Application Security
Securing web applications, mobile apps, and software throughout the development lifecycle.
RevEng.ai
A London binary-analysis startup backed by the NATO Innovation Fund and In-Q-Tel that finds hidden vulnerabilities without source…
echo
A secure-by-default container-image vendor led by Twistlock founder Ben Bernstein, which absorbed rival Minimus's assets in August 2026…
Ammune.ai
Ammune.ai (formerly L7 Defense) is an Israeli API and AI security vendor whose AMMUNE platform uses self-learning, air-gapped…
FOSSA
San Francisco-based software composition analysis and SBOM platform helping engineering and security teams manage open-source license, vulnerability, and…
Alma Security
A New York-based application security startup building runtime protection focused on business-logic and data-flow risks across APIs, microservices,…
MONITORAPP
South Korean WAF and WAAP vendor whose AIONCLOUD service extends its appliance-based web application firewall business into cloud-delivered…
Rein Security
Israeli AppSec startup providing runtime, in-production visibility and protection for applications, including agentic AI and MCP-based systems.
CDNetworks
APAC-strong global CDN provider whose Cloud Security 2.0 platform bundles WAF, DDoS mitigation, bot management and API protection…
Depthfirst
A San Francisco applied AI security lab training its own vulnerability-detection models, with two large rounds in 90…
AppSealing
No-code mobile app shielding (RASP, anti-tampering, anti-piracy) for Android and iOS, a product line of Seoul-based INKA Entworks,…
Syhunt
A veteran Brazilian application security vendor offering hybrid DAST, SAST, API, and mobile security scanning under the Syhunt…
Astra Security
Continuous penetration testing and vulnerability scanning platform combining automated scanning with manual pentest expertise for web, mobile and…
Avocado Systems
Application and API security vendor providing runtime threat modeling and process-level microsegmentation for cloud workloads via its Avocado…
Codesealer
Codesealer, founded in 2010 and based in Copenhagen, provides a specialized web and mobile application security solution built…
BlueFlag Security
A Sunnyvale identity-centric SDLC security vendor extending governance to AI coding agents.
Inspectiv
Unified application security testing platform combining crowdsourced bug bounty, penetration testing, DAST, and vulnerability disclosure management.
PreEmptive Solutions
A Cleveland-based application protection vendor, now operating within Idera's DevOps business unit, whose Dotfuscator and DashO products obfuscate…
Fluid Attacks
Application security testing provider combining SAST, DAST, SCA, secret scanning and manual penetration testing into one continuous, all-in-one…
Corridor
A San Francisco AI-coding security startup with Alex Stamos as CPO, reportedly valued at $200M on its Series…
Cycurion
Publicly traded (NASDAQ: CYCU) McLean, Virginia cybersecurity firm whose ARx platform bundles WAF, DDoS, bot mitigation, and API…
Symbiotic Security
A New York developer-security startup embedding scanning and secure-coding training in IDEs, backed by Hugging Face co-founder Thomas…
OpenText Fortify
Long-established static, dynamic, and interactive application security testing suite, now an OpenText product line after passing through HP…
RiskFront Lab
New York startup that adds runtime tamper, root/jailbreak, and debugging defenses to finished mobile apps without an in-code…
Sucuri
Website security platform providing a WAF, malware scanning and removal, and DDoS mitigation, widely adopted in the WordPress…