Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
Oligo
Oligo uses eBPF-based runtime analysis to catch active exploits and prioritize only the vulnerabilities actually reachable during execution,…
Dynatrace
Publicly traded observability platform whose Application Security module uses runtime instrumentation, rather than standalone scanning, to detect and…
Socket
Software supply chain security platform that analyzes open-source packages for malicious behavior before they enter codebases.
ONEKEY
ONEKEY is a Germany-based product cybersecurity platform that automatically analyzes device firmware binaries for IoT, IIoT, and OT…
Contrast Security
Instruments applications from within using IAST and RASP to find and block vulnerabilities as code actually executes, rather…
Crash Override
Engineering Relationship Management platform that auto-catalogs software builds for real-time supply-chain traceability.
Bright Security
Developer-first dynamic application security testing (DAST) platform built to catch and auto-remediate vulnerabilities in CI/CD.
Cloudsmith
Cloudsmith is a cloud-native artifact management platform that adds SBOM inspection, dependency quarantine, and exploitability-based policy controls to…
C2A Security
C2A Security builds a risk-driven DevSecOps platform, EVSec, that automotive OEMs and Tier-1 suppliers use to secure connected-vehicle…
Cycode
Unified ASPM platform with its own proprietary SAST, SCA, secrets, IaC, and container scanners covering the pipeline from…
Miggo Security
Application Detection and Response (ADR) platform providing runtime visibility, exploitability proof, and one-click virtual patching for application vulnerabilities.
Anchore
SBOM-powered software supply chain security platform generating and managing software bills of materials, scanning containers for vulnerabilities, secrets,…
Clover Security
AI-agent platform that analyzes software architecture and design documents to catch security design flaws before code is written.
Aptori
AI-native application security platform providing autonomous offensive testing to detect, prioritize, and remediate vulnerabilities across code, applications, and…
Mend.io
Software composition analysis platform, formerly WhiteSource, that uses reachability analysis to prioritize which open-source vulnerabilities are actually exploitable.
Semgrep
Open-source-led static analysis platform for code scanning, supply chain and secrets detection, powering GitLab's SAST engine.
Qodo
Tel Aviv company (formerly CodiumAI) building AI agents that review, test, and govern code quality across enterprise engineering…
Exein
Embedded runtime security platform that builds real-time threat detection directly into IoT and connected-device firmware.
Sonatype
Software supply chain security vendor behind Nexus Repository, offering malicious package blocking, SCA and dependency governance.
Styra
The creator of Open Policy Agent, Styra sells the commercial control plane and enterprise tooling for policy-as-code authorization…
Source Defense
A client-side web security platform that monitors and controls third-party JavaScript to prevent digital skimming, Magecart-style attacks, and…
DataDome
Real-time bot and fraud protection platform using machine learning to distinguish malicious automated traffic from legitimate users.
ImmuniWeb
Swiss AI-powered application security testing and attack surface management platform offering continuous threat exposure management (CTEM).
OX Security
'Active ASPM' platform combining native SDLC scanning with attack-path analysis and a software bill-of-materials lineage (PBOM) to prioritize…