Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
ThreatX (an A10 Networks company)
Behavioral, risk-based API and web application protection with automated blocking and 24/7 managed monitoring, now integrated into A10…
Virsec
San Jose-based runtime workload-protection platform that maps and enforces expected application memory and control-flow behavior to block exploitation…
Codacy
Portuguese code quality and security platform combining static analysis, secret scanning and software composition analysis with newer AI…
Emproof
Emproof protects embedded software at the binary level against reverse engineering and exploitation, without requiring source code access…
DeepSource
Y Combinator-backed code review platform combining hybrid static analysis and AI to catch security vulnerabilities and code quality…
NightVision
NightVision is an application security startup providing AI-assisted dynamic testing that discovers and exploits API and web vulnerabilities…
Dedge Security
Madrid-based application security posture platform designed specifically for Web3 smart contracts and decentralized applications.
F5 (Application Delivery and Security Platform)
Seattle-based ADC leader whose BIG-IP and distributed platform protect apps and APIs from zero-days, DDoS, bot attacks, and…
Guardrail
A runtime blockchain security engine that protected $30B+ in assets, acquired in-house by stablecoin platform Rain.
Oplane
A Malmö, Sweden startup that automates security threat modeling for engineering teams building software with AI coding assistants…
Approov
Mobile app attestation and API-security platform (formerly CriticalBlue) that verifies genuine, untampered app instances at runtime to block…
RevEng.ai
A London binary-analysis startup backed by the NATO Innovation Fund and In-Q-Tel that finds hidden vulnerabilities without source…
Phoenix Security
Application Security Posture Management (ASPM) platform that aggregates SAST, SCA and cloud vulnerability findings and prioritizes them by…
Heeler Security
Application security platform that unifies code, runtime behavior, and business context to prioritize which software risks actually matter.
Invicti Security
A DAST-first web and API application security platform, formed from the 2018 merger of Netsparker and Acunetix, now…
Netacea
Server-side bot management platform that detects and blocks credential stuffing, scraping, and account-takeover automation across websites, apps, and…
Zast AI
An AI agent platform that validates application vulnerabilities through active exploit generation rather than pattern matching, aiming to…
Quokka
Mobile app and firmware security firm, formerly known as Kryptowire, providing binary-level analysis without source code and supply…
GeoEdge
Real-time ad security and malvertising protection for publishers and ad exchanges, scanning creatives at the impression level to…
Irdeto
Naspers-owned software security vendor whose Cloakware product line protects applications, credentials, and embedded/connected-device software from tampering and reverse…
Ostorlab
Automated mobile and web application security testing platform combining attack surface discovery with AI-powered vulnerability scanning and remediation…
Interlynk
A Menlo Park SaaS platform automating SBOM generation and software supply chain compliance for medical device makers and…
Fastly
Public edge cloud platform whose Next-Gen WAF, born from the 2020 Signal Sciences acquisition, provides web application, API,…
Chainloop
Open-source evidence store and policy platform for software supply chain attestations, SBOMs, and CI/CD compliance.