Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
ThreatLocker
CISO ReviewedZero Trust endpoint protection platform that blocks unknown applications by default through allowlisting, ringfencing, and storage control.
Endor Labs
Reachability-based software composition analysis that filters open-source dependency risk down to what code paths are actually exploitable.
Socket
A software supply chain security platform that combines automated dependency analysis with human verification to catch malicious and…
JFrog
Public software supply chain security platform (Xray plus Advanced Security) that scans binaries and artifacts end-to-end from the…
Apiiro
Builds a continuous 'code risk graph' that maps code, developers, and cloud deployment to prioritize AppSec findings by…
ArmorCode
Tool-agnostic ASPM layer that correlates findings from 300+ existing security tools into one prioritized backlog, without running its…
Snyk
Developer-first application security platform combining SAST, SCA, container, IaC, and API/DAST scanning inside the developer workflow.
Truffle Security
Truffle Security, maker of the widely used open-source TruffleHog scanner, finds and helps remediate leaked secrets and non-human…
HUMAN Security
Bot mitigation and digital fraud prevention platform, formerly White Ops, protecting ad, application, and enterprise traffic from automated…
Aikido Security
Aikido Security is a Ghent, Belgium-based unicorn ASPM platform that consolidates 15+ AppSec scanners into one developer-facing tool…
Blockaid
A Tel Aviv Web3 security vendor screening wallet and dapp transactions in real time before signing, with MetaMask…
Certora
A Tel Aviv formal-verification leader whose Certora Prover has mathematically verified smart contracts securing over $100B in total…
Kong
A San Francisco API infrastructure company, a five-time Gartner Magic Quadrant Leader, extending its API gateway into an…
Chainguard
Software supply chain security company providing minimal, continuously rebuilt container images and packages built from source.
Appdome
No-code mobile app security and fraud prevention build system that lets developers add protection layers to iOS and…
Imperva
A veteran application and data security vendor — WAF, API security, bot management, and data protection — now…
Zimperium
AI-powered mobile threat defense and application protection guarding enterprise mobile devices and apps against phishing, malware, and zero-day…
Lineaje
Full-lifecycle software supply chain security platform generating trusted open-source packages, autonomously fixing vulnerabilities, and managing SBOMs/AIBOMs.
PortSwigger
Maker of Burp Suite, the de facto standard toolkit for web-application penetration testing, bootstrapped and profitable for 15-plus…
Halborn
A Miami blockchain security firm staffed by offensive-security professionals, auditing smart contracts and infrastructure for crypto-native and traditional…
cside
Client-side web security platform that watches scripts, users, and AI agents live in the browser session to stop…
Checkmarx
Unified 'Checkmarx One' application security platform spanning code, software supply chain, and cloud infrastructure scanning with SecOps integrations.
MedCrypt
MedCrypt builds embedded cybersecurity and FDA-compliance software that helps medical device manufacturers secure connected devices and pass premarket…
Dynatrace
Publicly traded observability platform whose Application Security module uses runtime instrumentation, rather than standalone scanning, to detect and…