Security Operations
SIEM, detection and response, incident response, forensics, offensive testing, and SOC management.
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
7AI
7AI, founded by Cybereason's former CEO and CTO, deploys autonomous AI agents that triage, investigate, and correlate security…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…
Sublime Security
Programmable, AI-agent-assisted email security platform with open detection rules.
Artemis Security
A New York AI-native SOC platform correlating identity, network and cloud signals into attack narratives, already counting Wix…
Abnormal AI
Behavioral AI email and collaboration security platform that detects business email compromise and phishing by modeling normal user…
Microsoft Sentinel
Microsoft's cloud-native SIEM, deeply integrated with Azure and Microsoft 365 telemetry, now layering agentic AI (Security Copilot/Sentinel agents)…
Google Security Operations
Google's cloud-scale SIEM/SOAR (formerly Chronicle), unifying a petabyte-scale data lake with Mandiant frontline threat intelligence and Gemini-powered investigation.
Tines
No-code security automation platform letting SOC teams build and share automated workflows ('Stories') without proprietary scripting or vendor…
Lumu Technologies
Network detection and response vendor using Continuous Compromise Assessment to show where compromise has actually happened, integrating with…
BlinkOps
Agentic security automation platform combining a deterministic workflow engine with AI-driven "micro-agents" to automate SOC tasks and reduce…
Torq
AI-driven security operations platform built on hyperautomation and AI agents for alert triage and response.
ReliaQuest
ReliaQuest operates GreyMatter, a security operations platform that unifies detection, investigation, and response across a customer's existing security…
Edge Delta
A telemetry pipeline and AI-agent observability platform that processes logs, metrics, and security data at the edge to…
Sophos
Sophos is a UK-founded, Thoma Bravo-owned cybersecurity vendor unifying endpoint protection, network firewalls, and managed detection and response…
Anvilogic
Palo Alto-based AI security operations platform that automates SOC detection engineering across existing SIEMs and data lakes without…
Arctic Wolf
Managed detection and response provider delivering a 24/7 human 'Concierge Security Team' as a de facto outsourced SOC…
ManageEngine (Zoho Corp)
IT management division of bootstrapped software giant Zoho, offering SIEM (Log360), privileged access management (PAM360), and broader security…
Blackpoint Cyber
Managed detection and response (MDR) platform built by former NSA operatives, delivered exclusively through managed service providers and…
UltraViolet Cyber
A practitioner-led managed security provider blending offensive and defensive operations, from AI-augmented pentesting to 24x7 SOC monitoring, under…
Coro
All-in-one, modular cybersecurity platform purpose-built to make enterprise-grade protection affordable and simple for SMBs.
DataBahn
Agentic data pipeline platform that automates collection, optimization, and governance of security, observability, and OT telemetry.
Ontinue
Ontinue delivers 24/7 Managed Extended Detection and Response built specifically to maximize the value of an organization's existing…
Elastic
Elastic is a publicly traded search-data platform company whose Elastic Security product line delivers a free-and-open SIEM and…
Mimic
Ransomware-focused defense startup using deception and automated real-time containment to stop encryption before it spreads, backed by GV…
RADICL
A Boulder, Colorado-based cybersecurity-as-a-service provider built specifically for small and mid-sized Defense Industrial Base contractors, combining managed detection…
Devo
Devo is a Cambridge, Massachusetts-based cloud-native security data platform combining SIEM, SOAR, and UEBA to help large security…
Huntress
Managed detection and response platform purpose-built for small and midsize businesses, delivered primarily through managed service providers rather…
Replica Cyber
Provides instant, hardware-isolated 'secure enclave' workspaces so analysts can investigate malware, threat intel, and fraud without touching the…
LevelBlue
Managed security services provider spun off from AT&T Cybersecurity in 2024, majority-owned by WillJam Ventures, describing itself as…
eSentire
Waterloo, Canada-based MDR pioneer protecting 2,000+ organizations with a Controlled Autonomy operating model pairing agentic AI and human…
Guardz
Miami and Tel Aviv-based AI-native cybersecurity platform purpose-built for MSPs to protect their small and mid-sized business clients.
CardinalOps
Detection posture management platform that continuously assesses and closes coverage gaps in SIEM/XDR detection rules.
Cyware
Cyber fusion platform combining threat intelligence, security automation (SOAR), and case management into one unified workflow.
Mitiga
Cloud and SaaS-native detection and response platform founded by cloud incident responders, covering CDR, SaaS, identity, and AI…
Bitdefender
Bootstrapped, Romania-founded endpoint protection and XDR vendor whose GravityZone platform has repeatedly posted top-tier results in independent MITRE…
Tracebit
London-based cloud-native deception technology startup that deploys tailored canaries across AWS, Azure, Kubernetes, CI/CD pipelines, and identity providers…
Securonix
Securonix is a cloud-native SIEM and UEBA vendor, backed by over $1 billion from Vista Equity Partners, built…
Maltego
A Munich-based OSINT and graphical link analysis platform used by security teams, financial institutions, and law enforcement to…
Panther Labs
Cloud-native SIEM that runs on Snowflake or Databricks, keeping security data in infrastructure customers already own, with 200+…
BlueVoyant
Managed detection and response and third-party cyber risk management provider that monitors client networks and vendor ecosystems from…
Prophet Security
Agentic AI SOC platform that autonomously triages, investigates and responds to security alerts, expanding into AI-driven threat hunting…
Humanix
A San Francisco startup defending the 'human layer' with conversational AI that detects social-engineering and voice-impersonation attacks in…
Tenex
Sarasota-based AI-native managed detection and response provider pairing automated triage with human analyst oversight at sub-minute speed.
Corelight
Network detection platform built on the open-source Zeek framework, converting raw network traffic into structured 'network evidence' for…
Expel
Vendor-agnostic managed detection and response provider known for transparent, plain-language alert explanations layered on top of a customer's…
HackTheBox
Greece-founded cyber readiness platform with 4.3 million members, delivering hands-on labs and enterprise skills training for the agentic…
Cloud Range
Full-service, live-fire cyberattack simulation platform used to train and assess SOC and incident response teams.
StrikeReady
AI SOC platform using 'Composite AI' to investigate alerts across an entire security stack at flat-rate pricing, processing…
TrustedSec
TrustedSec is a CREST-accredited penetration testing, red team, and incident response consultancy founded by David Kennedy, creator of…
Vectra AI
AI-driven threat detection and response platform correlating attacker behavior across network, identity and cloud.
Sekoia.io
Paris-based cloud-native XDR and threat intelligence platform aiming to bring SOC-grade detection and response to organizations without large…
Thinkst Applied Research
Deception technology and honeypot maker behind Thinkst Canary and the free Canarytokens project, bootstrapped to roughly $20 million…
Eye Security
Eye Security is a Netherlands-based managed detection and response provider that bundles 24/7 MDR, incident response, and threat…
Cribl
Cribl builds a vendor-neutral telemetry data pipeline that lets security operations teams collect, route, reduce, and enrich log…
Legion Security
Legion Security is a browser-native, agentic AI platform that observes human SOC analysts' investigations and automates their workflows,…
Corma
Corma is building what it calls the first foundation model purpose-built for defensive cybersecurity — rather than selling…
Arize
Arize is a San Francisco-based AI observability company whose platform automatically monitors, troubleshoots, and improves the performance of…
Mate
Mate is an AI-native SOC platform where reasoning agents investigate every security alert autonomously, aiming to cut manual…
Mate Security
Tel Aviv startup from ex-Wiz and Microsoft Defender leaders building a memory-based AI agent platform meant to replace…
Vectra AI
CISO ReviewedNetwork detection and response platform using AI ('Attack Signal Intelligence') to identify attacker behavior across hybrid cloud, identity,…
SentinelOne
AI-driven EDR/XDR vendor whose Singularity platform uses on-agent machine learning and automated storyline correlation for autonomous detection and…
Fable Security Inc.
AI-powered human risk management platform delivering real-time, personalized interventions to change risky employee behavior, not just train it.
Above Security
AI-agent-based insider risk platform that continuously monitors behavior across SaaS, endpoints, and identity systems to detect insider threats…
Pondurance
Pondurance delivers risk-based managed detection and response built specifically to give mid-market organizations enterprise-grade protection through a 24/7…
mnemonic
An Oslo-based managed detection and response provider serving major Nordic and European enterprises, recognized by Gartner as a…
CyCraft
A Taiwan-based AI-driven MDR/XDR vendor with repeated MITRE ATT&CK Evaluation participation, recently listed on the Taiwan Stock Exchange…
Binary Defense
Binary Defense provides managed detection and response (MDR) and SOC-as-a-service through a vendor-agnostic Managed Open XDR model, founded…
AiStrike
A seed-stage AI-native SOC platform unifying threat intelligence, detection engineering, investigation, and response.
Humanix Security
AI platform monitoring live phone, chat, and help-desk conversations in real time to catch social engineering attacks.
SimSpace
An Orlando cyber range vendor with Cyber Command and MIT Lincoln Lab roots, replicating customers' real environments for…
Seceon
AI/ML-driven threat detection and response platform built specifically for MSSPs and mid-market security teams, unifying SIEM, XDR, and…
Immersive
A Bristol cyber-resilience platform with hands-on labs and crisis simulations, expanding into AI-agent readiness.
Cyderes
Human-led, machine-driven managed detection and response provider ranked among the top 25 MSSPs globally.
Stellar Cyber
Open XDR platform unifying detection across network, endpoint, cloud, and identity telemetry, built to work with a customer's…
Realm.Security
Realm Security is a SOC-aware data pipeline that lets security teams cut SIEM log volume and cost while…
Cyberbit
Cyber range and OT/IT detection-and-response vendor whose hands-on SOC training simulations were named a Forrester Wave Leader, now…
Qevlar AI
Paris-based agentic AI platform automating SOC alert investigation, with named enterprise and MSSP customers and roughly $30M raised…
Huntress
Managed security platform delivering EDR, identity threat detection and a human-led SOC aimed at small and mid-sized businesses…
Living Security
Living Security is an Austin-based human risk management platform that quantifies individual and organizational human cyber risk and…
Dtex Systems
San Jose-based insider risk management platform combining behavioral analytics and LLMs, backed by a $50M Series E led…
Deepwatch
A managed detection and response provider using a named-analyst "Squad" delivery model and deep Splunk-ecosystem ties, backed by…
LimaCharlie
Composable SecOps Cloud Platform providing open-API access to EDR sensors, telemetry, detection rules, and automation for security teams…
Command Zero
Austin-based AI investigation platform that automates SOC threat investigations using practitioner-built workflows combined with large language models.
TENEX.AI
TENEX.AI runs a fleet of coordinated AI agents for SOC triage, investigation, and response, deeply integrated with Google…
Quorum Cyber
An Edinburgh-based managed detection and response and professional services firm built around Microsoft security technologies, serving mid-market and…
Optiv
A large, pure-play cybersecurity solutions integrator and managed security services provider offering strategy consulting, MSSP/SOC services, identity, and…
Deloitte
Deloitte is one of the world's largest professional services firms, with a cybersecurity consulting and managed-services practice spanning…
Nightwing
A Blackstone-backed Raytheon cyber spin-out with SIGINT and space-domain roots serving government and defense.
Cynet
All-in-one XDR platform (Cynet 360) bundling endpoint, network, and deception technology with an included 24/7 MDR service, aimed…
Suzu Labs
A veteran-led boutique cybersecurity firm blending AI-driven threat discovery with human-led penetration testing, incident response, and AI risk…
Graylog
Houston-based, Hamburg-founded log management and SIEM platform serving 60,000+ organizations across 180 countries, born as an open-source project.
Blumira
Cloud-native SIEM and XDR platform designed to make enterprise-grade threat detection and response accessible to small and mid-size…
DataBee (a Comcast Company)
Cloud-native security and compliance data fabric from Comcast that ingests, normalizes, and correlates data for threat detection and…
Proficio
Proficio is a managed detection and response provider that has run outsourced SOC operations for mid-market and enterprise…
D3 Security
Vancouver-based SOAR pioneer whose Smart SOAR and newer Morpheus platform automate SOC alert triage and incident response for…
Kudelski Security
The cybersecurity division of Switzerland's publicly traded Kudelski Group, running a 24x7 Cyber Fusion Center and offering managed…
Tines
No-code workflow automation platform for security teams, used to automate SOC response and other operational processes.
Sekoia.io
European XDR-based SOC platform combining detection, automation and cyber threat intelligence.
Exaforce
Exaforce is a fast-funded agentic SOC startup combining a real-time security knowledge graph with AI agents called Exabots…
Riot
A Paris-based human risk management platform delivering continuous phishing simulation and chat-native security awareness training through Slack and…
Cyber Triage
Automated digital forensics and incident response software built by the original creators of The Sleuth Kit and Autopsy,…
LMNTRIX
Bootstrapped MDR/XDR provider whose Active Defense platform natively integrates deception technology and dark-web intelligence, recognized as an IDC…
Atomicorp
Atomicorp is a Virginia-based security operations vendor that builds commercial endpoint detection, intrusion detection, and file integrity monitoring…
Gravwell
A data-agnostic log fusion and analytics platform that lets security teams ingest and query any data type natively,…
Integrity360
A Dublin-headquartered, CREST-accredited managed security services provider running seven SOCs across Europe and Africa, formed in part through…
DefenseStorm
A cyber risk and compliance platform built exclusively for U.S. banks and credit unions, combining SIEM, 24x7 SOC…
NTT Communications Corporation
The global ICT arm of NTT, bundling managed security and SOC services into its worldwide network.
Radiant Security
A Series A AI SOC analyst platform automating triage, investigation, and response, backed by Next47.
Apate.AI
AI decoy bots that engage scam calls and texts in real time, wasting attacker time and harvesting fraud…
BigPanda
A Mountain View AIOps leader correlating and automating IT/security event triage to cut incident response time, now a…
AirMDR
Menlo Park startup from the founders of Sumo Logic and LogicHub building an AI-analyst-driven managed detection and response…
Red Canary (a Zscaler company)
MDR provider known for detection-engineering rigor and its open-source Atomic Red Team testing framework, acquired by Zscaler in…
Dropzone AI
An agentic 'AI SOC Analyst' that autonomously investigates security alerts end-to-end across a customer's existing tool stack and…
HWG Sababa
Italian cybersecurity group offering managed security, consulting, and OT/IoT services, formed from the 2023 merger of HWG and…
Sacumen
Product-engineering firm that builds integrations and connectors for cybersecurity vendors, helping SIEM, SOAR, and security tools interoperate faster.
Dune Security
New York-based platform that continuously scores and remediates human risk, using adaptive, real-time interventions instead of static training.
Coralogix
A Boston observability and security-data platform valued at $1.6B, serving IBM, Tradeweb, and JFrog.
Sevii
Agentic AI platform positioning itself around autonomous threat elimination rather than alerting, using AI agents to investigate and…
Sumo Logic
Cloud-native SIEM and log analytics platform, taken private by Francisco Partners in 2023, continuing to build AI-assisted detection…
Smarttech247
Cork, Ireland-based managed detection and response provider combining a 24/7 SOC with its VisionX platform, which integrates telemetry…
Metabase Q
A Mexico City-based cybersecurity platform, Batuta, delivering asset inventory, vulnerability management, and incident response for multinational organizations operating…
CyberOwl
London-based maritime cybersecurity specialist, now part of DNV, providing vessel cyber risk monitoring and managed security through its…
Fox-IT
Dutch cybersecurity operator based in Delft, providing incident response, digital forensics, threat intelligence, and managed detection services, operating…
CyFlare
CyFlare is a bootstrapped, Rochester NY-based MSSP delivering 24/7 tool-agnostic SOC-as-a-service through its Cyflare ONE platform for MSPs…
MSAB
A publicly-traded Stockholm-based mobile device forensics company whose XRY and XAMN product family extracts court-admissible evidence for law…
Becklar
Becklar operates 24/7 AI-assisted critical event monitoring centers — fire, security, video remote guarding, and IoT-connected device monitoring…
OpenText
A public information-management giant bundling Fortify, ArcSight, NetIQ, and Webroot under one security portfolio.
InnerActiv
Insider risk intelligence platform providing visibility, detection, and behavioral analysis to prevent and respond to insider threats.
Neon Cyber
Neon Cyber's Workforce Cybersecurity Platform protects employees directly inside the browser and SaaS apps against phishing, credential abuse,…
DigitalHands
Tampa-based managed security services provider delivering 24/7 SOC, MDR, and unified security posture management for mid-market clients.
Booz Allen
A public federal consulting firm that completed its Defy Security acquisition in April 2026 to push Vellox into…
Eventus Security
Navi Mumbai-based MSSP delivering managed SOC, threat intelligence, and cyber resilience services across India, Southeast Asia, and the…
GoSecure Inc.
Managed detection and response provider integrating endpoint, network, and email threat detection into its Titan platform for 24/7…
Corsica Technologies
Managed IT and cybersecurity services provider offering unlimited managed cyber security for a flat monthly fee.
Simbian
AI security operations platform pairing a 'TrustedLLM' reasoning engine with agents for SOC investigation, threat hunting, penetration testing,…
NRI SecureTechnologies
Tokyo-based managed security services and SOC operator, wholly owned by Nomura Research Institute, serving as one of Japan's…
Gyala
Italian automated cyber-defense vendor whose AGGER platform, developed with Italy's Ministry of Defense, provides continuous, autonomous threat detection…
Senseon
A London-based AI-driven detection and response platform that correlates network, endpoint, and cloud telemetry to automate SOC triage…
Axoflow
A security data pipeline startup, founded by syslog-ng's creator, that curates and routes telemetry before it hits the…
Surefire Cyber
Forgepoint Capital-backed incident response firm serving cyber insurers, brokers and law firms with AI-assisted ransomware, business email compromise…
NCC Group
Publicly traded UK cyber security consultancy providing penetration testing, incident response, and managed detection services alongside a long-standing…
Fluency Security
An AI-native, MCP-connected SIEM built around conversational investigation rather than fixed dashboards, aimed at MSSPs and lean security…
usecure
A Manchester, UK human risk management platform bundling security awareness training, phishing simulation, policy management, and dark-web monitoring,…
SIRP
A London-based SOAR platform that combines security orchestration, playbook automation, and risk-based vulnerability and threat intelligence management for…
SecurityHQ
Global, technology-agnostic MSSP delivering 24/7 managed detection and response from six SOCs across five continents.
ShadowDragon
An OSINT investigation platform (SocialNet, Horizon) that aggregates data from 550+ public sources for law enforcement, financial-crimes, and…
Advens
European managed detection and response provider running 24x7 SOC services, XDR, and OT/IoT security monitoring across France, Germany,…
NetWitness
Bedford, Massachusetts-based network forensics and threat detection platform, spun out as an independent company in 2023 after two…
Zip Security
New York-based cybersecurity automation platform that deploys and manages identity, device, and endpoint security controls for small and…
BMC AMI Security
Mainframe SIEM and security-event correlation product family from BMC, built on the zDefender technology BMC acquired with CorreLog…
Vijilan Security
Hallandale Beach, Florida-based 100% channel-exclusive SOC-as-a-service provider, delivering white-labeled 24/7 SIEM, MDR, and XDR monitoring exclusively through MSP,…
CloudSEK
CloudSEK provides AI-driven digital risk protection and threat intelligence — including external attack surface monitoring, dark web monitoring,…
Wazuh
Wazuh is an open-source security platform that unifies SIEM and XDR capabilities for endpoint and cloud workload monitoring,…
ServiceNow Security Operations
ServiceNow Security Operations is ServiceNow's workflow-driven product line for security incident response, vulnerability response, and threat intelligence, built…
CyberCX
CyberCX is Australia and New Zealand's largest independent cybersecurity services provider, operating nine SOCs and delivering incident response,…
Jericho Security Inc
A venture-backed security-awareness startup using generative AI for personalized phishing and deepfake simulations.
Kaseya
A Miami, PE-backed MSP software incumbent consolidating IT management and security (Datto, RocketCyber, ID Agent).
Tarsal
Y Combinator-backed security data pipeline that lets SOC teams route and normalize log data at scale without building…
Darktrace
Self-learning AI security platform that builds an unsupervised behavioral baseline of each customer's network and autonomously contains anomalous…
DeepTempo
A seed-stage San Francisco startup running a deep-learning log model natively inside Snowflake.
Splunk (a Cisco company)
Long-standing machine-data and log-analytics platform, now Cisco's security and observability backbone, powering SIEM and SOAR for a large…
Snowflake
A public data-cloud platform extending into security observability and AI-agent access governance via Observe and Natoma.
Keepnet Labs
Human risk management platform offering AI-powered phishing simulation across email, SMS, voice, and QR-code vectors plus security awareness…
Cognyte (Threat Intelligence Analytics)
Publicly traded security analytics provider whose Threat Intelligence Analytics platform helps SOC and investigation teams find and connect…
Monad
Kubernetes-native security data pipeline that ingests, normalizes, and routes data from security tools into SIEMs, data lakes, and…
Magnet Forensics
A widely deployed digital forensics and investigation platform used across federal law enforcement and major police departments, now…
ThreatSpike Labs
A London-based managed detection and response provider bundling unlimited fixed-cost penetration testing with continuous MDR, self-funded for over…
DataProtect
Casablanca-based MSSP operating Africa's first FIRST-certified private CSIRT alongside managed SOC, offensive security, and GRC services for Francophone…
Huntsman Security
An Australian defence-grade SIEM and security analytics platform serving government and enterprise customers since 1999.
Trellix
Extended detection and response (XDR) platform formed from the merger of McAfee Enterprise and FireEye, serving over 40,000…
Auguria
Auguria builds a Security Knowledge Layer that automatically filters security data to the small fraction relevant for SOC…
CounterCraft
Cyber deception platform building automated, scalable decoy environments to detect and study attackers, backed in part by In-Q-Tel…
Communication Valley Reply
ISO 27001-certified managed security operation center within Italy's Reply Group, specializing in 24/7 monitoring and financial-sector fraud and…
Fig Security
Detects silent breaks in security data pipelines -- from log sources through SIEM and SOAR -- so teams…
CultureAI
UK human risk management platform that uses behavioral telemetry to surface employee security risk and trigger real-time coaching,…
Galvanick
Passively deployed XDR platform purpose-built for operational technology and industrial control systems.
bfore.ai
bfore.ai (formerly BforeAI) provides predictive threat intelligence using its PreCrime platform, aiming to identify and disrupt phishing, impersonation,…
CYGNVS
CYGNVS is an out-of-band cyber crisis command center platform that coordinates incident response, legal, executive, and regulatory stakeholders…
SAFE Security
SAFE Security (formerly Lucideus) is an autonomous cyber risk management platform unifying cyber risk quantification, continuous threat exposure…
Databricks
A data-and-AI platform building a lakehouse-native security analytics stack via Panther Labs, Antimatter, SiftD, and Lakewatch.
Vega
A two-year-old Tel Aviv SecOps startup running detection in place instead of centralizing data in a SIEM, with…
FedTec
FedTec is a Reston, Virginia-based provider of digital transformation, cybersecurity, artificial intelligence, cloud, and infrastructure services to U.S.…
DIATEAM
French hybrid cyber-range developer providing simulated infrastructure for cyber defense training, testing, and incident response.
Console
A San Francisco AI-agent startup that automated IT help-desk tasks inside Slack, acquired by Palo Alto Networks for…
Canopy
Data-breach response software that finds and reviews personal data exposed in an incident; acquired by Epiq in September…
Hunters
A 'SOC platform' positioned as a SIEM alternative, built on a cloud data lake to decouple security-data storage…
Binalyze
Binalyze AIR is an automated digital forensics and incident response (DFIR) platform that collects forensically sound evidence at…
TekStream (Cybersecurity Services)
A digital resilience consultancy's dedicated cybersecurity practice offering managed detection and response, IAM, and GRC advisory for mid-market…
Gurucul
Security analytics veteran combining SIEM, UEBA, and identity analytics to detect insider threats and anomalous behavior across the…
Merlin Group
Federal cybersecurity solutions integrator and venture platform specializing in identity security, SOC modernization, and post-quantum readiness for U.S.…
Hitachi Cyber
Hitachi's managed security services and OT/IoT monitoring arm, formed from the 2022 merger of Hitachi Systems Security and…
ThreatConnect
A veteran threat intelligence and SOAR platform reportedly used by a third of the Fortune 50, acquired by…
Cyberfort Group
UK cybersecurity group formed by rolling up The Bunker, Arcturus, Agenci, and Auriga Consulting into a single end-to-end…
Nuix
ASX-listed Australian investigative analytics and eDiscovery software used by law enforcement, government, and legal teams to process and…
Socura
UK managed detection and response provider running Wales' national CymruSOC and CREST-accredited 24/7 threat containment for public-sector and…
Bridewell
UK-founded managed security services provider running 24/7 SOC, MDR, and compliance services, now merging with French MSSP I-TRACING…
Perseus
A Berlin-based cybersecurity-as-a-service provider that bundles prevention, risk assessment, and 24/7 incident response for small and mid-sized businesses,…
Pixm
Pixm uses computer vision to detect phishing pages by visual brand similarity in real time, rather than relying…
CyberOne
CyberOne is a UK managed detection and response and SOC-as-a-service provider, formerly known as Comtact, operating a Microsoft-verified…
CYREBRO
Israeli-founded cloud-based SOC-as-a-Platform provider (formerly CyberHat) delivering technology-agnostic managed detection and response to mid-market organizations.
ARIA Cybersecurity Solutions
The cybersecurity product division of publicly traded CSPi (NASDAQ: CSPI), providing internal network traffic visibility, AI-driven detection and…
5ironCyber
5ironCyber is a bootstrapped, Tennessee-based MSSP delivering 24/7 SOC monitoring and managed endpoint detection and response tailored specifically…
EST Security
EST Security is a Seoul-based endpoint security vendor behind ALYac, a widely deployed South Korean antivirus and EDR…
Seemplicity
Seemplicity is an agentic exposure management and remediation orchestration platform that connects security findings from scanning and detection…
SOCRadar
SOCRadar provides Extended Threat Intelligence (XTI), combining external attack surface management, dark web monitoring, digital risk protection, and…
Adlumin
Adlumin provides a cloud-native MDR, SIEM, and XDR platform aimed at mid-market organizations and MSPs, and became part…
Blackpanda
Blackpanda is Asia's leading local cyber incident response firm, pairing a tech-enabled digital forensics and incident response team…
AXA XL
AXA's specialty insurer agreeing in August 2026 to buy the remaining ~51% of cyber-risk consultancy S-RM.
Artemis
A New York AI-native SIEM-replacement platform that raised $70M in combined seed and Series A six months after…
Magna5
Magna5 is a Canonsburg, Pennsylvania-based managed IT and cybersecurity services provider founded in 2014, serving more than 1,700…
IBM
Diversified technology incumbent; its security portfolio and consulting acquisitions (including Logiq, September 2026) are tracked here.
SECUINFRA GmbH
A Berlin MDR and cyber defense center specialist focused on the DACH region for over 15 years.
Novacoast
Novacoast is a nearly 30-year-old managed security services provider offering 24/7 SOC monitoring, incident response, and custom security…
Bloom Security
A seed-stage Tel Aviv endpoint-security startup for AI agents and browser extensions on employee devices.
Skillable (Cybersecurity Skills Labs)
Virtual IT lab platform whose hands-on, browser-based lab environments are used to build and validate cybersecurity skills at…
Cofense
Phishing detection and response platform (formerly PhishMe) that combines employee-reported email simulation training with analyst- and AI-assisted triage…
Eviden
Atos Group's large-scale cybersecurity, cloud, and mission-critical systems division, running MDR via its AIsaac AI platform and one…
Cambridge Intelligence
A Cambridge, UK-based software vendor whose graph and timeline visualization SDKs (KeyLines, ReGraph, KronoGraph) help security analysts and…
Query.AI
Atlanta-based federated search platform, backed by Cisco Investments, that lets security teams query data across SIEMs, data lakes,…
Cipher (a Prosegur Company)
Managed detection and response provider backed by global physical-security firm Prosegur, offering a vendor-neutral xMDR platform layered on…
Logz.io
Open-source-based observability and cloud SIEM platform built on ELK, Prometheus, and Jaeger, unifying log management with security monitoring.
LupaSafe
A Dutch all-in-one cybersecurity awareness, phishing-simulation, and NIS2-compliance platform built for small and mid-sized businesses.
Certego
An Italian pure-play Managed Detection and Response provider running a 24/7 CSIRT and proprietary SOAR platform for European…
CyberMaxx
A Maryland-based managed detection and response provider that has grown through acquisition (CipherTechs, Corvid Cyberdefense, Cybersafe Solutions, onShore…
Virtual Guardian
Toronto-based MSSP offering 24/7 SOC monitoring, governance and compliance consulting, and API/application security under the unified Virtual Guardian…
Logpresso
Korean SIEM, SOAR, and DFIR platform with its own cyber threat intelligence feed, recently funded to expand cloud…
ORNA
ORNA is a Toronto-based SaaS platform that automates cyber incident response workflows, tabletop exercises, and SANS-based playbooks for…
CyberQ Group
UK-based MSSP delivering CREST-accredited SOC monitoring, penetration testing, and vCISO advisory services to mid-market organizations.
PureCyber
UK-based managed security services provider offering 24/7 SOC-as-a-service, MXDR, penetration testing, and incident response, with NCSC-recognized advisory and…
indevis
Munich-based managed security service provider running firewall, SD-WAN, and incident response operations for mid-market and regulated German enterprises.
Penfield.ai
Toronto-based process intelligence platform that monitors SOC analyst and AI agent workflows against standard operating procedures to catch…
Quadrant Information Security
Jacksonville-based MDR provider whose proprietary Sagan SIEM and IDS engine, backed by over 7,500 internally developed detection signatures,…
S-RM
S-RM is a global cyber security and corporate intelligence consultancy offering 24/7 incident response, managed cyber security services,…
GuidePoint Security
GuidePoint Security is a vendor-agnostic cybersecurity consulting, engineering, and managed services firm serving over 5,900 organizations, including more…
Guardsix (formerly Logpoint)
Guardsix, the March 2026 rebrand of European SIEM/SOAR vendor Logpoint, delivers a 'sovereign' security operations platform for lean…
Evolver
A 25-year-old Reston federal systems integrator with a $500M DOJ blanket purchase agreement.
Kenzo Security
A San Francisco agentic SecOps platform acquired by Rapid7 in March 2026 to power AI-driven MDR.
Xamin
Xamin is a Chicago-based managed services provider with more than 25 years of experience serving banks, credit unions,…
Logmanager
Logmanager develops a log management platform used to collect, analyze, and act on the digital records generated by…
Avertium
Avertium is a Knoxville-based managed security provider acquired by CyberMaxx to expand Microsoft-focused and mid-market security services.
InsiderSecurity
InsiderSecurity is a Singapore-based UEBA platform that detects insider threats and unauthorized access across cloud and on-premise infrastructure…
Nomios
European cybersecurity and network integrator and managed-security provider (formerly Infradata); acquirer of Orbcom in September 2026.
Exabeam
SIEM and UEBA vendor formed by the 2024 merger of Exabeam and LogRhythm, combining behavioral-analytics-driven detection with a…
Secureworks (a Sophos company)
Taegis XDR/MDR provider and Counter Threat Unit threat-intelligence team, now part of Sophos, together forming one of the…
Swimlane
SOAR platform (Turbine) that routes security alerts across deterministic automation, AI-assisted investigation, or fully agentic investigation paths depending…
Securitas
A global protective-services group that acquired SaaS OSINT platform Liferaft (USD 15.3M ARR) in March 2026.
Infotrust
An ASX-listed Australian cybersecurity practice (250+ professionals) that acquired Catalyst Cyber's federal team.
Abstract Security
A Palo Alto streaming-first security data platform founded by ArcSight, Mandiant, and Palo Alto Networks veterans.
AegisAI
A New York agentic anti-phishing and BEC startup founded by former Google security executives.
CyberTrap
Vienna-based deception technology vendor that plants realistic decoys across the network to lure and observe attackers who evade…
A2Secure
Barcelona-based MSSP and PCI DSS specialist offering co-managed SOC/MDR, CISO-as-a-service, and compliance advisory to mid-market and payments-sector clients.
Ayesa
Cybersecurity and SOC services unit of Ayesa, a major Spanish engineering group, combining IT and OT security delivery…
Sequretek
Mumbai-based cybersecurity company offering the Percept XDR and NG SIEM platform plus managed security services.
Phoenix Cyber
A Scottsdale-based cybersecurity services firm embedding senior security engineers into incident response, threat hunting, and SOC programs for…
WitFoo
An Atlanta-area security operations platform that correlates data from existing SIEM, EDR, and network tools into forensic-grade attack…
Defants
French DFIR startup building a collaborative, semantic incident-response and threat-hunting platform for resource-constrained security teams.
Own Security
Paris-based cybersecurity consultancy running outsourced CISO, threat intelligence, and managed SOC services for CAC40 and European enterprise clients.
Obrela
EMEA-focused managed detection and response provider that absorbed fellow Greek firm Encode in 2022 to become one of…
WaveStrong
Vendor-agnostic information security consulting and managed security services firm operating since 2001, offering risk assessment, MDR, and incident…
Cimcor
A veteran file integrity monitoring vendor whose CimTrak Integrity Suite detects and rolls back unauthorized system changes for…
Fact360
UK SaaS platform using AI and communications-network analysis to detect insider threats, fraud, and financial-crime compliance breaches in…
Alchemy Security
A Denver-based Splunk-focused MSSP offering 24/7 managed detection and response plus Lapis, a proprietary risk-maturity layer built on…
CyberProof
CyberProof, a UST company, delivers cloud-first, AI-powered managed extended detection and response (MXDR) and co-managed security operations, combining…
CriticalStart
CriticalStart (Critical Start) is a Plano, Texas-based managed detection and response provider built around its CORR platform and…
WithSecure
WithSecure is a Helsinki-based European cybersecurity company, spun out from F-Secure's consumer business in 2022, offering a co-managed…
UNDERDEFENSE Inc
A bootstrapped New York MDR provider whose MAXI platform unifies SOC, pentesting, incident response, and compliance.
Reply
A listed Italian digital-consulting group whose cyber boutiques Spike Reply and Communication Valley Reply serve large European enterprises.
Cyclops Security
A Tel Aviv GenAI security-search platform with 150+ integrations, reportedly acquired by Check Point for about $85M.
VigilAigent
A Las Vegas hybrid AI-plus-human MDR provider (formerly Tego Cyber, ~1,000 customers) acquired by Intrusion Inc.
Threatscape
Threatscape is a Dublin, Ireland-based cybersecurity consultancy offering managed security services (24/7 monitoring and protection), professional services (solution…
Herd Security
A San Francisco-based agentic AI platform that generates security awareness training and cross-channel phishing simulations directly from a…
Nava
A Crescera-backed Brazilian technology consultancy that added incident-response depth by acquiring Ventura ERM.
SPX Capital
A Sao Paulo asset manager combining Vision Cybersecurity and Tempest into a R$700M-revenue Brazilian cybersecurity platform.
Brier & Thorn
San Diego-based, ISO 27001-certified vendor-neutral MSSP offering managed detection and response, threat intelligence, and SecOps-as-a-Service across North and…
Defendify
All-in-one cybersecurity SaaS platform for small businesses, bundling vulnerability scanning, dark web monitoring, awareness training, and incident response…
Prolinx
UK-owned SME providing secure hosting, NOC/SOC, and managed cloud services to UK Ministry of Defence, police, and public-sector…
Knogin
Operational intelligence platform, branded Argus, consolidating investigations, incident response, and compliance workflows for government, defense, and critical-infrastructure operators.
Performanta
Performanta is a risk-based cybersecurity consultancy and managed security service provider with roots in South Africa and headquarters…
ADF Solutions
Digital forensic triage and media exploitation software used by military, law enforcement and border-security agencies to scan and…
Havoc Shield
An all-in-one, guided cybersecurity-as-a-service platform bundling vulnerability scanning, phishing training, endpoint management, and compliance tooling for small and…
Swiss Post Cybersecurity
Swiss managed detection and response, SOC and incident response provider formed by Swiss Post's 2024 merger of Hacknowledge…
Assuria
UK-built SIEM, log management, and managed security services provider for government, defense, and enterprise security operations centers.
Hurricane Labs
Hurricane Labs is a Splunk-focused managed security services provider delivering 24x7 SOC-as-a-service, Splunk management, and SOAR operations.
CYSIAM
UK-based 24/7 managed detection and response (MDR) and cyber threat intelligence provider serving defense, national security, and critical…
A3Sec
A3Sec is a Madrid-headquartered security operations provider running 24/7 SOCs across Spain and Latin America, offering exposure management,…
Panaseer
Panaseer is a UK-founded Continuous Controls Monitoring (CCM) platform that automatically aggregates data across an organization's existing security…
Netenrich
Netenrich is a San Jose-based security operations vendor whose Resolution Intelligence Cloud, built on Google SecOps, pushes toward…
IBM QRadar SIEM
IBM QRadar SIEM is IBM's long-standing security information and event management product line, providing centralized log correlation, threat…
Field Effect
Field Effect is an Ottawa-based managed detection and response provider built on proprietary technology and intelligence-community-derived tradecraft, offering…
Viettel Cyber Security
The cybersecurity arm of Viettel Group, offering SOC, threat intelligence, and red-team services in Vietnam and expanding regionally.
Ent
A seed-stage San Francisco intent-aware workspace security startup from RiskIQ's co-founders, with one of cybersecurity's largest seed rounds.
Embrace
A decade-old Y Combinator-backed real-user-monitoring company acquired by Palo Alto Networks in July 2026.
Fortra (Alert Logic MDR/XDR/WAF Bus.)
Alert Logic was Fortra’s managed detection and response (MDR), extended detection and response (XDR), and web application firewall…
Tenica
TENICA Global Solutions provides IT engineering and architecture, cyber defense, digital modernization, mission resilience, and acquisition support to…
Nine23
A 13-year-old UK sovereign MSP for government and defence customers, 80% acquired by Austability under NSI Act approval.
Hispasec Sistemas
A 27-year-old Malaga cybersecurity firm that created VirusTotal in 2004, acquired by MSSP consolidator ReeVo.
Beelzebub
Open-source-born AI honeypot framework that emulates systems to deceive, detect, and analyze attacker behavior at machine speed.
Tempest Security Intelligence
Tempest Security Intelligence is Brazil's largest cybersecurity firm, providing MSSP, MDR, incident response, and digital identity protection services…
Synqly
A San Jose startup providing a single unified API that lets security and IT vendors integrate with dozens…
STACK Cybersecurity
A two-decade Detroit-area MSSP with SOC 2 Type 2 and CMMC RPO status, acquired by IT Solutions in…
Cydelphi
Cydelphi is an AI-native digital forensics and incident response platform aiming to compress catastrophic breach recovery from months…
Nebulock
A Boston hunt-first, AI-native SecOps platform with Fortune 500 customers less than a year out of stealth.
Mesh Security
A SentinelOne-backed Palo Alto startup building a Cybersecurity Mesh Architecture execution layer, with a $12M Series A.
Bold Security
A Tel Aviv endpoint-security startup monitoring both employee and AI-tool activity, with Shutterfly and Tekion among its customers.
ado.security
A Copenhagen MDR and offensive-security specialist acquired by Bridgepoint-backed DataExpert in July 2026.
TechGuard Security
Woman-owned, government-focused managed cybersecurity services and DEFEND360 platform provider, founded in 2000 in direct response to federal critical…
Collective Defence
Newly combined managed-detection and collective-threat-sharing security firm formed from the February 2026 merger of MSSP ITC Secure and…
Lumifi Cybersecurity
Managed detection and response provider built through acquisition, combining the EventTracker SIEM with 24/7 SOC services after absorbing…
HORNE Cyber
HORNE Cyber is a Mississippi-based penetration testing, digital forensics, and managed security firm operating as a wholly owned…
Alert Logic
Managed detection and response (MDR, XDR, WAF) provider, historically based in Houston, that moved from Fortra to LevelBlue…
CyBourn
Managed detection and response provider running a global SOC and proprietary EtherLast XDR platform, headquartered in Washington, D.C.…
CyberForce|Q
CyberForce|Q runs a Collective Security Operations Center that pools threat intelligence across its client base, serving mid-market healthcare,…
Pinewood
Pinewood is a Dutch managed security services provider running a 24/7 Security Operations Center for Benelux organizations, alongside…
BitLyft Cybersecurity
BitLyft is a Michigan-based managed detection and response provider whose BitLyft AIR platform combines SIEM-as-a-service, SOC-as-a-service, and automated…
Cybriant
A managed detection and response (MDR) and managed SIEM provider giving small and mid-market organizations 24/7 security operations…
Aiuken Cybersecurity
Madrid-based MDR and managed security services provider founded in 2012, now operating within the Allurity European MSSP group.
CYFIRMA
CYFIRMA is a Singapore-headquartered external threat landscape management company, offering products spanning cyber threat intelligence (DeCYFIR), digital risk…
e2e-assure
e2e-assure is a UK-owned SOC-as-a-service provider delivering 24/7 threat detection and managed detection and response through its proprietary…
SolCyber
SolCyber is a modern managed security service provider (MSSP) backed by Forgepoint Capital, delivering a curated, streamlined stack…
Circle MSP
Circle MSP is a Southern California managed service provider delivering IT support, cloud, and cybersecurity services to small…
TPx
TPx is a national managed services provider delivering managed detection and response, managed firewall, SD-WAN/SASE, and unified communications,…
Stealth – ISS Group Inc.
An Arlington compliance and consulting firm with SDVOSB and WOSB certifications and over two decades of federal experience.
Jit
A Boston AI context-graph startup acquired by Torq for a reported $50M to underpin an Enterprise AI SOC…
Vision Cybersecurity
A January 2026 spin-off of ISH Tecnologia serving 4,600+ Brazilian private-sector clients, backed by up to R$400M from…
Japan Cyber Defense
A Tokyo-based cybersecurity firm that launched MIJXDR, a domestically built and hosted sovereign SOC/XDR platform aligned with Japan's…
Beazley Security
An insurer-backed MSSP formed from Lloyd's insurer Beazley's cyber unit and Lodestone, offering managed detection, response, and advisory…
EKCO
A Dublin PE-backed security-first MSP consolidating pentesting, OT, and infrastructure specialists across the UK and Ireland.
Markon
A Sterling-backed federal mission integrator that built threat-emulation and zero-trust capability via Millennium and PLEX.
Logicalis
A Datatec-owned global IT services provider that acquired Splunk and security partner Loial in August 2026.
Furl
A seed-stage Los Angeles startup using agentic AI to engineer and deploy vulnerability fixes end to end.
Scanner
A Sequoia-backed San Francisco security data lake with an MCP server that lets AI agents query log data.
BI.ZONE
A Sberbank-owned Russian cybersecurity subsidiary offering SOC/MDR, fraud prevention, and threat intelligence services.
Nucleon Security
French-built EDR and MDR vendor positioned around EU cybersecurity sovereignty, offering endpoint detection, AI-based malware analysis, and managed…
Halvik
A 600-employee, woman-owned federal IT and cybersecurity contractor acquired by Tetra Tech's Government Services Group for $210M.
Kubus
A UK-based managed IT and security services provider bundling converged infrastructure, network security, endpoint protection, and privileged access…
NFIR
Dutch incident response and digital forensics specialist offering 24/7 IR, managed detection and response, and independent forensic investigations.
SysTools Software
New Delhi-based data recovery and digital forensics vendor whose MailXaminer email forensics tool is used in law-enforcement and…
SIEMonster
SIEMonster is a small, self-funded vendor of a multi-tenant, white-label SIEM platform built specifically for MSSPs and lean…
Intrinsec
Three-decade-old French cybersecurity services firm offering ANSSI-qualified SOC, CERT incident response, threat intelligence, and IT/OT penetration testing as…
Infotex
A Lafayette, Indiana-based managed security service provider delivering SOC/SIEM monitoring and FFIEC-aligned compliance support built specifically for community…
OSForensics
Digital forensics and incident response toolkit from Australia's PassMark Software, used for disk imaging, file recovery, memory analysis…
Dectar
Dectar, formerly known as 4Securitas, builds ACSIA SOS, an extended detection, response, and remediation platform that unifies SIEM,…
Mondata
Cloud-based cybersecurity ecosystem (MD.ECO) for small and mid-size organizations, bundling managed detection and response, awareness, and governance/compliance support,…
SNS Security
Montpellier-based French MSSP running a 24/7 SOC, CERT incident response, and penetration testing for mid-market enterprises across France…
Clone Systems
Philadelphia-based managed security service provider offering SOC-as-a-service, managed SIEM/EDR, vulnerability scanning, and PCI ASV compliance scanning for mid-market…
OpenText ArcSight
Long-running enterprise SIEM and UEBA platform from OpenText’s Cybersecurity division, providing real-time correlation and behavioral threat detection for…
Salem Cyber
An early-stage AI analyst that automates first-pass investigation of the high-volume, low-priority alerts most SOCs cannot afford to…
Cyjax
Cyjax is a UK-founded cyber threat intelligence provider offering investigative analysis, payment fraud detection, and physical security intelligence…
PDI Security and Network Solutions (formerly Nuspire)
PDI Security and Network Solutions, the rebranded continuation of managed security services provider Nuspire, delivers 24/7 managed detection…
Flare Systems
Flare is a Montreal-founded identity-first cyber threat intelligence platform that continuously monitors the dark, deep, and clear web…
Conifers.ai
Conifers.ai builds CognitiveSOC, an agentic AI platform that automates threat intelligence, threat hunting, detection engineering, investigation, and remediation…
Waterleaf International
A self-funded Florida managed-security and CMMC/SOC 2 compliance provider serving municipal and DoD-contractor clients.
Tetra Tech
A NASDAQ-listed engineering firm building federal cyber capability through its Amyx (2023) and Halvik (2026) acquisitions.
Cylake
A seed-stage Sunnyvale agentic security platform for air-gapped and sovereign environments, founded by Palo Alto Networks' Nir Zuk…
Loyal IT
Loyal IT is a Round Rock/Austin, Texas-based managed IT services and cybersecurity provider founded in 2006, offering managed…
MicroAge
MicroAge is a Phoenix, Arizona-based full-service IT solutions integrator with roughly 50 years of history, serving about 2,400…
Advantus360
Advantus360 is a Calgary, Alberta-based cybersecurity consulting firm founded in 2015, providing security architecture and design, assessment, remediation,…
iSPIN
iSPIN AG is a Swiss cybersecurity consulting and managed services firm based in Bassersdorf, in business for over…
Unipath
A 2024-founded Tel Aviv agentic SOAR startup acquired by ControlUp for its Autonomous Endpoint Management roadmap.
Brite
A 43-year-old, MSSP Alert Top-250 managed security provider acquired as Sole Source Capital's first Fund III platform investment.
Alpha 2
A Chantilly, VA cryptographic and secure-communications engineering firm for space and intelligence systems, acquired by Aurex.
SafeHill
A threat-exposure-management vendor targeting AI-generated ‘vibe coded’ software, adding autonomous AI pentesting via its March 2026 acquisition of…
HacWare
A New York-based AI-driven security awareness and phishing simulation platform built for lean IT teams and MSPs.
Bastion Security Group
A Quadrant-backed New Zealand and Australian MSSP built by rolling up four security boutiques.
Advans Group
A French engineering services group adding cybersecurity consulting capacity through bolt-on deals including Coralium.
ControlUp
A digital-employee-experience vendor that acquired agentic SOAR startup Unipath in January 2026.
Littlefish
A two-time CRN MSP of the Year that built out CREST-accredited security operations by acquiring Stripe OLT.
Rilian
A seed-stage McLean, VA agentic command layer for sovereign, on-premises, and air-gapped defense environments.
Spectrum Security
A seed-stage San Francisco detection-engineering automation startup backed by Shlomo Kramer and Yishay Yovel.
Ridgewall
London-based managed IT and security provider offering SOC-as-a-service and vulnerability scanning to UK small and mid-sized businesses as…
Inspired eLearning
Inspired eLearning, now operating under VIPRE Security Group, provides security awareness training and phishing-simulation programs for enterprise compliance…
Ntirety
Ntirety, based in Austin, Texas, is a managed hosting and cloud infrastructure provider offering managed security, compliance, and…
Cybersift
A Malta-based managed security service provider offering SOC monitoring, penetration testing, and vulnerability scanning to SMEs, distributed largely…
Hook Security
Managed phishing simulation and security awareness training service for mid-market organizations that lack a dedicated in-house program to…
Blueshift Cybersecurity
Managed detection and response (MDR) and SOC-as-a-service provider focused on small and mid-sized businesses, integrating endpoint, cloud, network,…
Protexxa
Toronto-based platform using AI to score and manage human-driven cyber risk for businesses and employees, paired with cyber…
MAD Security
Huntsville, Alabama MSSP and CMMC Registered Provider Organization delivering 24/7 SOC, MDR, and compliance services to defense-industrial-base contractors.
Axon Technologies
Dubai-based managed security services and SOC platform provider delivering threat intelligence, incident response, and security testing for financial…
Ingalls Information Security
Louisiana-based managed extended detection and response provider with a dedicated government/DoD contractor practice, offering a patented data-visualization tool…
StreamScan
Montreal-based managed detection and response provider offering an open XDR platform (CDS) with a Canadian 24/7 SOC, serving…
Cyberhill Partners
An Austin security-implementation consultancy (1,000+ implementations) scaling a new enterprise-AI governance practice.
Loial
Loial is an Albuquerque-based cybersecurity and managed-services provider serving healthcare, energy, utilities, and government customers across New Mexico,…
Ventura ERM
A Sao Paulo incident-response and forensics specialist with a litigation-aware LGPD practice, acquired by Nava to form a…
Beyond Secure
A 1993-founded Austin security and compliance provider for community banks and credit unions, the founding acquisition of PE-backed…
Open Measures
A Brooklyn-based open-source-intelligence platform that tracks extremism, disinformation, and threat narratives across 45+ social and alternative platforms, acquired…
Presidio
A BC Partners-owned IT and security integrator consolidating regional firms such as Internetwork Engineering and Red Sky Solutions.
Cegeka
A family-owned Belgian IT-services firm building defense-sector cyber and IAM practices via 3Point and SecurIT.
NexusIT
A $60M-backed Salt Lake City MSP/MSSP rolling up Mountain West regional providers.
AEA Investors
A New York private equity firm that made a majority investment in 1,700-customer MSP Magna5 in February 2026.
McNally Capital
A Chicago private equity firm building a national-security portfolio, most recently TENICA Global Solutions in August 2026.
Capita
Large publicly traded UK outsourcing group whose managed security division runs 24/7 SOCs for public and private sector…
Kaspersky Lab
Moscow-founded endpoint protection and threat-research vendor banned from sale in the United States since 2024 under a Commerce…
HAWK.io
Dallas-based automated MDR provider using an AI-driven analytics engine (Octopus cAI) to compress SOC investigation and response time…
NPCore
Seoul-based APT and ransomware detection vendor whose ZombieZERO, RansomZERO, and XDR products serve Korean and broader Asia-Pacific public…
Trefle Solution
Trefle Solution is a Toulouse-based French MSSP running a 24/7 SOC and NIS2 compliance readiness services for public…
ThreatHunter.ai
Managed detection and response provider built around live, human-led threat hunting; a service-disabled veteran-owned small business formerly known…
Cyber Engineering Services (CyberESI)
A Baltimore-based Managed Detection and Response provider built around a patented Command and Control node detection platform, focused…
DarkInvader
DarkInvader is a UK external attack surface management and dark web intelligence platform, discovering exposed assets, monitoring for…
1stProtect
A seed-stage San Francisco OS-level runtime enforcement engine claiming sub-millisecond latency and under 1% CPU overhead.
Circadence
A 1995-founded cyber-range and readiness vendor ($189M raised) adding generative AI through RangeGPT and Project Ares GEN3.
Memetica
A Cambridge, MA OSINT consultancy founded by a former New York Times journalist, acquired by FGS Global in…
Acora
An LDC-backed UK IT and cyber services group that expanded globally by acquiring secure-data-transfer specialist HANDD in May…
ReeVo
An Italian MSSP expanding across Southern Europe by acquiring Security Lab Group and Hispasec in 2026.
NINJIO
A Los Angeles PE-backed security-awareness vendor broadening its offering via Dcoya and SafeStack.
Vanroey
A Belgian managed ICT provider that added Microsoft-centric MDR by acquiring The Collective.
Eurazeo
A listed French private equity firm that took a majority stake in forensics vendor Nextron Systems in 2026.
SiftD
A San Francisco agentic security-engineering startup founded by ex-Splunk engineers, folded into Databricks' Lakewatch SIEM.
SAS
The security analytics division of SAS Institute, applying the company's fraud and risk-modeling AI heritage to network and…
3Point
A roughly 20-person Belgian defense-sector security consultancy with a proprietary threat-monitoring service, acquired by Cegeka.
The Logic Group
A 20-year-old Philadelphia-area managed IT and security provider acquired by CompassMSP in July 2026.
Epiq
Global legal and business services provider with a cyber incident response practice; acquirer of Canopy in September 2026.
Cloud24x7
A Florida-based managed security services provider offering SOC-as-a-service, MDR, and threat intelligence built for MSPs serving small and…
BLOKWORX
Prevention-first managed security services provider offering 24/7 SOC-backed network, endpoint and cloud security for small and mid-sized businesses…
Barrier Networks
Barrier Networks is a Glasgow-based cybersecurity service provider offering managed SOC, incident response, penetration testing, and operational technology…
ScanSource
A NASDAQ-listed technology distributor extending into managed cybersecurity services through its $220.5M MicroAge acquisition.
Westcon Comstor
A global cybersecurity distributor that entered the Balkans by acquiring Slovenia's REAL Security in January 2026.
Defy Security
A vendor-neutral security integrator acquired by Booz Allen Hamilton in February 2026 to support its European commercial business.
Tharros
A ~400-employee federal cybersecurity and vulnerability-research firm (formerly ANALYGENCE) with fresh growth capital and a tuck-in acquisition strategy.
Nextron Systems
A well-regarded Frankfurt compromise-assessment vendor (THOR scanner) acquired by private equity firm Eurazeo.
DataExpert
A Bridgepoint-backed Dutch cybersecurity services consolidator that extended its Nordic footprint by acquiring ADO Security in July 2026.
Squad
A French IT and cybersecurity group (~EUR 135M revenue target) adding strategic GRC and IAM consulting through its…
Austability Group
A UK security group that took 80% of sovereign-capability firm Nine23 in a deal approved under the National…
Interactive
An Australian sovereign-cloud provider that acquired Thales's Australian managed cloud services business in May 2026.
Loom Security
Kansas-based startup building CINQUE, a persona-based platform correlating identity, device, network, app, and data risk signals.
Stripe OLT
A Bristol CREST-accredited managed security provider acquired by Littlefish Group in February 2026.
Security Centric
A Sydney cybersecurity consultancy with defence heritage, acquired by Virtual IT Group.
Alphabit Cybersecurity
An 18-year-old Athens cybersecurity consultancy specializing in EU regulatory alignment, in which Softweb acquired a 51% stake.
The 20
A serial MSP acquirer whose 49th deal, Sundance Networks in July 2026, extended its peer-group MSP network into…
Viatel
A Macquarie-backed Irish connectivity and infrastructure provider expanding its cyber pillar by acquiring cyber-resilience consultancy FullProxy in July…
Novem
A TDC-backed UK managed IT and cyber-resilience consolidator growing through regional tuck-ins, most recently Intalect.
inSOC
White-label SOC-as-a-Service platform built for MSPs and MSSPs to resell, combining an AI-assisted open-XDR stack with 24/7 human-staffed…
cyberconIQ
Behavioral-science-based human risk management platform that scores individual employee cyber risk and drives targeted coaching rather than generic…
Aves Netsec
Finnish deception-technology vendor whose PreSploit/Defused platform lures and observes attackers inside enterprise networks to generate high-fidelity, low-noise detections.
nGuard
Privately held managed security services provider offering penetration testing, vulnerability assessments, and managed security monitoring for mid-market organizations.
Stryve
An Irish cybersecurity and MSP firm that acquired BITS in June 2026, after earlier deals for Futuralis and…
EvolveCyber
EvolveCyber is a Melbourne, Australia-based managed cybersecurity services provider offering penetration testing, risk assessments, managed security services, and…
Woven Solutions
A Falfurrias-backed national-security engineering roll-up that closed its fourth acquisition, Insignis, in May 2026.
Brightline Technologies
A Michigan MSSP specializing in CMMC compliance for defense contractors, combining with fellow CMMC specialist Security Vitals in…
MW Group
A Swedish defense technology group that took a 60% stake in secure information-sharing specialist link22 in June 2026.
Alchemy Technology Group
A private-equity-backed Northeast IT advisory firm that added Zero Trust architecture expertise by acquiring IOvations in April 2026.
FGS Global
A global strategic communications firm launching an AI Advisory practice anchored by its acquisition of OSINT/threat-intelligence firm Memetica.
Aurex
A Godspeed Capital-backed defense engineering platform that acquired 12-year-old cryptographic engineering firm Alpha 2 to expand space-systems security…
Nuview
A 2025-formed, PE-backed managed IT and security platform created by merging four firms for regulated mid-market clients.
Sterling Investment Partners
A veteran private equity firm that acquired 1,800-customer MSSP Cyber Advisors in March 2026.
Virtual IT Group
A multi-region Australian MSP that added MDR and GRC capability by acquiring Security Centric.
Artilus
A Long Island K-12-focused MSSP acquired by Acture Solutions in March 2026.
Cyber Advisors
A nearly 30-year-old Minnesota MSSP (1,800+ customers) changing private-equity owners to Sterling Investment Partners in March 2026.
Advizex
A Cleveland-area hybrid infrastructure and security provider acquired by Myriad360 in a combination with a $900M annual run-rate.
ParseIntel
A small Dallas threat-intelligence collection specialist acquired by iCOUNTER.
SecureWare
A small, long-running Adelaide-based boutique MSSP offering penetration testing, incident response, and security operations consulting to the South…
Kinzit
A regional MSP serving healthcare, nonprofit, and construction clients, acquired by Net at Work in July 2026.
Secuvant
A managed-security platform vendor (Panoptic) acquired by Nasdaq-listed Cycurion for about $2.875M.
Katalyst
A regional managed IT and cybersecurity platform that expanded its 24/7 SOC and Microsoft delivery by acquiring Layer27…
SolarWinds
SolarWinds is an Austin-based IT management software vendor, now privately held under Turn/River Capital, whose Security Event Manager…
Range Security
A Florida-based managed security services provider offering perimeter, endpoint, and industrial control system security with shared-administration SOC support…
ELK Analytics
Florida-based managed SIEM and MDR provider running a 24/7 SOC on top of the Elastic Stack, recognized on…
CompassMSP
A PE-backed managed IT and cyber provider expanding into the Philadelphia/Tri-state market by acquiring The Logic Group in…
Satark AI
Satark AI is an early-stage Indian startup building an AI layer that correlates security alerts across SIEM, XDR,…
Acture Solutions
A 1984-founded Northeast MSP focused on K-12 and regulated industries, expanding via the Artilus acquisition.
Coralium
A small Paris boutique offering fractional CISO and IoT security consulting, absorbed by Advans Group in April 2026.
iON United
A 20-year-old Calgary IT, OT, and cloud MSSP that completed a management buyout in April 2026.
Insignis
A small women-owned national-security engineering firm acquired by Falfurrias-backed Woven Solutions.
LEO Cyber Security
A Dallas-based boutique cybersecurity advisory and MSSP offering incident response, threat hunting, forensics, and virtual CISO services.
Cienaga Systems
Small Florida-based startup offering APEX, an AI-driven network detection and response platform for mid-market enterprises and managed service…
Redhawk Federal Solutions
A private-equity-backed federal integrator adding cybersecurity and SETA capability for DARPA and the Air Force via its March…
Ascend Technologies
A PE-backed Midwest IT/compliance provider that acquired Xamin, a SOC 2-certified Chicago MSP with zero audit deviations since…
Net at Work
A PE-backed MSP roll-up adding cybersecurity services via Kinzit and Network Computer Solutions in 2026.
Softweb
An Athens Exchange-listed Greek software company that took a 51% stake in longtime partner Alphabit Cybersecurity.
Dotlines Global
A London-headquartered telecom, cybersecurity, and fintech group listed on AIM after a reverse-merger-style deal with Ikigai Ventures.
IronCircle
An AI-powered cybersecurity training platform acquired by QuickStart in February 2026.
Sundance Networks
A Pocono-region MSP with a growing AI-consulting practice, acquired by The 20 MSP as its 49th deal.
Tuearis Cyber
Texas-based managed detection and response provider building HIPAA-compliant SOC-as-a-service programs for mid-market healthcare, legal, finance, and SaaS organizations.
Security Lab
A Lugano cybersecurity firm acquired by ReeVo in February 2026, giving the Milan-based MSSP its first Swiss presence.
TrustBIX
A TSXV-listed Canadian company building a combined cybersecurity and MSP platform through its acquisitions of Zen Cyber and…
Pinnacle Technology Solutions
A North American IT/security services provider expanding its engineering talent and reach through its August 2026 acquisition of…
AffinityMSP
A fast-growing Australian MSP that added pentesting and ISO 27001 advisory by acquiring EvolveCyber.
NXO
A Fayat Group-owned French network and IT integrator that added about 40 cyber experts by acquiring Idna.
Sonio
A three-decade-old Swiss ICT and managed-services provider expanding regionally through its July 2026 acquisition of PCProfi Informatique.
Twenty8
A DoD SETA and data-interoperability contractor (~$8.1M prime revenue) acquired by Redhawk Federal Solutions in March 2026.
Heliaq
A newly independent French infrastructure group, spun out of Koesio, consolidating Dell- and Fortinet-aligned integrators in Ile-de-France through…
First Focus
An ANZ and Philippines managed-IT provider, itself being acquired by Integris, that added security and compliance via Optimus…
Netz Concepte
A North Hesse managed IT-security provider focused on healthcare and nursing, absorbed into GBC Group.
Fivenines
A profitable 16-person French and Moroccan MSSP (about EUR 6M revenue) acquired by Groupe Office Automation.
OneHQ
An established Auckland managed IT and cyber provider acquired by First Focus.
Bits
A 25-year-old Kilkenny managed services and security provider acquired by Irish MSP Stryve.
WetStone Labs
WetStone Labs makes Gargoyle Investigator and StegoHunt, specialist malware-discovery and steganography-detection tools for digital forensic examiners, now operating…
Talea S.r.l.
Regional Italian managed NOC/SOC services provider delivering outsourced 24/7 security operations and IT infrastructure support near Bologna.
Cyberfish
A Cheltenham gamified cyber-psychology training firm in which Trust Stamp took a 50% stake for GBP 190,000.
Ready Support Services
An intelligence-community ServiceNow and cloud-migration specialist acquired by Arlington Capital-backed Tyto Athene.
PCProfi Informatique
A 30-year-old Swiss regional ICT provider acquired by Sonio in July 2026.
GBC Group
A PE-backed German MSP consolidator that extended into the Bad Arolsen region by acquiring NetzConcepte.
Netum
A Nasdaq First North-listed Finnish digital-services company that added a strategic cybersecurity team by acquiring Cyberwatch Oy in…
Aldrich
A Pacific Northwest consulting group adding vCISO and security-engineering services for healthcare, finance, and higher-ed clients via its…
Groupe Office Automation (GOA)
French distributor of office equipment, IT hardware and digital software for SMEs; acquirer of cybersecurity firm Five Nines…
Intalect
A Leicestershire regional MSSP acquired by Novem as its fifth deal since 2023.
Thales Managed Cloud Services (Australia)
A tracking entry for the Australian managed cloud services unit Thales divested to Interactive in May 2026.
IT Solutions Technology Partners
North American managed IT and cybersecurity provider; acquirer of Detroit-area MSSP STACK Cybersecurity in September 2026.
Kaistos
A Paris-region Dell and Fortinet infrastructure integrator (about EUR 2M revenue) acquired by Heliaq in February 2026.
InfraVia Capital Partners
Paris growth-equity and infrastructure investment firm; took a majority stake in Nexis in September 2026.
Horizon Capital
A UK private equity firm's growth investment in Threatscape, a UK/Ireland pure-play cybersecurity consultancy, backing buy-and-build expansion.
Sole Source Capital
A private equity firm tracking entry: Sole Source Capital's first platform investment (Brite, a Top-250 MSSP) from its…