Cloud Security
Cloud security posture management, workload protection, and container/Kubernetes security.
Vorlon
Vorlon provides agentless visibility into SaaS-to-SaaS data flows, secrets exposure, and posture risk across an organization's third-party SaaS…
Zluri
Zluri is an identity governance and administration platform, built on its IRIS risk-scoring engine, that discovers and governs…
Stealthium
Stealthium extends cloud security down to the GPU layer, monitoring VRAM, kernels, and CUDA execution to catch threats…
Ericom
Cloud security division of Cradlepoint (owned by Ericsson) offering a remote-browser-isolation-based Security Service Edge platform covering SWG, CASB,…
Afi
Afi provides cloud-native backup and data protection for Google Workspace, Microsoft 365, Kubernetes, AWS, and Azure, delivering cyber-resilient…
Deepfence
Cloud-native application protection platform (CNAPP) built around the open-source ThreatMapper scanner and its commercial ThreatStryker runtime protection layer.
Opal Security
Opal Security is an AI-native access management platform that automates least-privilege enforcement across cloud infrastructure, SaaS apps, and…
Nirmata
Nirmata builds an AI-assisted Kubernetes governance and security platform on top of Kyverno, the Kubernetes-native policy engine its…
Plerion
Sydney-based CNAPP consolidating CSPM, CIEM, workload scanning, DSPM, and cloud detection and response into one platform, backed by…
Circumvent
AI-driven cloud security platform that correlates alerts across existing tools to cut alert fatigue and surface validated, human-verified…
Valence Security
Valence Security is a SaaS security posture management platform that discovers and remediates misconfigurations, risky OAuth integrations, and…
Caution
Cayman Islands-based Y Combinator startup building a verifiable compute platform that cryptographically proves production code matches its reviewed…
BetterCloud
SaaS management and security posture platform automating access lifecycle and policy enforcement across an organization's cloud application portfolio,…
Sonet.io
Sonet.io is a San Jose-based startup delivering browser-based, agentless zero trust application access for distributed and remote workforces.
Spyderbat
Cloud-native runtime security platform using eBPF to trace process, network and identity activity across Linux VMs and Kubernetes.
Qualys TotalCloud
Public vulnerability-management incumbent's CNAPP, unifying agentless cloud scanning with its long-standing Cloud Agent and TruRisk platform.
Sonrai Security
Cloud identity and data governance platform that maps identities, permissions and data access paths across AWS, Azure and…
Plexicus
Plexicus is a European AI-native application security posture management platform that auto-generates fix pull requests for vulnerabilities across…
YourSix
Cloud-native physical security platform unifying video surveillance, access control, audio and sensors under a single cloud-managed operating system.
Indent
Indent is a lightweight, Slack-native just-in-time access management platform that automates time-bound, least-privilege access requests and approvals for…
Doppler
Doppler is a centralized secrets management platform that lets engineering, DevOps, and security teams sync API keys and…
Surf AI
A 2024-founded Tel Aviv agentic security-operations startup already selling to Fortune 500 customers.
Rapid7 InsightCloudSec
Agentless, real-time multi-cloud CSPM/CIEM/KSPM platform from public vendor Rapid7, built on its 2020 acquisition of DivvyCloud.
Mitigant
Potsdam-based platform that emulates real adversarial attacks against cloud and Kubernetes environments to validate security controls with evidence.