Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
RunSafe Security
Hardens embedded and industrial software against memory-corruption exploits at build time using patented load-time function randomization, without source…
OX Security
'Active ASPM' platform combining native SDLC scanning with attack-path analysis and a software bill-of-materials lineage (PBOM) to prioritize…
Jscrambler
Portuguese client-side security vendor providing JavaScript obfuscation and third-party tag monitoring to protect browser-side code from tampering and…
Endor Labs
Application security platform using function-level reachability analysis to prioritize open-source and supply chain risk.
Pangea
API-based security platform for application developers, now including AI guardrails, acquired by CrowdStrike in 2025.
Sonatype
Software supply chain security pioneer behind Nexus Repository and component intelligence, helping organizations vet and manage open-source dependencies…
SCI Semiconductor
SCI Semiconductor builds memory-safe computer chips designed to eliminate the vulnerability class behind roughly 70% of cyberattacks.
Huskeys
AI-driven edge security management platform that orchestrates and tunes existing WAFs and CDNs across multi-cloud environments instead of…
Kodem Security
Kodem Security runs a dynamic software composition analysis platform that uses runtime memory forensics to determine which open-source…
Snyk
Developer-first application security platform that finds and fixes vulnerabilities in code, open source dependencies, containers and infrastructure as…
Konvu
AI agents trace real code and runtime data flow to prove which flagged vulnerabilities are actually exploitable.
GitGuardian
Secrets detection and non-human identity security platform that scans code, CI/CD, and collaboration tools for exposed credentials in…
Harness (Application Security Testing)
Pipeline-native DevSecOps module from CI/CD platform Harness that unifies SAST, SCA, and vulnerability triage in the delivery pipeline.
Onapsis
Application security platform purpose-built for SAP and Oracle business-critical ERP applications, backed by a research team credited with…
Manifest
Software supply chain security startup founded by former CISA and DoD veterans, operationalizing SBOMs and AIBOMs to secure…
Nokod Security
Nokod Security governs and secures low-code/no-code applications, detecting vulnerabilities and malicious activity in a fast-growing app-development category traditional…
Security Compass
Toronto-based application security firm whose SD Elements platform automates secure development requirements and maps them directly into developer…
Legit Security
AI-native ASPM platform for discovering, prioritizing, and remediating risk across the software supply chain, with a separate module…
NowSecure
Automated mobile application security testing platform used across DevSecOps pipelines and by numerous US federal agencies for NIAP-compliant…
ForAllSecure
Pittsburgh-based creator of Mayhem, an autonomous fuzzing engine born from DARPA's Cyber Grand Challenge, now securing DoD and…
Xygeni Security S.L
An AI-powered application security posture management platform unifying SAST, SCA, secrets detection, and software supply chain protection with…
Cequence Security
Cequence Security provides unified API security and bot management, combining API discovery with runtime protection against credential stuffing,…
Semgrep
Application security platform built on an open-source static analysis engine, combining code scanning, supply chain and secrets detection…
Trail of Bits
Elite application security research and auditing firm known for deep code review, original vulnerability research, and widely used…