Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
Harness (Application Security Testing)
Pipeline-native DevSecOps module from CI/CD platform Harness that unifies SAST, SCA, and vulnerability triage in the delivery pipeline.
Onapsis
Application security platform purpose-built for SAP and Oracle business-critical ERP applications, backed by a research team credited with…
Manifest
Software supply chain security startup founded by former CISA and DoD veterans, operationalizing SBOMs and AIBOMs to secure…
YesWeHack
Paris-based crowdsourced security platform coordinating bug bounty, vulnerability disclosure, and pentest management programs for enterprises and public-sector agencies,…
Data Theorem
Palo Alto-based application security vendor combining mobile, API, and cloud testing into a single full-stack platform, ranked #1…
Black Duck
Software composition analysis and static analysis platform (formerly Synopsys Software Integrity Group) focused on SBOM generation and open-source…
Guardsquare
Leuven, Belgium-based mobile app security leader offering code hardening and runtime protection for Android and iOS, rooted in…
TrustInSoft
Paris-based formal-methods static analysis vendor that mathematically proves the absence of specific critical bugs in C, C++, and…
Salt Security
API security platform using machine learning to baseline normal API behavior and catch attacks that signature-based tools miss.
Qwiet AI (a Harness company)
Qwiet AI provides AI-powered application security testing — combining SAST, SCA, IaC, container, and secrets scanning in one…
Impart Security
San Francisco API and application security vendor built by former CDN and WAF engineers, offering runtime enforcement across…
Wallarm
API security platform extending discovery and runtime enforcement to AI agents and Model Context Protocol servers.
Backslash Security
Cloud-native application security platform unifying code and cloud risk context to prioritize exploitable vulnerabilities and reduce developer alert…
wolfSSL
wolfSSL builds a lightweight, portable embedded TLS/SSL and cryptography library used to add encryption and secure communication into…
Autonomous Plane
Autonomous Plane was a cloud-native application security startup founded by Kyle Quest, creator of the widely used open-source…
Green Hills Software
Real-time operating system vendor whose EAL 6+ NSA/NIAP-certified INTEGRITY RTOS provides hardware-enforced partitioning for safety- and security-critical embedded…
TestifySec
Open-source-rooted software supply chain security platform providing cryptographic build attestation, SBOM generation, and CI/CD policy enforcement.
Veracode
SaaS-delivered application security platform offering static, dynamic, and software composition analysis with an annual industry benchmark report.
Mobb
Tel Aviv-based application security startup that automatically generates code fixes for vulnerabilities flagged by SAST tools like Snyk,…
Intigriti
A European crowdsourced security platform connecting organizations with vetted ethical hackers for bug bounty programs and continuous penetration…
ThreatModeler
AI-assisted, DevSecOps-integrated threat modeling platform that recently combined with IriusRisk under Invictus Growth Partners ownership.
Aikido Security
Unified developer-first security platform covering code, cloud and runtime, with automated AI pentesting.
MindFort
Y Combinator-backed swarms of AI agents that continuously attack live applications and ship validated exploits instead of scanner…
Seal Security
Generates backported, drop-in security patches for open source vulnerabilities so teams can remediate CVEs without forced major-version upgrades.