Threat & Vulnerability Management
Threat intelligence, vulnerability assessment, exposure validation, and advanced persistent threat detection.
22 companies ranked by Innovation Matrix score.
Unknown Cyber Inc.
Malware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Pentera
Automated security validation platform that safely runs real attack techniques against production environments to prove which exposures are…
Reality Defender
Deepfake and synthetic media detection company offering real-time detection across voice, video, image, and text for enterprises and…
CrowdStrike
Publicly traded endpoint and cloud security leader whose Falcon Exposure Management module extends its platform into AI-driven vulnerability…
Recorded Future
Threat intelligence platform aggregating open, dark web, and technical sources into real-time risk scoring; acquired by Mastercard in…
Mandiant (Google Cloud)
Incident-response and threat-intelligence firm founded by Kevin Mandia, acquired by Google Cloud in 2022 for $5.4 billion.
GreyNoise
'Anti-threat-intelligence' vendor that fingerprints internet-wide scanning traffic to help analysts filter out background internet noise from genuinely targeted…
ReversingLabs
Software supply chain security and binary analysis vendor that inspects compiled software and packages for malware and unauthorized…
Palo Alto Networks (Cortex Xpanse)
Global cybersecurity platform vendor whose Cortex Xpanse product performs continuous, agentless internet-wide external attack surface scanning.
Censys
Internet-wide asset and attack-surface intelligence platform spun out of University of Michigan research, indexing internet-connected devices and infrastructure…
Cymulate
Cloud-based breach and attack simulation (BAS) and exposure-validation platform that continuously tests security controls with simulated attack techniques.
Nucleus Security
Vulnerability and exposure management aggregation platform that unifies findings from over 200 scanning and asset-management tools into a…
Flashpoint
Threat intelligence firm specializing in deep and dark web collection, providing risk intelligence on cybercrime, fraud, and physical…
SafeBreach
One of the earliest breach and attack simulation vendors, continuously executing attack playbooks to validate security controls without…
Tenable
Publicly traded vulnerability management pioneer behind the Nessus scanner and the Tenable One exposure management platform.
XM Cyber
Attack path management pioneer that continuously maps how an attacker could realistically chain misconfigurations and vulnerabilities to reach…
Bishop Fox
Large private offensive-security services firm whose Cosmos platform combines continuous automated attack surface testing with human-led penetration testing.
Group-IB
Threat intelligence and cybercrime investigation firm originally founded in Moscow, now headquartered in Singapore following its 2019 relocation.
Intezer
Malware analysis vendor using 'genetic' code-reuse comparison to classify threats and link samples to known families based on…
Qualys
One of the original cloud-delivered vulnerability management and compliance scanning vendors, publicly traded since 2012.
Rapid7
Publicly traded vulnerability management and detection vendor combining InsightVM scanning with Metasploit-derived offensive research.