate, low-noise AppSec in agile environments over traditional black-box or white-box tools.

CrowdStrike

Adversary intelligence profiles+14

12 products

CrowdStrike secures the most critical areas of risk – endpoints and cloud workloads, identity, and data – to keep customers ahead of today's adversaries and stop breaches.

Cybereason

Behavioral detection of malicious activity+10

10 products

Cybereason provides Endpoint Detection and Response (EDR) that correlates endpoint telemetry across machines into MalOp™ narratives, revealing full attack chains from initial compromise to lateral movement. It uses behavioral analysis, machine learning on threat feeds ranked by historical accuracy, and cross-machine correlation for real-time detection of sophisticated threats. The platform supports instant remediation like process termination, file quarantine, persistence removal, and machine isolation. Best for enterprises needing high analyst efficiency (1:200,000 endpoint ratio) and advanced threat hunting without alert fatigue, as validated by top Forrester Wave and MITRE ATT&CK scores.

Cylerian

Security Operations

11 products

By consolidating visibility and control across your organization and providing everything you need out of the box, Cylerian makes IT simpler and safer.

Automated incident triage and response orchestration

CyLock

Website vulnerability assessment+3

I could not verify a CyLock vulnerability management product from the provided search results or from the information available to me here. The sources returned in the query do not include an official CyLock product page, technical documentation, pricing, or integration list. For a CISO evaluating vulnerability management, that means I cannot factually describe CyLock’s scanner coverage, prioritization logic, remediation workflow, or deployment model without inventing details. If CyLock is a private vendor, its public footprint appears too limited in the supplied material to support a reliable profile.

Cynerio

IoT Security

Discover connected medical and IoT devices+11

Cynerio provides healthcare-focused IoT security for hospitals and other healthcare delivery organizations. Its platform discovers connected medical and IoT devices, classifies them, learns normal communication patterns, and identifies anomalous or malicious activity on the network. The product is strongest in clinical environments where device criticality, patient-care workflows, and uptime constraints matter. It is best suited for healthcare security teams that need device visibility, risk context, and policy enforcement for medical devices without relying on endpoint agents.

Cytidel

Real-time CVE risk rating+10

Cytidel helps security teams identify and prioritise the top 1% of vulnerabilities that pose real risk. Our platform combines real-time threat intelligence, threat actor TTPs, exploitability signals, third-party risk context, and business impact analysis to deliver contextual alerts and automated threat-led prioritisation. By moving beyond CVSS-led triage, Cytidel helps teams reduce noise, act faster on emerging threats, and focus remediation on the vulnerabilities most likely to be exploited.

Dataminr

Threat Intelligence

Multi-Modal Threat Detection+8

DarkInvader is a modern cyber security company specialising in External Attack Surface Management (EASM). For over three years, we've been developing a cutting-edge SaaS solution that empowers organisations to discover and monitor their assets, identify infrastructure and Web application vulnerabilities, and monitor surface Web and Dark Web OSINT.

DataSunrise Data and AI Security

Data Security Posture Management (DSPM)

Protect databases across cloud and on-premises+11

DataSunrise provides a unified platform for database security, auditing, and vulnerability management across heterogeneous database environments. The solution includes a database firewall, dynamic data masking, and continuous activity monitoring (DAM) to defend against SQL injection and unauthorized access. It integrates DSPM capabilities to provide visibility into where sensitive PII/PHI resides across RDS, Redshift, Snowflake, and on-prem SQL servers.

DeepWatch

Managed Detection & Response (MDR)

AI-powered Threat Detection and ResponseIntegrated Security Operations+2

Deepwatch® is the leader in Precision MDR powered by AI and humans. We amplify human expertise with AI insights to reduce the risks that matter most to your business.

Dragos

OT & ICS Security

OT and IoT asset visibilityNetwork security monitoring for OT environments+8

We make the industry's most intelligent and intuitive cybersecurity platform for Operational Technology (OT). Customers gain visibility, monitoring, and threat management for the OT, IT, and IoT assets within industrial environments, powered by continuous insights from Dragos's threat intelligence and services team.

Echo

Automated vulnerability scanningIdentification of known vulnerabilities+7

Echo is creating the trusted source for agentic-ready software.

Endor Labs

OSS dependency governance+11

Endor Labs is a software supply chain security platform focused on open source governance and CI/CD risk detection. The platform targets DevSecOps teams seeking to reduce alert fatigue while maintaining security posture. Endor Labs distinguishes itself through reachability analysis that eliminates up to 95% of false positives in vulnerability scanning, enabling developers to focus on exploitable risks. The vendor positions itself against traditional SCA tools by providing contextual intelligence on code usage patterns and safe upgrade paths.

Equixly srl

API Security

No verifiable AI-SPM claims foundContinuous AI model inventory discovery+5

Continuous Offensive Security for APIs and Applications

Ermetic

CIEM

10 products

Ermetic provides a CIEM platform that discovers and analyzes human and machine identities, entitlements, and access risks across AWS, Azure, and Google Cloud. Acquired by Tenable in 2023 and rebranded as Tenable CIEM, it combines CIEM with CSPM for contextual visibility into IAM policies, network configurations, storage, and secrets. It exposes overprivileged entitlements, toxic combinations, and enforces least privilege via automated remediation and anomaly detection. Best for multi-cloud enterprises needing unified CNAPP capabilities to manage complex entitlement sprawl without agents.

Discover cloud identities and entitlements+11

Fencer

Continuous DAST scanningBlack-box runtime probingExact finding location+8

Fencer is the platform we wish we had.

Flashpoint

Threat Intelligence

Deep and dark web search+10

Harness the power of data, human expertise, and automated analysis with Flashpoint's threat intelligence platform. Identify and remediate risk and take rapid, decisive action against cyber threats, fraud, vulnerability, physical, and national security threats.

F-Secure Radar

Internal and external vulnerability scanningDiscovery scan for IP devices+10

F‑Secure is a human-first, AI‑powered consumer cyber security experience company with 38 years of expertise in tackling digital threats. We help digital service providers turn trust into a high-value growth engine, protecting their customers while enabling them to live their best digital lives in a world of relentless, AI‑driven scams.

Furl

Autonomous vulnerability remediationContext-aware asset mapping+4

Furl is an autonomous remediation platform that closes security findings such as vulnerabilities, misconfigurations, and endpoint hardening gaps after they are identified by existing vulnerability scanners. It is built for security and IT operations teams responsible for reducing vulnerability backlogs across endpoints and servers. The platform integrates with tools such as Qualys, Tenable, and Rapid7 for findings, and with CrowdStrike, SentinelOne, AWS, Okta, and Google for execution, rather than replacing existing infrastructure. It investigates each issue, builds an environment specific fix, and validates closure within guardrails and approval thresholds the customer defines. Furl is deployed as a SaaS solution and was founded by veterans of Rapid7, Automox, and Censys.

Greenbone Enterprise Appliance

Network vulnerability scanning appliance+9

Greenbone Enterprise Appliance (also known as OpenVAS, Open Vulnerability Assessment System, Greenbone's open-source scanner) provides professional vulnerability management built on the OpenVAS framework. It offers robust scanning, asset management, and reporting capabilities, with both an enterprise appliance for organizations seeking reliable, scalable security assessments and an open-source edition often used for cost-effective vulnerability assessment, penetration testing support, and educational purposes.

Intruder

Continuous attack surface monitoring+10

Intruder provides a cloud-based vulnerability management platform founded in 2015 by Chris Wallis to address prioritization challenges in vulnerability scanning. It serves over 3,000 mid-market enterprise and government customers worldwide with continuous scanning using 65,000+ checks for known vulnerabilities, proactive emerging threat scans for zero-days, and attack surface discovery across external infrastructure, web apps, APIs, and cloud environments. The platform emphasizes risk prioritization, automated alerts, resolution tracking, and reporting on fix velocity and threat posture trends, replacing fragmented tools for lean security teams facing advanced threats.

MazeBolt

Continuous non-disruptive DDoS vulnerability simulation

RADAR provides the missing DDoS vulnerability data layer that pinpoints what can bypass your protections. It prioritizes the fixes that matter most, and ensures defenses are always validated, always optimized, and always ready. - Detect Vulnerabilities at the Speed of AI - Prioritize Remediation at Scale - Validate DDoS Defense Readiness - Full Attack Surface Coverage

Microsoft

Cloud Security / CSPM

15 products

Microsoft Defender for Cloud is a multicloud CSPM platform that provides continuous security posture assessment across Azure, AWS, and GCP. It delivers agentless vulnerability scanning, misconfiguration detection, and compliance monitoring against industry benchmarks (CIS, NIST, ISO, PCI-DSS). The platform generates hardening recommendations ranked by risk and includes attack path analysis to identify exploitable chains. Defender for Cloud serves enterprises managing hybrid and multicloud infrastructure seeking unified posture visibility and compliance reporting.

Agentless vulnerability scanning+21

Miggo Security

Runtime application behavior monitoring+11

Miggo delivers an Application Detection and Response (ADR) platform that monitors application behavior at runtime to neutralize threats. By analyzing how different application components interact, it identifies architectural flows that deviate from normal behavior, detecting vulnerabilities like broken authorization or business logic abuse. It fills the gap between static code analysis (SAST) and traditional network-layer WAFs.

Mimic

Cyber Resilience & Recovery

Backup server continuity+8

Mimic is a security vendor whose backup and disaster recovery offering centers on automated recovery of business-critical applications and data into a clean environment within 24 hours. Its published recovery page emphasizes restoring applications and configurations within hours and avoiding ransom payment, which places it closer to cyber recovery than basic file backup. It appears best suited for organizations that need fast restoration of critical workloads after ransomware or destructive incidents. Publicly available material is limited, so the exact depth of platform coverage and deployment model is not fully documented in the provided sources.

Mondoo

AI-powered autonomous vulnerability remediation

Mondoo provides an AI-native security platform that integrates agentic automation with human expertise to manage the lifecycle of vulnerability remediation. The platform focuses on 'Full-Stack' visibility across cloud, containers, and infrastructure, moving beyond simple scanning to automated fix generation and validation. It replaces legacy vulnerability scanners that lack context and helps teams transition to a Continuous Threat Exposure Management (CTEM) framework.

Nagomi Security

Unify assets and exposures from read-only APIs+11

Nagomi Security provides a threat exposure management platform that bridges the gap between identification and remediation within a Continuous Threat Exposure Management (CTEM) framework. It provides an 'execution layer' that unifies security asset visibility with contextual prioritization and guided remediation, ensuring that exposure gaps are closed based on actual threat actor behavior and internal security controls. It complements existing EDR and XDR investments by identifying where defenses are misconfigured or failing.

NetRise

Binary software visibility+10

NetRise specializes in the security analysis of compiled binary code, providing visibility into the 'black box' of firmware, IoT devices, and third-party software components. Unlike traditional SCA tools that rely on source code or package manifests, NetRise analyzes the actual executable binaries to identify vulnerabilities, hardcoded secrets, and compliance violations. This approach is critical for securing the software supply chain where source code access is unavailable, helping organizations validate Software Bill of Materials (SBOM) accuracy.

NinjaOne

Device Trust & Endpoint Management

Centralized endpoint monitoring and control+10

NinjaOne is a cloud-based endpoint management platform focused on centralized device visibility, patching, software deployment, remote administration, and scripted remediation from a single console. It uses an agent-based model to manage internet-connected Windows, macOS, and Linux endpoints, plus servers and workstations, making it a fit for IT and security teams that need to control mixed fleets and remote devices. In this category, it is best suited for midsize to large organizations and MSPs that want operational control over endpoint inventory, update status, and routine maintenance without separate tools for each task.

Nucleus Security

Aggregate vulnerability data from many tools+9

Nucleus Security is the leader in Unified Exposure Management turning exposure into measurable exposure reduction at enterprise scale. The Nucleus platform orchestrates enterprise programs to drive outcomes, continuously unifying security data from 200+ sources, prioritizing risk with AI-powered vulnerability and exploit intelligence, and effectively mobilizing remediation. A FedRAMP authorized vendor

Oligo Security

Cloud Workload Protection (CWPP)

Runtime workload protection+8

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist. In cloud security evaluations, it is best understood as a platform for detecting and blocking active exploitation in cloud workloads, with emphasis on runtime context rather than posture scanning or misconfiguration management. Its cloud-security materials focus on protecting modern applications, cloud workloads, and AI systems at execution time, which makes it a fit for teams that want runtime threat detection and exploit prevention alongside other cloud security controls.

OPSWAT

Detect and report installed software vulnerabilities

OPSWAT prevents known, unknown, and AI-generated threats from reaching the systems the world depends on. The MetaDefender Platform, OPSWAT's AI-powered cybersecurity solution, secures every file, device, and data transfer across IT, OT, and cross-domain environments.

Outpost24

Continuous vulnerability scanningRisk-based vulnerability prioritization+10

Leading Global Provider of Exposure, Identity and Access Management, made in Europe

Patch My PC

CVE vulnerability details and prioritization+9

Patch My PC provides automated patch management for third-party applications, integrating directly with Microsoft Configuration Manager (ConfigMgr/SCCM), WSUS, and Intune. It handles packaging, testing, and deployment of thousands of updates, delivering CVE-linked vulnerability details for prioritization. The SaaS-based Publisher portal consolidates reporting on patch compliance, installed updates, and endpoint risks. Trusted by over 10,100 customers, it targets IT/security teams in Microsoft-centric environments seeking to reduce manual patching efforts and enhance endpoint security against known vulnerabilities.

Pentera

Validated security findings consolidation+9

Pentera sets the global standard for exposure validation by building the most advanced attack emulation platform, easily applied to any attack surface.

Phoenix Security

Application Security Posture Management (ASPM)

Static application security testing for source code and compiled artifacts to identify issues such as injection flaws, unsafe input handling, and other OWASP Top 10-style defects before deployment.

Phoenix Security is an application security platform focused on finding and triaging code-level and runtime vulnerabilities across the software delivery lifecycle. In the DAST/SAST scope, it normalizes findings from source-code analysis, dynamic testing, and related appsec scanners into a single model, then uses runtime context to help prioritize remediation. Public materials also indicate support for air-gapped deployments and broader AppSec workflows, but the core value for buyers in this category is combining static and dynamic findings with remediation guidance. It is best suited for security teams and developers that need one place to correlate application vulnerability signals from multiple testing methods.

Picus Security

Validate vulnerability exploitability via adversarial exposure validationPrioritize exposures based on security control failure

We are on mission to reduce cyber risk through security validation.

Plainsea

Automated infrastructure mapping+4

Plainsea is a cybersecurity service-delivery platform whose vulnerability management scope centers on mapping assets, identifying weaknesses, and prioritizing remediation for pentest and security teams. It combines manual asset mapping with automated discovery, integrates vulnerability data sources for risk scoring, and produces structured reports and remediation guidance. The product appears aimed at MSSPs, internal security teams, and enterprises that run recurring vulnerability assessments and penetration testing workflows. Outside vulnerability management, Plainsea also mentions collaboration and reporting features, but its core buyer value in this category is coordinating discovery, scoring, and remediation planning around exposed systems and findings.

PlexTrac

Aggregate findings from vulnerability scanners and bug bounties

Meet PlexTrac, the #1 offensive security management and reporting automation platform.

Pulse Secure Pulse Policy Secure

Network Access Control (NAC)

Context-aware access control+11

Secure Access Made Easy, Comprehensive, and Flexible

Qualys

Continuous vulnerability scanning+10

Qualys provides Vulnerability Management, Detection and Response (VMDR), a cloud-based platform that automatically discovers assets across on-premises, cloud, and mobile environments, including unmanaged devices. It scans for vulnerabilities using over 20,000 checks from its Vulnerability KnowledgeBase, correlates findings with threat intelligence and machine learning to prioritize risks on critical assets, and detects indicators of compromise. VMDR supports hybrid IT scanning from a single console, generates role-based reports for compliance, and integrates with ticketing systems for automated remediation workflows. Best for enterprises needing continuous visibility and prioritization in complex, distributed networks.

Rapid7

Asset discovery and vulnerability scanning+11

11 products

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers.

Raven

Application Security Posture Management (ASPM)

Runtime exploit prevention+5

Raven.io provides a runtime application security platform that runs inside cloud-deployed applications to detect and block malicious code execution as it happens, independent of whether a CVE exists. The platform includes application detection and response for forensic visibility down to libraries, functions and call paths, a runtime software composition analysis capability that uses reachability data to de-prioritize vulnerabilities, and a module for discovering and controlling AI agents operating inside application environments. It is aimed at enterprises running internet-facing applications on Kubernetes, containers and compute instances across AWS, GCP and Azure, supporting languages including Java, Python, JavaScript, Go, Ruby, PHP, C++ and .NET. Customers include organizations in regulated industries such as insurance and financial services.

RedMimicry

Breach and attack emulation software+7

RedMimicry is a breach-and-attack emulation vendor, not a traditional vulnerability management scanner. In the vulnerability management context, it is used to validate whether known weaknesses, exposed services, and misconfigurations can actually be exploited through realistic multi-stage attack paths. Its fit is strongest for security teams that already run vulnerability scanners and want to prioritize remediation based on exploitability, detection gaps, and defensive control effectiveness rather than CVSS alone. Public materials emphasize semi-automated emulation of ransomware, supply chain, and other real-world attack chains.

Reflectiz

Continuously monitor web exposure+11

Reflectiz is the AI-powered web exposure platform that continuously monitors and protects what executes on your websites. It detects and remediates security threats, privacy violations, compliance gaps, and AI-generated attacks in real time.

ReliaQuest

Agentic SOC & Investigations

10 products

ReliaQuest delivers an Agentic AI Security Operations platform, GreyMatter, that unifies detection, investigation, and response across SIEM, EDR, and Cloud environments. It utilizes AI agents to automate data collection and the standard diagnostic workflows typically handled by Tier 1 and Tier 2 analysts. The platform provides a centralized console to orchestrate response actions without the need for constant data migration to a single lake.

Autonomous alert investigation and triage+10

runZero

Unauthenticated asset discoveryNetwork-wide asset inventory+10

See what others miss. Secure what others can't.

Sandfly Security

Agentless Linux endpoint detection+11

Sandfly creates a dedicated and reliable Linux security solution that works across all systems without endpoint agents or drama. Our company focuses on Linux security that is high performance, high stability, high compatibility, and low risk.

SCANOSS

Find vulnerabilities in source code and binaries+9

SCANOSS finds the cryptography in your source code, the part PKI tools and certificate managers can't see. Crypto Finder scans Java, Python, Go, and C across both proprietary and open source codebases, identifying cryptographic algorithms and producing a CycloneDX CBOM ready for post-quantum migration planning. The visibility your dependency scanners and certificate inventories miss. Built for CI/CD, developed in collaboration with IBM.

SecPod SanerNow

Continuous vulnerability scanning and detection+10

SecPod was founded on a clear belief cyberattacks should be prevented, not chased after the damage is done.

SecureVisio

SIEM

Risk-Based Prioritization+3

SecureVisio connects the dots between Incidents, Vulnerabilities, Assets, and Risks, empowering your team with AI-assisted guided response and risk-based prioritization. We give your teams the insight, automation, and context they need to act decisively.

Seraphic

Browser & Web Isolation

3 products

Seraphic provides an enterprise-grade secure browser overlay that transforms existing standard browsers into secure workspaces with built-in DLP and threat prevention. It blocks zero-day exploits, prevents credential phishing, and secures remote access to internal applications without the need for a full VDI or VPN suite. This complements Zero Trust architectures and replaces heavy local agents for web security.

Turn any browser into a secure browser+11

Sonatype

Open source component scanning+11

Sonatype handles the complexity of managing open source software and AI behind the scenes so teams stay focused on innovation, not maintenance.

Spektion

Attack Surface Management

Continuously discover exposed assets+5

Spektion provides a runtime exposure management platform that goes beyond static vulnerability scanning by analyzing the actual execution behavior of assets. By monitoring runtime interactions, it identifies which vulnerabilities (CVEs) are actually reachable and exploitable in the specific environment, significantly reducing false positives. It complements traditional vulnerability management by adding a behavioral layer of visibility across on-prem and cloud workloads.

Sweet Security

Container Security / CNAPP

Real-time posture change monitoring+9

Sweet Security is redefining enterprise cloud protection. As the leading provider of Runtime CNAPP and AI Security solutions, Sweet unifies runtime context with advanced AI intelligence to protect the modern enterprise.

Swimlane

SOAR

Autonomous AI investigation agents+7

Swimlane provides Swimlane Turbine, an agentic AI automation platform for AI SOCs, integrating AI agents, low-code playbooks, case management, dashboards, and reporting with infinite integrations. It automates triage, investigation, and response through governed workflows, delivering 60,000 SOC analyst equivalents daily across customers. The Investigation Agent synthesizes threat intelligence, past investigations, and knowledge bases to generate NIST-aligned, four-phase response plans (containment, eradication, recovery, hardening) with actionable steps. Best for enterprise SOCs and MSSPs seeking transparent, auditable AI execution to reduce context switching and MTTR by up to 75%. Leader in GenAI SOC platforms, #1 on Gartner Peer Insights.

Synack

Penetration Testing & Red Team

Penetration testing across multiple asset typesGlobal ethical hacker community for vulnerability discovery+9

AI Finds More. Humans Prove What Matters. Continuous Pentesting at Scale

Tanium

Continuous vulnerability data importNear real-time risk posture visibilityRemediation prioritization support+9

Tanium is the Autonomous IT company

ThreatAware

Discover devices and users accessing data+9

ThreatAware transforms the way organisations secure their cyber assets globally.

ThreatDown

Advanced behavioral threat detection+5

ThreatDown is redefining cybersecurity for businesses of all sizes. We strip away the bloat, the cost, and the confusion, replacing it with powerful, intuitive security that protects thousands of organizations worldwide from the most advanced threats.

Tidal Cyber

BAS control validation and tuning+7

Tidal Cyber is primarily a threat-informed defense platform, not a traditional vulnerability management scanner. In a vulnerability-management evaluation, it is best understood as a tool for mapping exposure and defensive coverage to adversary techniques in MITRE ATT&CK, helping security teams identify where their controls may leave gaps against relevant threats. It fits organizations that already run vulnerability scanners and want to prioritize remediation using threat context, especially detection engineering, SOC, CTI, and threat hunting teams. Adjacent capabilities include ATT&CK-aligned intelligence processing and defensive coverage analysis.

Tines

SOAR

No-code security workflow automation+10

We believe that by combining AI, automation, and integration with human ingenuity organizations are more efficient, secure, and will have more engaged, happier teams.

Tonic Security

Discover findings across hybrid environments+9

It's not just another dashboard. It's a context-driven decision and execution engine for exposure management.

Tromzo

Automated vulnerability triage and prioritization+10

Tromzo is a vulnerability management platform focused on triage, ownership assignment, prioritization, governance, and remediation reporting across software delivery environments. In this category, it correlates findings from existing scanners with application, asset, and business context so security teams can decide which issues are real, who owns them, and whether to fix or accept risk. It is best suited for application security and product security teams that need to reduce manual triage work and push actionable issues to engineering. Adjacent ASPM and code-to-cloud features are secondary to its vulnerability management use case.

TuxCare

Linux vulnerability scanning+9

TuxCare’s vulnerability management offering centers on Linux and open-source environments, combining TuxCare Radar for CVE discovery and risk-based prioritization with patch-aware validation and adjacent remediation workflows. Radar is positioned to reduce scan noise by identifying which findings are actually relevant after in-memory or rebootless patching, then ranking issues using CVSS, patch availability, and threat intelligence. It is best suited for enterprises running Linux fleets, containers, and open-source stacks that need continuous vulnerability identification and remediation without relying on heavyweight scanners or disruptive maintenance windows.

UpGuard

Compliance & GRC

Vendor risk assessment workflows+11

UpGuard is a cybersecurity vendor whose platform includes GRC-adjacent workflows, but it is primarily positioned around cyber risk posture and third-party risk rather than a full enterprise GRC suite. In a Compliance & GRC evaluation, it is best suited to teams that need continuous vendor risk monitoring, compliance tracking, and automated evidence-style workflows tied to security posture. UpGuard says it can track risk reduction against major compliance standards and support board-ready security ratings, making it useful for mid-market organizations and lean security teams that need ongoing assurance across suppliers and external exposure.

Vendict

Automate security questionnaire responses+7

Vendict is redefining how organizations manage third-party risk. Our end-to-end Third-Party Risk Management (TPRM) managed solution combines AI-native automation with expert GRC services to transform how organizations identify, assess, and manage vendor risk. Vendict provides enterprises with the scalability, speed, and precision required to navigate today’s complex regulatory and threat landscapes.

Veriti

Agentic Exposure Validation+3

Veriti is an exposure assessment and remediation vendor that sits near the vulnerability management market, but its focus is broader than traditional scanning. In vulnerability-management terms, it continuously identifies vulnerabilities, misconfigurations, and exploitability across on-prem and cloud environments, then helps teams prioritize and remediate them without disrupting operations. It is best suited for enterprises that already have multiple security tools and need to turn findings into safe, compensating controls rather than rely only on patch cycles. Veriti was founded in 2021 and is now part of Check Point.

Vulners

Search vulnerabilities by CVE, CPE, and references+7

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Workspace Audit

Google Workspace security assessment+5

Workspace Audit provides a security assessment solution specifically designed for Google Workspace. Our platform automates the discovery and remediation of vulnerabilities, identifying misconfigurations and security gaps across your domain. Using an intuitive risk dashboard, we help Google Admins prioritize critical issues and simplify compliance with industry standards like NIST and CIS.

XM Cyber

Attack Surface Management

Continuous external asset discovery+11

XM Cyber is a leader in exposure management that uses attack path modeling to show how attackers can navigate hybrid cloud and on-prem environments. By combining vulnerability data, misconfigurations, and identity exposures, it prioritizes remediation based on the actual risk to critical assets. It replaces static vulnerability scanners with continuous, graph-based security validation to identify the 'choke points' that matter most to an attacker.

Yottasecure, Inc

Autonomous vulnerability intelligence engine+8

Yottasecure provides contextual risk intelligence designed to filter out CVE noise and focus remediation on truly exploitable vulnerabilities. The platform correlates asset configuration, internal business context, and external threat signals to determine the actual reachability of a vulnerability. It replaces static legacy scanners by providing a dynamic, risk-based view of the attack surface.

Zafran Security

Threat exposure management prioritization+10

Zafran is an AI-native Threat Exposure Management platform that automates the mitigation and remediation of exploitable vulnerabilities. By analyzing the existing security stack's configuration, it identifies where native tool settings can be adjusted to neutralize threats, proving that most vulnerabilities are already shielded. It complements existing VM scanners by providing the orchestration layer for actual risk reduction.

ZeroPath

AI-native static application security testing+10

ZeroPath is an application security vendor centered on AI-native SAST and dynamic testing for running applications. In this category, it focuses on finding exploitable code and runtime flaws that rule-based scanners often miss, including business logic issues, broken authentication, IDOR, SSRF, SQL injection, and XSS. It is best suited for engineering and AppSec teams that want code analysis and runtime validation in one workflow, with automated patch generation and a strong bias toward reducing false positives. The company also markets adjacent AppSec capabilities, but its core profile here is DAST/SAST.

ZEST Security

Cloud Security / CSPM