ZTNA, SASE &amp; SSE

Application self-healingRemote device freeze+8

Absolute Security’s endpoint product line centers on **Absolute Secure Endpoint**, which uses a firmware-embedded Persistence agent to keep a durable connection to managed devices even after reimaging or software tampering. Within EDR, it is better understood as an endpoint visibility, control, and recovery platform than a pure malware-detection engine. It is best for enterprises that need continuous endpoint reachability, remote containment, and fleet-wide remediation across laptops and other managed devices, especially in distributed workforces.

Adaptiva

Autonomous endpoint management+10

Adaptiva, the autonomous endpoint management company, delivers the fastest way to patch and manage endpoints at scale.

AhnLab

Behavior-based threat detection using MDP engineGraphical attack flowchart visualization+5

AhnLab provides endpoint security products centered on Windows endpoint protection and centralized management. Its V3 Endpoint Security line uses anti-malware scanning, URL and DNS protection, device control, and cloud-assisted detection through Smart Defense. AhnLab Endpoint PLUS consolidates endpoint controls into a single management console, and the vendor also offers EDR and OT endpoint security adjacent to the core endpoint portfolio. It is best suited for enterprises that want endpoint prevention and response from a vendor with long-standing experience in anti-virus and endpoint control, especially in Windows-heavy environments.

Akamai

Zero Trust Network Access as a serviceDevice posture based adaptive accessIdentity provider integration for access control+9

We make life better for billions of people, trillions of times a day

AlienVault USM (AT&T Cybersecurity)

SIEM

Security information and event management+9

AT&T Cybersecurity AlienVault USM Anywhere is a cloud-hosted SIEM platform that unifies asset discovery, vulnerability assessment, intrusion detection, behavioral monitoring, and incident response for on-premises, cloud, and hybrid environments. It correlates security events from logs, network traffic, and cloud APIs like AWS CloudTrail and CloudWatch, retaining data for 90 days. Integrated with OTX threat intelligence and AlienLabs feeds, it targets SMBs and resource-constrained teams needing all-in-one threat detection without separate tools. OSSIM offers a limited open-source alternative for single-server on-premises use.

AppGate

Identity-based zero trust access controlPrivate access for internal resources+6

Appgate provides a high-performance Zero Trust Network Access (ZTNA) solution designed for complex hybrid and multi-cloud environments. The platform utilizes a Software-Defined Perimeter (SDP) architecture to create 1-to-1 encrypted tunnels, replacing legacy VPNs and hardware-based firewalls with identity-centric access controls. It features 'direct-routed' architecture to eliminate cloud latency bottlenecks and supports granular, attribute-based access control (ABAC) for both users and machine-to-machine communications.

ARCON

Discovery and onboarding of privileged accountsPrivileged access control policies+10

11 products

ARCON PAM is an enterprise-class privileged access management solution designed for hybrid, multi-cloud, and distributed datacenter environments. The platform centralizes control of privileged accounts across heterogeneous IT infrastructure through a unified admin console and secure gateway server. ARCON PAM targets IT security, risk, and compliance teams managing complex privilege lifecycles in organizations with DevOps and cloud-native workloads requiring fine-grained access controls and comprehensive audit trails.

Area 1 Security (Cloudflare)

Email Security

Pre-delivery phishing detection+10

Cloudflare started as a simple application to find the source of email spam. From there it grew into a service that protects websites from all manner of attacks, while simultaneously optimizing performance.

Arista Networks (Awake Security)

Network Detection & Response (NDR)

Autonomous network traffic analysis+11

Arista Networks is an industry leader in data-driven, client to cloud networking for large data center/AI, campus and routing environments. Arista's award-winning platforms deliver availability, agility, automation, analytics and security through an advanced network operating stack.

ArmorPoint

Managed Detection & Response (MDR)

24x7x365 professional SOC team performing continuous monitoring, alert investigation, validation, and escalation to incident with SANS-based incident response protocolsCloud-based SIEM correlating EDR telemetry, network sensor data, syslog, API integrations, and identity/cloud activity to visualize full attack stories from root cause across endpoints, devices, users, applications, and cloud deployments

ArmorPoint is a cloud-native managed security operations platform built for midsize enterprises and the partners who serve them. The platform brings detection, response, risk, and compliance together within a shared operations environment where customers, partners, and ArmorPoint's 24/7 U.S.-based SOC work side by side.

Atsign

Encryption & Key Management

Edge-to-edge encryptionOn-device asymmetric key generation+8

Atsign is a cryptographic identity and secure communications platform built around the atProtocol, with keys generated at the edge and encrypted data exchanged only between authorized Atsigns. In the Encryption & Key Management scope, its main value is non-custodial, peer-to-peer key handling: private keys stay on sender and receiver devices, and the infrastructure operator cannot decrypt customer data. It is best suited for IoT, distributed systems, and agentic AI teams that want end-to-end encrypted messaging without centralized key custody or exposed inbound ports. Atsign also offers adjacent secure remote access tooling, but the core security model is protocol-level encryption.

AT&T Business

Security Operations

Security operations center management+11

AT&T Business offers **Security Operations Center (SOC)** services that combine managed monitoring, correlation, alerting, and incident response for enterprise networks and applications. In this category, it is positioned as a telecom-scale managed security provider that operationalizes security processes around AT&T network visibility and service management. The offering is best suited to organizations that want outsourced 24x7 security operations, alarm validation, and response support without building a full internal SOC. AT&T also sells adjacent cybersecurity products, but the core Security Operations scope here is its managed SOC/MDR services.

Authomize

Identity Governance & Administration (IGA)

Access governance policy enforcement+7

Authomize provides an AI-native Identity Governance and Administration (IGA) platform focused on continuous discovery, mapping, and governance of human and machine identities across cloud and on-premises environments. It delivers real-time visibility into permissions, entitlements, and access risks, automating remediation through policy enforcement and self-service workflows. Best suited for enterprises with complex multi-cloud infrastructures seeking to mitigate identity-based threats without disrupting operations. Authomize positions itself as a modern alternative to legacy IGA, emphasizing agentless integration and ML-driven risk prioritization for mid-to-large organizations.

Axis Security

Cloud-based access broker+8

Axis Security provides HPE Aruba Networking SSE, a cloud-native security platform integrating Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), and Cloud Access Security Broker (CASB) with SD-WAN for unified SASE. Acquired by HPE Aruba, it delivers consistent Zero Trust policies across remote users, branches, and data centers via local edge virtual machines that broker traffic to private apps without cloud backhaul. Best for enterprises seeking SSE as a SASE stepping stone, with features like SSL inspection, sandboxing, and AI-driven reputation blocking for malware and risky sites.

Barracuda

Email Security

Cloud-based email gateway defense+10

Barracuda is a leading cybersecurity company providing complete protection against complex threats

Beyond Identity

Multi-Factor Authentication (MFA)

Phishing-resistant passwordless MFA+11

Beyond Identity provides passwordless, phishing-resistant MFA built around device-bound cryptographic keys and device-native biometrics. Its MFA offering is aimed at organizations trying to replace passwords, push approvals, and OTPs with stronger authentication for workforce access. The platform uses an authenticator on endpoints and a cloud policy engine to verify both user identity and device trust at login. It is best suited for security teams that want MFA with continuous device posture checks and support for managed and unmanaged endpoints, while avoiding legacy second factors that can be phished or replayed.

Bitglass

CASB (Cloud Access Security Broker)

Multi-mode cloud access control+10

Bitglass provides a multi-mode CASB that secures SaaS applications, IaaS instances, data lakes, and private apps via forward proxy, reverse proxy, and API integrations. It delivers real-time data protection and threat prevention using machine-learning to adapt to new cloud apps, malware, and user behaviors. The agentless architecture offers end-to-end visibility, prevents data leakage, and limits external sharing. As part of its integrated SASE platform with SmartEdge SWG and ZTNA, Bitglass suits enterprises adopting cloud and BYOD while addressing compliance gaps in dynamic environments.

Cato Networks

Analyze north-south and east-west traffic+10

Cato Networks offers NDR capabilities inside its SASE Cloud platform through Cato XDR and Network Stories. For NDR use cases, it analyzes north-south and east-west network telemetry, flow records, and packet-level signals to detect anomalies such as BGP session drops, blackouts, downed links, SLA degradation, and packet loss. Its differentiator is incident triage plus root-cause analysis from the same cloud data lake used for security analytics. It is best suited for organizations that want network operations and security teams working from one incident view, including providers building NOC-as-a-service offerings.

Cisco

CASBCisco SD-WAN integration+16

14 products

Cisco Umbrella is a cloud-delivered Security Service Edge (SSE) solution that enforces zero trust by continuously verifying identity, device posture, and context before granting access to applications. It converges multiple security functions, secure web gateway, firewall-as-a-service, cloud access security broker, and zero trust network access, into a unified cloud platform. Cisco Umbrella serves enterprises requiring distributed security across remote workers, branch offices, and on-premises infrastructure without complete network architecture overhauls.

Commugen

Vulnerability Management

Inherent risk evaluationResidual risk calculation+5

Commugen is a market leader in GRC management solutions

Cybereason

Behavioral detection of malicious activityAutomated endpoint threat hunting+9

Cybereason provides Endpoint Detection and Response (EDR) that correlates endpoint telemetry across machines into MalOp™ narratives, revealing full attack chains from initial compromise to lateral movement. It uses behavioral analysis, machine learning on threat feeds ranked by historical accuracy, and cross-machine correlation for real-time detection of sophisticated threats. The platform supports instant remediation like process termination, file quarantine, persistence removal, and machine isolation. Best for enterprises needing high analyst efficiency (1:200,000 endpoint ratio) and advanced threat hunting without alert fatigue, as validated by top Forrester Wave and MITRE ATT&CK scores.

Defguard

Zero-trust WireGuard VPN access platformMulti-factor authentication for every connection+8

Defguard is a zero-trust, VPN-centric access platform built on WireGuard that combines access control, policy enforcement, and MFA for private network access. In the Zero Trust / SASE category, it is best understood as a WireGuard-based remote access and segmentation product rather than a full SASE suite: it focuses on authenticated, policy-driven connectivity to internal resources and keeps administrative services off the public internet. It is a fit for teams that want to replace or tighten legacy VPN access with identity-aware controls, especially where WireGuard is already acceptable as the data-plane protocol.

Delinea (formerly ThycoticCentrify)

Privileged account discovery and governance+10

Delinea, formed in 2021 from the merger of Thycotic and Centrify and backed by TPG Capital, provides privileged access management (PAM) solutions for securing privileged accounts, credentials, and access to servers, applications, databases, and cloud infrastructure. Available as cloud-native or on-premises deployments via a centralized dashboard, it supports hybrid enterprises with products including Secret Server for credential vaulting, Privilege Manager for endpoint controls, and Privileged Behavior Analytics for threat detection. Serves over half of Fortune 100 companies, financial institutions, and critical infrastructure, focusing on password rotation, session monitoring, and just-in-time access.

DigiCert

Device certificate authentication policiesAuthentication method controlCertificate issuance protocol support+5

Trust built for the AI age

DNSFilter

DNS-layer threat blocking+10

2 products

DNSFilter is changing the way people think about DNS security. We're here to help make the internet safer and workplaces more productive.

Ericom Software

Browser & Web Isolation

Remote browser rendering in cloud containersEnd-to-end encrypted traffic inspection+10

Protect devices, apps, networks and data with isolation-based security solutions.

Feitian

Pre-integrated application accessSAML 2.0 identity federation+9

Established in 1998, FEITIAN Technologies is a leading global provider of cyber security products and solutions.

Fleet

Manage iOS and Android devicesSecure corporate mobile data+6

Fleet is a device management platform that provides MDM (Mobile Device Management) capabilities for iOS and Android devices, alongside endpoint management for laptops and servers. Built on Omnissa Workspace ONE technology, Fleet serves security teams, IT professionals, and DevOps engineers managing heterogeneous device fleets. The platform centralizes control of smartphones, tablets, and fixed assets through a unified interface, enabling remote policy enforcement, compliance monitoring, and incident response across organizational device inventories.

Hewlett Packard Enterprise

Unified SASE with secure SD-WAN+11

Hewlett Packard Enterprise (HPE) provides a comprehensive edge-to-cloud security architecture, largely bolstered by the acquisitions of Axis Security (SSE) and Silver Peak (SD-WAN). Their portfolio includes Universal ZTNA, cloud-delivered security service edge (SSE), and AI-powered Network Access Control (Aruba ClearPass). These solutions replace traditional VPNs and legacy firewalls with a modern, unified fabric for secure remote access and branch office connectivity.

Hexnode

Device enrollment and provisioningApplication allowlisting and blocklistingWeb content filtering+9

Making work safe. Everywhere.

iboss

Zero Trust Network AccessCloud-delivered SASE platform+9

iboss is a cloud-native SASE platform that consolidates networking and security services into a unified global fabric. It combines Secure Web Gateway (SWG), CASB, DLP, and ZTNA to provide secure access to users regardless of location while replacing legacy hardware VPNs and on-premise appliances. The platform leverages a containerized architecture to ensure dedicated resources and data sovereignty for large enterprises.

Ivanti EPMM (Endpoint Policy Management)

Centralized mobile device management+10

Ivanti EPMM (formerly MobileIron Core) is Ivanti’s on-premises mobile device management platform for organizations that need policy control over iOS, iPadOS, Android, macOS, Windows, and some tvOS fleets. In the Mobile Security category, it is used to enroll devices, enforce device and application policies, distribute corporate apps and content, and support compliance actions from a central console. It is best suited for enterprises that want on-prem control of mobile endpoints, certificate-based access, and device lifecycle management rather than a cloud-only MDM service. Ivanti also offers a separate cloud MDM product, Neurons for MDM.

Jamf

Apple device lifecycle management+10

2 products

Jamf’s purpose is to simplify work by helping organisations manage and secure an Apple experience that end users love and organisations trust. Jamf is the only company in the world that provides a complete management and security solution for an Apple-first environment that is enterprise secure, consumer simple and protects personal privacy.

Kandji

Apple device management+9

Iru gives you a single view of your users, apps, and devices. It's an integrated system to secure access, protect endpoints, and prove compliance while delivering a better employee experience.

Menlo Security

Browser & Web Isolation

Cloud-based remote browser isolation+11

As a pioneer of browser security, Menlo Security delivers a solution with a comprehensive approach to enterprise browser security, protecting users where they work and securing applications from internet-borne attacks.

Microsoft

Cloud Security / CSPM

15 products

Microsoft Defender for Cloud is a multicloud CSPM platform that provides continuous security posture assessment across Azure, AWS, and GCP. It delivers agentless vulnerability scanning, misconfiguration detection, and compliance monitoring against industry benchmarks (CIS, NIST, ISO, PCI-DSS). The platform generates hardening recommendations ranked by risk and includes attack path analysis to identify exploitable chains. Defender for Cloud serves enterprises managing hybrid and multicloud infrastructure seeking unified posture visibility and compliance reporting.

Agentless vulnerability scanning+21

Mosyle

Automated Apple device hardening+10

Mosyle is an Apple-exclusive MDM and security platform serving 22,000+ organizations globally. The vendor provides integrated device management, threat detection, and compliance automation for macOS, iOS, iPadOS, and tvOS. Mosyle targets enterprises and K-12 institutions requiring Apple-specific security controls without third-party agent dependencies. The platform consolidates MDM, antivirus, zero-trust enforcement, and web filtering into a single management console with native Apple framework integration.

NCP engineering

Zero Trust network access enforcement+8

NCP engineering provides high-performance VPN software and remote access solutions that serve as foundational components for Zero Trust and SASE architectures. The solution features a central management system that handles large-scale deployments, supporting complex network topologies and diverse endpoint operating systems. It replaces legacy, inflexible hardware-based VPNs with a software-defined approach that supports MFA, endpoint integrity checks, and granular access controls.

Netskope

Automated sensitive data classification and detection

Netskope provides Netskope One Data Loss Prevention (DLP), a cloud-delivered solution integrated into its Security Service Edge (SSE) platform for zero trust data protection. It secures sensitive data across SaaS, IaaS, private apps, web, email, endpoints, and AI environments using unified classification, policy enforcement, and incident management. The patented lightweight endpoint agent enables context-aware inspection of local peripherals like USB drives with cloud-based ML classifiers, OCR, file fingerprinting, and exact data matching (EDM). Best for enterprises needing consistent DLP coverage in hybrid and cloud-native setups with high detection accuracy.

NetWitness

SIEM

Enriched log data analysis+10

NetWitness is a comprehensive threat detection and response platform that integrates SIEM, network forensics, endpoint data, and user entity behavior analytics (UEBA). It provides security analysts with deep visibility across the entire attack lifecycle by capturing and analyzing packet-level data alongside logs and endpoint telemetry. The platform is designed for high-scale enterprise environments, replacing fragmented point solutions with a unified workbench for incident investigation and response orchestration.

Nile Access Service

Network Access Control (NAC)

Native NAC replacement in the fabric+10

Nile Access Service is a cloud-native Network-as-a-Service platform delivering wired and wireless campus infrastructure with embedded zero-trust security. The vendor eliminates standalone NAC appliances by natively integrating identity-based access control and microsegmentation into the network fabric using Layer 3 architecture. Nile serves over 150 customers across 30 countries and targets enterprises seeking to reduce NAC complexity and operational overhead while enforcing continuous device authentication and least-privilege access.

NinjaOne

Centralized endpoint monitoring and control+10

NinjaOne is a cloud-based endpoint management platform focused on centralized device visibility, patching, software deployment, remote administration, and scripted remediation from a single console. It uses an agent-based model to manage internet-connected Windows, macOS, and Linux endpoints, plus servers and workstations, making it a fit for IT and security teams that need to control mixed fleets and remote devices. In this category, it is best suited for midsize to large organizations and MSPs that want operational control over endpoint inventory, update status, and routine maintenance without separate tools for each task.

NordLayer

Zero Trust Network Access with context-based authorization

NordLayer is a cloud-native SASE platform consolidating SD-WAN, firewall-as-a-service (FWaaS), secure web gateway (SWG), cloud access security broker (CASB), and zero trust network access (ZTNA) into a unified service. The vendor targets enterprises transitioning from point-solution security architectures to integrated cloud-delivered frameworks. NordLayer serves organizations requiring secure remote access, hybrid IT environments, and zero trust implementation without hardware-dependent infrastructure.

Nord Security

Cloud-delivered secure access architecture+10

Nord Security offers a suite of business tools including NordLayer for network access and NordPass for credential management, focused on the SMB and mid-market segments. It provides a secure service edge (SSE) approach to remote access, replacing legacy VPNs with a Zero Trust Network Access (ZTNA) model. The platform integrates identity-centric access control with password security and threat exposure monitoring.

OpenVPN

Network Detection & Response (NDR)

VPN protocol fingerprint detection+9

Secure your network. Connect your team. OpenVPN is a global leader in cybersecurity that enables organizations to truly safeguard their assets through secure network connections.

OPSWAT

Vulnerability Management

Detect and report installed software vulnerabilities

OPSWAT prevents known, unknown, and AI-generated threats from reaching the systems the world depends on. The MetaDefender Platform, OPSWAT's AI-powered cybersecurity solution, secures every file, device, and data transfer across IT, OT, and cross-domain environments.

Palo Alto Networks

Active-passive firewall high availability+22

21 products

Palo Alto Networks is a major vendor in the Firewall / NGFW market, best known for PAN-OS-based next-generation firewalls and Cloud NGFW. Its firewalls combine application-aware policy, user-based controls, and threat prevention to inspect traffic, including encrypted sessions, and block known and unknown threats. It fits enterprises that need granular segmentation, internet edge protection, and consistent policy across physical and cloud deployments. Adjacent offerings exist, but the core firewall line remains centered on network traffic control, inspection, and prevention.

Perimeter 81

Zero Trust Network Access+11

2 products

Perimeter 81, acquired by Check Point in 2023 and rebranded as Harmony SASE, delivers a cloud-native Secure Access Service Edge (SASE) platform consolidating networking, Zero Trust Network Access (ZTNA), secure web gateway (SWG), and cloud access security broker (CASB) for remote and hybrid workforces. It replaces legacy VPNs with software-defined perimeters, IPSEC tunnels, and WireGuard connectors to private applications, enforcing granular policies based on identity, device posture, geo-location, and time. Best suited for mid-sized enterprises migrating to cloud environments seeking unified SSE without hardware deployments.

Portnox CLEAR

Network Access Control (NAC)

Cloud-native network access control+11

Portnox CLEAR is a cloud-native NAC-as-a-Service platform that provides continuous risk monitoring and access control for endpoints across wired, wireless, VPN, and virtual networks. It discovers devices, authenticates via cloud RADIUS and Active Directory integration, enforces role- and risk-based policies, and automates quarantine of non-compliant devices using AgentP for enrolled endpoints. Vendor-agnostic with zero on-premises footprint, it supports managed, BYOD, IoT/OT devices in distributed environments. Best for mid-sized enterprises (500-10,000 employees) needing SASE-aligned NAC without hardware maintenance.

Proton for Business

Data Loss Prevention (DLP)

End-to-end encrypted business emailZero-access encrypted incoming mail+10

We believe a better world starts with privacy and digital freedom

Pulse Secure Pulse Policy Secure

Network Access Control (NAC)

Context-aware access control+11

Secure Access Made Easy, Comprehensive, and Flexible

Riptides

Zero Trust SASE access control+10

Riptides appears to be an early-stage security vendor focused on Zero Trust / SASE, but publicly available product information is limited in the provided search results. Based on the category scope, a buyer would expect identity- and policy-based access control for users, devices, and applications, delivered through cloud-managed access points rather than a traditional VPN. If Riptides offers adjacent networking or security functions, they are not evident from the sources provided. This profile is therefore conservative and should be validated against Riptides’ own product documentation before procurement decisions.

Samsung Knox

Mobile Security

Hardware-backed mobile device protection+11

Samsung Knox is a business platform for configuring and managing mobile devices – offering efficient and customized use in various industries.

Sangfor Technologies

AI-based malware detection+10

Sangfor Technologies’ Network Secure is its firewall/NGFW product, positioned around application-layer control, malware inspection, and integrated web application protection. In this category it combines traditional NGFW functions with malware detection, intrusion prevention, application control, and NG-WAF capabilities in a single appliance. It is best suited for enterprises that want perimeter enforcement plus web application and ransomware-focused controls without adding separate firewall and WAF stacks. Sangfor also pairs the firewall with its own endpoint and network security products for correlated response, but those adjacent capabilities are secondary in this profile.

SASE OpsLab

Secure access service edge architecture+8

SASE OpsLab provides an automation marketplace and operations platform specifically designed to streamline the deployment and management of SASE (Secure Access Service Edge) environments. It utilizes prepackaged 'OpsKits' to automate complex migrations, configurations, and policy rollouts for major SASE vendors. This platform complements existing SASE investments by reducing the manual operational overhead and human error associated with managing zero-trust network architectures.

Segura

Centralized multi-cloud identity provisioning+10

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

Segura (senhasegura)

Privileged credential discovery+11

Segura is a leader in Privileged Access Management (PAM), delivering security that's fast, simple, and powerful, without the complexity.

Skyhigh Security CASB

CASB (Cloud Access Security Broker)

Discover unsanctioned cloud services+11

Skyhigh Security CASB is a cloud-based, multi-tenant Cloud Access Security Broker that deploys via forward and reverse proxy modes for real-time control over sanctioned and unsanctioned cloud services. It leverages the Cloud Registry for 50+ attribute risk assessments across 20,000+ services, enabling discovery, classification, and remediation. Key capabilities include DLP policy enforcement synced with endpoint DLP, machine learning-based UEBA for insider threat detection, malware analysis, configuration auditing against benchmarks with automated remediation, and contextual access controls. Best suited for enterprises needing comprehensive visibility and governance across hybrid cloud environments with SharePoint integration.

Smallstep

Device identity for access control+10

Smallstep provides a Device Identity Platform that enables high-assurance Zero Trust security through automated, short-lived PKI certificates and device-bound authentication. It streamlines authentication workflows to eliminate phishing risks and password dependency by ensuring only managed, healthy devices can access sensitive resources. The solution replaces legacy static credential systems and complements existing SSO providers with granular device-level visibility.

Tailscale

Uses WireGuard-based encrypted tunnels to establish peer-to-peer connections between endpoints, reducing reliance on traditional VPN concentrators for private network access.

We're returning to the original vision of the Internet. We want to help everyone create their own secure networks built around people and their connections.

Teleport

Zero trust access to infrastructureRole-based access control+10

We deliver trusted computing to modern infrastructure

ThreatAware

Vulnerability Management

Discover devices and users accessing data+9

ThreatAware transforms the way organisations secure their cyber assets globally.

ThreatLocker Ops

Security Awareness & Phishing Simulation

Ongoing cybersecurity training sessions+11

ThreatLocker Ops is described in public material as part of ThreatLocker’s broader endpoint and zero-trust security portfolio, not as a standalone security awareness training suite. In the security awareness training category, the available evidence is limited to high-level claims about educating users around real-world threats, so buyers should treat it as an adjunct awareness capability rather than a dedicated LMS-style platform. It is best suited for organizations already using ThreatLocker that want threat-context education tied to policy and endpoint behavior.

Trinity Cyber

Network Detection & Response (NDR)

Full content inspection+7

Trinity Cyber is a network security vendor centered on Full Content Inspection (FCI), which inspects full internet sessions in both directions and neutralizes malicious content in transit. In the NDR scope, its value is highest where teams need deep north-south traffic inspection, visibility into encrypted sessions, and inline response at the network edge. Trinity Cyber is best suited for mid-market and enterprise buyers that want active network threat prevention rather than alert-only detection. The company also offers managed services and adjacent controls, but its core differentiator is inline session-level traffic analysis and modification.

Twingate

Zero Trust access to protected resources+11

Twingate provides Zero Trust Network Access (ZTNA) using software-defined perimeters to hide resources from public and private networks, enabling direct encrypted tunnels between authenticated users and resources. It acts as a cloud-native control layer for Zero Trust orchestration, integrating with identity providers, MDM, and EDR tools. Positioned as a lightweight SASE alternative to VPNs, it supports phased deployments without infrastructure changes. Best for organizations seeking rapid ZTNA adoption for remote access to critical resources while maintaining existing networks.

Versa Networks

Stateful firewall traffic controlApplication visibility and policy enforcement+10

Versa Networks, the leader in SASE, combines extensive security, advanced networking, full-featured SD-WAN, genuine multitenancy, and sophisticated analytics via the cloud, on-premises.

VMware Workspace ONE

Mobile Security

Mobile device management+10

VMware Workspace ONE Mobile Threat Defense (MTD) is a UEM-integrated mobile endpoint security solution for Android, iOS, and Chrome OS, powered by Lookout technology. Delivered through Workspace ONE Intelligent Hub, it provides threat detection and automated remediation without requiring separate application installation. The solution addresses phishing, malware, device vulnerabilities, jailbreak/root detection, rogue Wi-Fi, and SSL stripping attacks. Best suited for enterprises managing heterogeneous mobile device environments seeking consolidated endpoint protection with Zero Trust Network Access capabilities.

WALLIX Bastion

Centralized privileged access controlPrivileged session management+8

WALLIX provides cybersecurity solutions for simple, secure and trusted access, to protect digital and industrial environments.

WatchGuard Technologies

Application control and identification+11

For 30 years, WatchGuard has delivered real-world cybersecurity built for constantly evolving threats and limited IT resources. We partner with MSPs to simplify security and protect networks, endpoints, identities, and cloud environments with solutions that scale and last.

Xage Security

OT & ICS Security

Layered multi-factor authenticationSingle sign-on federation+9

Xage Security is a zero-trust access vendor whose IAM offering centers on identity-based access for mixed IT, OT, and edge environments. In the IAM scope, it provides multi-factor authentication, federation, single sign-on, and policy-based access orchestration across multiple identity providers and local directories. Xage is best suited for industrial, critical infrastructure, and distributed enterprise buyers that need access control across legacy systems, remote sites, and intermittently connected environments. The company also sells adjacent zero-trust and privileged access capabilities, but its IAM value is rooted in layered identity enforcement.

XFA

Device discovery via identity provider logsManaged device visibility+45

Privacy-respecting Zero Trust alternative to traditional MDM for securing BYOD, freelancer, contractor, personal, and unmanaged devices.

X-PHY Inc

Firmware-level threat detection+10

X-PHY provides hardware-embedded cybersecurity through AI-integrated SSDs and on-device firmware security. It utilizes a dedicated hardware AI engine to perform real-time data monitoring and autonomous threat response at the physical layer, bypassing OS-level vulnerabilities. This solution complements traditional EDR by offering a last line of defense against ransomware and physical tampering that software-based tools might miss.

YazamTech

Email Security

Content Disarm and Reconstruction for emails+6

YazamTech Ltd. is a specialized cybersecurity vendor focused on Content Disarm & Reconstruction (CDR) technology, not a dedicated Email Security platform. While their CDR solutions can be applied to sanitize files within email streams to block infected attachments, they do not offer core email security capabilities like spam filtering, phishing detection, BEC prevention, or secure email gateways. The company is best positioned as a data security specialist for organizations needing to neutralize advanced threats in file streams, rather than as an email security buyer's primary solution. Their market position is niche within data sanitization, not email protection.

Zentera Systems, Inc.

Zentera Systems offers a Zero Trust Network Access (ZTNA) and microsegmentation platform centered around its Virtual Chamber technology. It provides a secure overlay for IT, OT, and AI infrastructure that requires no changes to underlying network architecture. It is often used to replace traditional VPNs and complex firewall-based segmentation with a more agile identity-centric access model.

Zero Touch Deployment+9

Zerac

End-to-End Encryption (E2EE) on every connection+5

Zerac is a zero-trust connectivity platform that focuses on direct, peer-to-peer secure interactions between users, machines, and applications. Utilizing end-to-end encryption for every interaction, it aims to eliminate the traditional perimeter while maintaining low latency through direct connections. It serves as a modern alternative to VPNs and hub-and-spoke network architectures.

Zero Networks

Microsegmentation

Automated microsegmentation policy creation+11

Zero Networks is a microsegmentation vendor that automates network asset discovery, policy creation, and enforcement to stop lateral movement and reduce blast radius. Its Segment product is positioned for enterprises that want segmentation across on-premises, cloud, and OT/IoT environments without manually building firewall rules or deploying agents. The company also sells adjacent zero trust capabilities, but its microsegmentation offer centers on agentless, identity-driven segmentation with MFA-controlled access for workloads and unmanaged devices. It appears aimed at organizations replacing legacy segmentation projects with faster policy rollout and centralized control.

ZeroPort

Zero Trust Network Access+9

Zeroport is the first non-IP secure remote access solution provider. Using a patented physical bridge deployed at the gateway of an organization’s network, Zeroport enables only human interactions in and only a stream of pixels out - so no packet (no digital signal) enters or exits the network, all while enabling latency-free work at linear scale. This approach solves the biggest network access pains for both isolated and connected networks - it brings air-gapped networks from 0 to 1 in their r

Zscaler