Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
Rain
A stablecoin payments platform that internalized Guardrail's runtime on-chain monitoring technology, which protected $30B+ in assets.
WhiteHawk
An ASX-listed Australian micro-cap pivoting into AI governance through its AUD 3.5M acquisition of Quixxi.
Minimus
Minimus built hardened, minimal container images from scratch directly from upstream open-source sources, aiming to eliminate more than…
Digital.ai
DevOps platform whose Application Security line (formerly Arxan) provides build-time app shielding, anti-tampering, and white-box cryptography for mobile…
Pi
A 2025-founded agentic AppSec startup backed by CrowdStrike CEO George Kurtz and Armis's founders.
Verimatrix
Publicly-traded content protection and mobile app shielding vendor whose XTD suite hardens Android and iOS apps against reverse…
AppSecAI
Los Altos-based early-stage startup from Contrast Security's founders, using AI to triage and auto-fix SAST vulnerability findings.
Secure Annex
A Kansas City browser and IDE extension-risk specialist acquired by Socket.
SafeStack
An Auckland developer secure-coding training specialist acquired by NINJIO in July 2026.
FortifyWP
A bootstrapped boutique offering flat-fee manual WordPress security audits and hacked-site recovery.
APPVISORY (mediaTest digital)
German SaaS provider of mobile app risk management, using static and dynamic analysis to screen mobile applications for…
VoidZero
The open-source company behind Vite and Vitest, acquired by Cloudflare in June 2026; tracked for software supply-chain relevance…
GuardRails
Singapore-based DevSecOps platform that integrates static analysis, secret scanning and dependency checks directly into developers' existing CI/CD workflows.
Quixxi
An Australian patented mobile-app security vendor acquired by ASX-listed WhiteHawk in a scrip-for-scrip deal.
CodeAnt AI
AI-powered code review platform that flags security vulnerabilities and quality issues directly in pull requests across 30+ languages.
Pluribus One
An Italian University of Cagliari spin-off with a Made-in-Europe application detection and response product, now part of Alfa…
Alfa Group
An Italian IT firm building sovereign European application-security capability through a majority stake in university spin-off Pluribus One.
Gitar
An early-stage AI code-review startup acquired by Sonar to combine agentic reasoning with code verification for AI-generated code.
Kiuwan (Sembi)
Static application security testing and software composition analysis platform originating in Spain, now part of Idera's Sembi software…
Yogosha
A decade-old French invite-only bug-bounty pioneer rescued from receivership by IT group Creative in 2026.
Trusted Knight
Cloud-delivered, agentless malware and fraud prevention for web transactions via Protector AIR.