Security Operations
SIEM, detection and response, incident response, forensics, offensive testing, and SOC management.
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
7AI
7AI, founded by Cybereason's former CEO and CTO, deploys autonomous AI agents that triage, investigate, and correlate security…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Abnormal AI
Behavioral AI email and collaboration security platform that detects business email compromise and phishing by modeling normal user…
Artemis Security
A New York AI-native SOC platform correlating identity, network and cloud signals into attack narratives, already counting Wix…
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…
Sublime Security
Programmable, AI-agent-assisted email security platform with open detection rules.
Lumu Technologies
Network detection and response vendor using Continuous Compromise Assessment to show where compromise has actually happened, integrating with…
Google Security Operations
Google's cloud-scale SIEM/SOAR (formerly Chronicle), unifying a petabyte-scale data lake with Mandiant frontline threat intelligence and Gemini-powered investigation.
Edge Delta
A telemetry pipeline and AI-agent observability platform that processes logs, metrics, and security data at the edge to…
Anvilogic
Palo Alto-based AI security operations platform that automates SOC detection engineering across existing SIEMs and data lakes without…
Tines
No-code security automation platform letting SOC teams build and share automated workflows ('Stories') without proprietary scripting or vendor…
Torq
AI-driven security operations platform built on hyperautomation and AI agents for alert triage and response.
ReliaQuest
ReliaQuest operates GreyMatter, a security operations platform that unifies detection, investigation, and response across a customer's existing security…
Microsoft Sentinel
Microsoft's cloud-native SIEM, deeply integrated with Azure and Microsoft 365 telemetry, now layering agentic AI (Security Copilot/Sentinel agents)…
BlinkOps
Agentic security automation platform combining a deterministic workflow engine with AI-driven "micro-agents" to automate SOC tasks and reduce…
Sophos
Sophos is a UK-founded, Thoma Bravo-owned cybersecurity vendor unifying endpoint protection, network firewalls, and managed detection and response…
ManageEngine (Zoho Corp)
IT management division of bootstrapped software giant Zoho, offering SIEM (Log360), privileged access management (PAM360), and broader security…
Ontinue
Ontinue delivers 24/7 Managed Extended Detection and Response built specifically to maximize the value of an organization's existing…
Coro
All-in-one, modular cybersecurity platform purpose-built to make enterprise-grade protection affordable and simple for SMBs.
Elastic
Elastic is a publicly traded search-data platform company whose Elastic Security product line delivers a free-and-open SIEM and…
Blackpoint Cyber
Managed detection and response (MDR) platform built by former NSA operatives, delivered exclusively through managed service providers and…
Mimic
Ransomware-focused defense startup using deception and automated real-time containment to stop encryption before it spreads, backed by GV…