Cloud Security
Cloud security posture management, workload protection, and container/Kubernetes security.
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Second Front Systems
A Wilmington, DE defense-tech company whose Game Warden platform deploys commercial SaaS into DoD classified networks in 90…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…
Obsidian Security
Obsidian Security provides a SaaS security posture management (SSPM) platform that detects identity-centric threats and misconfigurations across enterprise…
Tenable Cloud Security
An agentless, graph-based cloud identity and posture platform, born as Israeli startup Ermetic, now folded into Tenable's exposure-management…
Illumio
Zero trust segmentation platform that maps application traffic and enforces policy to contain breaches across data center, cloud…
Tigera
Creator and commercial steward of Project Calico, the most widely adopted Kubernetes networking and network-policy engine, extended into…
Upwind
Runtime-powered CNAPP that prioritizes cloud risk using live workload behavior instead of static configuration scans.
Act Security
Action-centric cloud security platform that eliminates excessive access paths at the infrastructure layer instead of just flagging vulnerabilities…
CrowdStrike Falcon Cloud Security
Hybrid agent/agentless cloud security module inside CrowdStrike's Falcon platform, pairing posture management with endpoint-grade runtime detection.
Datadog Cloud Security Management
Cloud security module embedded in Datadog's observability platform, correlating posture, identity risk, and workload telemetry via a shared…
ConductorOne
ConductorOne (rebranded C1) is an AI-native identity governance platform that manages access and entitlements for human, non-human, and…
Sysdig
Cloud and container runtime security platform built around the open-source Falco detection engine, correlating runtime signals with cloud…
Upwind Security
A cloud-native application protection platform that layers runtime context onto traditional CNAPP capabilities to prioritize and stop real…
Orca Security
Agentless cloud security platform built on patented SideScanning technology, an early co-pioneer of the agentless CNAPP category alongside…
Cast AI
Automates Kubernetes cost optimization and security posture management, continuously right-sizing and hardening clusters without manual tuning.
Sweet Security
Israeli startup providing runtime-based cloud detection and response (CADR) plus AI agent security, layered on top of traditional…
Tamnoon
A hybrid human-plus-AI managed service that remediates cloud security findings from tools like Wiz and Prisma Cloud instead…
AppOmni
SaaS security posture management platform that finds misconfigurations and excess access across Salesforce, Microsoft 365 and other enterprise…
Hypori
Reston, VA-based virtual mobile infrastructure vendor delivering a cloud-hosted, isolated Android workspace for secure BYOD in government and…
iboss
Boston-based Zero Trust SASE vendor consolidating secure web gateway, CASB, SD-WAN, and browser isolation into a single cloud…
Copperhelm
Agentic cloud security platform where AI agents monitor cloud environments, investigate threats, and perform autonomous remediation with engineer-level…
Eaglys
Eaglys builds homomorphic-encryption and confidential-computing infrastructure that lets Japanese enterprises analyze sensitive data without ever decrypting it.
Oligo Security
Runtime application detection and response (ADR) that inspects live open-source library and function behavior to catch exploitable threats…
Stream.Security
Cloud detection and response platform built around a continuously updated model of the production environment, called a cloud…
Theom
Agentless platform that maps sensitive cloud data, identity access, and AI usage to show which data-risk findings actually…
Native Security
An Israeli-US startup building a cloud security control plane that operationalizes AWS, Azure, GCP, and OCI's own native…
Palo Alto Networks Prisma Cloud
Code-to-runtime CNAPP from Palo Alto Networks, built through acquisitions and now being merged into the AI-driven Cortex Cloud…
Uptycs
AI-native CNAPP unifying CSPM, CWPP, CIEM, and XDR on a single eBPF-based telemetry and data model, agentless plus…
Sweet Security
Runtime-first cloud and AI security platform that unifies cloud detection and response with application and AI workload protection.
Averlon
AI-powered cloud exposure and attack-path management platform that identifies critical, exploitable exposures and autonomously triages, analyzes, and generates…
Anjuna Security
A confidential computing company that lets enterprises run sensitive workloads and AI models inside hardware-based secure enclaves without…
Permiso Security
Permiso Security is an identity-centric cloud detection and response (CDR) platform, founded by former FireEye/Mandiant executives, that tracks…
RAD Security
eBPF-driven, agentic-AI cloud and Kubernetes runtime detection and posture platform, rebranded from KSOC in 2024.
Orca Security
Agentless cloud security platform that reads workload block storage via cloud APIs to find risks across infrastructure, identities…
Aikido Security
Unified developer-first security platform covering code, cloud and runtime, with automated AI pentesting.
Skyhigh Security
Security service edge (SSE) and CASB vendor spun out of McAfee Enterprise in 2022, protecting data and access…
Blast Security
Tel Aviv startup building a preemptive cloud defense platform that compiles security policy into guardrails to block risky…
Cloud Storage Security
Cloud Storage Security provides multi-engine malware scanning and data security posture management for cloud object storage, protecting Amazon…
Edera
Edera builds a lightweight Type 1 hypervisor that gives each container or AI workload true virtual-machine-grade isolation inside…
Edgeless Systems
A German confidential-computing company whose open-source Constellation platform runtime-encrypts entire Kubernetes clusters using hardware trusted execution environments.
CoreStack
AI-driven multi-cloud governance platform unifying cloud security posture management, application security, FinOps, and CloudOps under one console.
ARMO
Tel Aviv-based cloud-native security vendor and creator of Kubescape, a CNCF open-source Kubernetes security scanner, offering a commercial…
Trend Micro (Trend Vision One – Cloud Security)
A veteran Japanese security vendor whose Trend Vision One platform bundles cloud posture management, workload, and container protection…
Lacework (FortiCNAPP, a Fortinet company)
Once an $8B-plus unicorn built on behavioral cloud anomaly detection, Lacework is now Fortinet's CNAPP (branded FortiCNAPP) after…
Skyhawk Security
Cloud detection and response vendor using simulated 'digital twin' attack modeling to prioritize which cloud vulnerabilities are actually…
enclaive
Berlin-based confidential computing startup whose multi-cloud platform provisions hardware-isolated trusted execution environments across cloud providers without requiring code…
Gomboc.AI
New York-based cloud security startup applying deterministic AI, not generative-AI guesswork, to auto-remediate cloud misconfigurations at scale, aiming…
Material Security
Material Security protects Google Workspace and Microsoft 365 environments by hardening email, files, and account access after the…
Aqua Security
Cloud-native application protection vendor and steward of the widely used open-source Trivy scanner, covering build-to-runtime security.
Aqua Security
Container and Kubernetes-native cloud security pioneer combining commercial CNAPP tooling with the widely used open-source Trivy scanner.
Sangfor Technologies
Chinese publicly traded vendor delivering cloud security, network security, and managed detection and response, with especially strong footprint…
Stacklet
Cloud governance-as-code platform, built by the creators of the open-source Cloud Custodian project, that codifies and automates security,…
Red Hat Advanced Cluster Security (StackRox)
Red Hat's commercial Kubernetes-native container and cloud-security platform, built on the open-sourced StackRox project acquired in 2021.
Wing Security
Wing Security provides an automated SaaS Security Posture Management (SSPM) platform that discovers shadow SaaS and AI apps,…
Cisco Panoptica
Panoptica is Cisco's cloud-native application protection platform (CNAPP), covering code and build security, IaC and CSPM, API security,…
CoreView
CoreView provides a SaaS management and governance platform specifically for Microsoft 365 and its surrounding SaaS ecosystem, helping…
Atlantic.Net
Atlantic.Net is a three-decade-old, privately held cloud and hosting provider best known for HIPAA/HITRUST-compliant infrastructure, now extending that…
Red Access
A Series A Tel Aviv agentless browser-security vendor backed by Norwest, S Ventures, and Singtel Innov8.
Inforcer
A London multi-tenant Microsoft 365 management and security platform for MSPs, with a Series C.
Lookout
Mobile and cloud security vendor combining endpoint threat defense, mobile EDR, and security service edge (SSE) capabilities to…
ManagedMethods
K-12-focused cloud security platform providing API-based visibility into Google Workspace and Microsoft 365 for cybersecurity, data safety, and…
DoControl
A New York-based SaaS data access governance platform, backed in part by CrowdStrike's Falcon Fund, that automates discovery…
CYSEC
CYSEC builds ARCA Trusted OS, a confidential-computing platform that protects containerized workloads and data-in-use for critical infrastructure, defense,…
Vorlon
Vorlon provides agentless visibility into SaaS-to-SaaS data flows, secrets exposure, and posture risk across an organization's third-party SaaS…
ClearDATA
ClearDATA provides cloud security posture management and managed compliance services purpose-built for healthcare organizations running on AWS, Azure,…
AccuKnox
AccuKnox is a zero-trust Cloud Native Application Protection Platform (CNAPP) securing containers, Kubernetes, and cloud workloads from build…
Nightfall AI
Nightfall AI is a data loss prevention platform rebuilt for cloud SaaS, generative AI tools, and endpoints, using…
Symmetry Systems
Symmetry Systems maps the relationships between every identity, data object, and AI agent across an organization's cloud environment…
Nudge Security
Nudge Security discovers SaaS, AI tools, and cloud accounts across a distributed workforce and layers identity governance and…
Formal
Formal is a programmable reverse proxy that sits in front of databases and infrastructure, parsing 15+ wire protocols…
Plerion
Sydney-based CNAPP consolidating CSPM, CIEM, workload scanning, DSPM, and cloud detection and response into one platform, backed by…
Ericom
Cloud security division of Cradlepoint (owned by Ericsson) offering a remote-browser-isolation-based Security Service Edge platform covering SWG, CASB,…
Deepfence
Cloud-native application protection platform (CNAPP) built around the open-source ThreatMapper scanner and its commercial ThreatStryker runtime protection layer.
Valence Security
Valence Security is a SaaS security posture management platform that discovers and remediates misconfigurations, risky OAuth integrations, and…
Opal Security
Opal Security is an AI-native access management platform that automates least-privilege enforcement across cloud infrastructure, SaaS apps, and…
Zluri
Zluri is an identity governance and administration platform, built on its IRIS risk-scoring engine, that discovers and governs…
Afi
Afi provides cloud-native backup and data protection for Google Workspace, Microsoft 365, Kubernetes, AWS, and Azure, delivering cyber-resilient…
Nirmata
Nirmata builds an AI-assisted Kubernetes governance and security platform on top of Kyverno, the Kubernetes-native policy engine its…
Stealthium
Stealthium extends cloud security down to the GPU layer, monitoring VRAM, kernels, and CUDA execution to catch threats…
Circumvent
AI-driven cloud security platform that correlates alerts across existing tools to cut alert fatigue and surface validated, human-verified…
Qualys TotalCloud
Public vulnerability-management incumbent's CNAPP, unifying agentless cloud scanning with its long-standing Cloud Agent and TruRisk platform.
BetterCloud
SaaS management and security posture platform automating access lifecycle and policy enforcement across an organization's cloud application portfolio,…
Sonrai Security
Cloud identity and data governance platform that maps identities, permissions and data access paths across AWS, Azure and…
Sonet.io
Sonet.io is a San Jose-based startup delivering browser-based, agentless zero trust application access for distributed and remote workforces.
Indent
Indent is a lightweight, Slack-native just-in-time access management platform that automates time-bound, least-privilege access requests and approvals for…
Plexicus
Plexicus is a European AI-native application security posture management platform that auto-generates fix pull requests for vulnerabilities across…
Caution
Cayman Islands-based Y Combinator startup building a verifiable compute platform that cryptographically proves production code matches its reviewed…
Spyderbat
Cloud-native runtime security platform using eBPF to trace process, network and identity activity across Linux VMs and Kubernetes.
YourSix
Cloud-native physical security platform unifying video surveillance, access control, audio and sensors under a single cloud-managed operating system.
Rapid7 InsightCloudSec
Agentless, real-time multi-cloud CSPM/CIEM/KSPM platform from public vendor Rapid7, built on its 2020 acquisition of DivvyCloud.
Doppler
Doppler is a centralized secrets management platform that lets engineering, DevOps, and security teams sync API keys and…
Aryon Security
A Tel Aviv preventive cloud-security startup claiming up to 95% CSPM alert reduction, built by Project Nimbus security…
Surf AI
A 2024-founded Tel Aviv agentic security-operations startup already selling to Fortune 500 customers.
KTrust
A Tel Aviv startup that automatically red-teams Kubernetes environments, simulating real attack paths to find exploitable exposures instead…
Mitigant
Potsdam-based platform that emulates real adversarial attacks against cloud and Kubernetes environments to validate security controls with evidence.
Symmetrium
A Tel Aviv startup streaming an encrypted virtual mobile workspace to keep corporate data off personal devices.
Check Point CloudGuard
Cloud security suite from veteran network-security vendor Check Point, bundling CNAPP posture management, WAF and multi-cloud network protection.
TerraZone
An Israeli seed-stage ZTNA vendor focused on micro-segmentation, with strategic backing from WHEN Group.
Pvotal Technologies
Pvotal Technologies combines infrastructure management, cybersecurity consulting, and AI-driven agents to help organizations run cloud and hybrid infrastructure…
Kloudle
Self-hosted cloud security posture management scanner built for developers, running entirely on the customer's own infrastructure rather than…
Secberus
Miami-based cloud security posture management (CSPM) vendor offering a risk-driven, policy-as-code platform for multi-cloud compliance.
Matano
Matano is a Y Combinator-backed, open-source cloud-native SIEM built as a zero-ops security data lake deployed directly inside…
Valarian
A London sovereign infrastructure control layer for governments and enterprises seeking independence from US hyperscalers.
CloudQuery
A New York cloud asset-inventory company that merged with env0 to combine real-time visibility with IaC governance.
ZeroPath
ZeroPath is a Y Combinator-backed developer tool that autonomously detects, verifies, and submits pull-request fixes for code vulnerabilities…
Antigen
Antigen is a Y Combinator-backed continuous offensive security platform that runs nightly automated attack simulations against an organization's…
GhostEye
GhostEye is a Y Combinator-backed continuous red-team service that simulates real-world social-engineering attacks — help-desk vishing, deepfaked executive…
Dawnguard
Dawnguard builds an AI-native security-architecture-as-code platform that lets engineering teams design, validate, and continuously enforce secure cloud architecture…
Fairwinds
Fairwinds provides managed Kubernetes services and open-source governance tooling (Polaris, Goldilocks) that enforce security and resource policies on…
Detexian
Melbourne-based SaaS security posture management startup helping mid-market organizations find shadow IT and SaaS misconfigurations.
Perimeters.io
A multi-tenant SaaS security platform for MSPs, acquired by WatchGuard after becoming a customer.
Native
A Seattle multi-cloud security control plane with former Google Cloud CISO Phil Venables on its board.
MetCloud
Birmingham-based sovereign cloud provider pairing UK-hosted private cloud infrastructure with built-in cyber defense, targeting public-sector and defense customers.
Andromeda Security
Andromeda Security is an AI-powered identity security platform that uses behavioral analysis to automate permission right-sizing and lifecycle…
Tatum Security
A Seoul-based CNAPP vendor bundling cloud posture, workload, and entitlement management for Korean banks and public-sector agencies.
PanIAM Cloud
A Luxembourg startup offering an agentless, EU-hosted CNAPP that maps cloud attack paths and ranks fixes by risk…
Astralas
A Sydney-area cloud-security architecture and IAM consultancy (60+ advisors) acquired by Bastion Security Group.
TrustLayer
A UK cloud security vendor (rebranded from CensorNet) bundling secure web gateway, email security, SaaS posture management, and…
Cyscale
Cyscale is a European cloud security posture management (CSPM) vendor built around a graph-based model of cloud assets,…
Corgea
Corgea is a Y Combinator-backed AI SAST platform that finds and auto-fixes application vulnerabilities with a stated focus…
Trustle
Trustle is a just-in-time cloud access platform that lets security teams enforce least privilege and zero standing privileges…
Common Fate
Common Fate is an Australian identity-security startup giving cloud-native teams just-in-time, policy-as-code access to AWS and GCP via…
env0
A Boston infrastructure-as-code governance company that merged with CloudQuery to add cloud-asset discovery.
Cavirin Systems
Cloud security posture management platform that continuously assesses hybrid cloud and container configurations against compliance benchmarks like CIS,…
SecureSky
Omaha, Nebraska-based managed cloud security provider specializing in Microsoft Sentinel/Defender deployment, CSPM/SSPM, and 24x7 managed detection and response…
Cloudanix
Cloudanix is a Y Combinator-backed CNAPP that combines cloud posture management, code security, workload protection, and just-in-time access…
Caveonix
Virginia-based vendor offering hybrid multicloud vulnerability and misconfiguration management, now a small, steady niche player.
Syrix Security
A Tel Aviv pre-seed startup building continuous SaaS security posture enforcement focused on Microsoft 365 environments.