Threat & Vulnerability Management
Threat intelligence, vulnerability assessment, exposure validation, and advanced persistent threat detection.
Unknown Cyber Inc.
CISO ReviewedMalware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Airlock Digital
Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.
Cogent Security
Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.
Reality Defender
Deepfake and synthetic media detection company offering real-time detection across voice, video, image, and text for enterprises and…
Pentera
Automated security validation platform that safely runs real attack techniques against production environments to prove which exposures are…
ReversingLabs
Software supply chain security and binary analysis vendor that inspects compiled software and packages for malware and unauthorized…
Horizon3.ai
Autonomous penetration testing platform (NodeZero) that safely exploits environments to find and verify real attack paths.
Strider
A DataTribe-backed DC firm tracking nation-state talent-recruitment programs, IP theft, and supply-chain infiltration — a strategic-risk category conventional…
Vannevar Labs
A Palo Alto defense-AI company processing foreign-language and open-source intelligence under a $40M DoD contract, alongside peers like…
Horizon3.ai
A San Francisco company whose NodeZero platform runs continuous, autonomous penetration tests at machine speed for over 6,500…
Nucleus Security
Vulnerability and exposure management aggregation platform that unifies findings from over 200 scanning and asset-management tools into a…
Binarly
Firmware and software supply chain security company whose Transparency Platform has uncovered dozens of high-severity UEFI vulnerabilities, including…
Filigran
Filigran develops the open-source-rooted OpenCTI threat intelligence platform and OpenBAS breach and attack simulation tool, unified into a…
CrowdStrike
Publicly traded endpoint and cloud security leader whose Falcon Exposure Management module extends its platform into AI-driven vulnerability…
Adaptiva
Peer-to-peer autonomous endpoint management platform that patches and manages software across massive enterprise fleets without dedicated infrastructure per…
ANY.RUN
Interactive, cloud-based malware analysis sandbox that lets analysts observe and interact with live malware execution in real time.
Arkose Labs
Unified bot management and fraud prevention platform that undermines the financial incentives behind fraud, protecting against account takeover,…
Blackbird.AI
Narrative and perception risk intelligence platform that identifies and helps mitigate disinformation and narrative-attack campaigns targeting brands, executives,…
Cobalt
Pentest as a Service platform connecting organizations with a vetted global network of security researchers for on-demand testing.
ThreatFabric
ThreatFabric is an Amsterdam-based mobile threat intelligence and fraud detection company whose SDK and research team track banking…
Recorded Future
Threat intelligence platform aggregating open, dark web, and technical sources into real-time risk scoring; acquired by Mastercard in…
Mandiant (Google Cloud)
Incident-response and threat-intelligence firm founded by Kevin Mandia, acquired by Google Cloud in 2022 for $5.4 billion.
GreyNoise
'Anti-threat-intelligence' vendor that fingerprints internet-wide scanning traffic to help analysts filter out background internet noise from genuinely targeted…
Tanium
A converged endpoint management (XEM) platform delivering real-time visibility, patching, vulnerability management, and digital experience monitoring at scale.
Cyble
AI-powered threat intelligence platform providing dark web monitoring and digital risk footprint mapping for enterprises.
Theori
Theori is an offensive security research firm, founded by former CTF champions, that productizes its vulnerability-hunting expertise into…
SafeBreach
One of the earliest breach and attack simulation vendors, continuously executing attack playbooks to validate security controls without…
Tanium
Real-time endpoint visibility and control platform spanning patching, exposure management and security operations.
Remedio
Israeli startup automating safe, large-scale remediation of unpatched vulnerabilities and misconfigurations rather than just detecting them.
Ridge Security Technology
Maker of RidgeBot, an AI-driven autonomous penetration testing platform that continuously validates exploitable vulnerabilities instead of a one-time…
Nagomi Security
Nagomi unifies fragmented security tool data to show CISOs which threats their existing stack actually stops, and where…
Eclypsium
Portland-based firmware and hardware supply-chain security platform continuously monitoring device integrity from laptops to servers.
Bolster AI
AI-powered digital risk protection platform (including CheckPhish) that detects and takes down phishing sites, fake mobile apps, and…
TuxCare
Extended lifecycle Linux and open source patching, including live kernel patching without reboots, keeping unsupported systems covered against…
MazeBolt
Continuous, non-disruptive DDoS vulnerability testing platform (RADAR) that identifies exploitable gaps in DDoS defenses on live production environments.
Veriti (now part of Check Point)
Exposure management that safely remediates vulnerabilities and control gaps, formerly an independent Israeli startup, now rebranded as Check…
Action1
Houston-based cloud-native patch management and RMM platform, free for organizations under 200 endpoints, founded by the team behind…
VulnCheck
Well-funded exploit intelligence platform that tracks which vulnerabilities are actually being exploited in the wild, helping teams prioritize…
IOActive
IOActive is a Seattle-based penetration testing and security research firm known for original vulnerability research into satellites, ATMs,…
Vali Cyber
A Charlottesville, Virginia startup building ZeroLock, a VMware-certified runtime security platform that protects ESXi and Linux hypervisors from…
Intel 471
A cyber threat intelligence provider built around human analysts with law enforcement and intelligence backgrounds, tracking cybercriminal actors…
VicOne
VicOne, a Trend Micro venture, builds automotive and connected-vehicle cybersecurity software used by OEMs and Tier-1 suppliers to…
Terra Security
Terra Security runs coordinated swarms of AI agents that continuously and autonomously validate an organization's attack surface through…
HeroDevs
A Utah-based vendor that keeps end-of-life open-source software (AngularJS, Bootstrap, etc.) patched with a 14-day CVE SLA after…
Censys
Internet-wide asset and attack-surface intelligence platform spun out of University of Michigan research, indexing internet-connected devices and infrastructure…
Flashpoint
Threat intelligence firm specializing in deep and dark web collection, providing risk intelligence on cybercrime, fraud, and physical…
HackerOne
Crowdsourced security platform connecting organizations with independent researchers for bug bounty and vulnerability disclosure programs.
Brinqa
AI-driven exposure management platform that unifies vulnerability and risk data across infrastructure, cloud, and applications.
Dataminr (Cyber Risk)
Real-time AI platform that detects early signals of cyber threats and high-impact events from over a million public…
Morphisec
Prevention-first endpoint security vendor using Automated Moving Target Defense to stop ransomware and memory-based exploits at the point…
Reclaim Security
An Israeli startup building an AI-driven remediation engine that identifies security exposures and simulates the operational impact of…
Team Cymru
Global network telemetry and threat intelligence provider whose Total Insights Feed scores tens of millions of IPs daily,…
A Security
Autonomous offensive security platform that continuously validates which attack paths are exploitable before AI-driven attackers can chain them.
Malwarebytes
The two-decade incumbent anti-malware and endpoint remediation vendor with tens of millions of users, now under private equity…
Stairwell
A Palo Alto threat-hunting platform built by Chronicle's former CSO, continuously indexing every file for retroactive 'ground truth'…
Cymulate
Cloud-based breach and attack simulation (BAS) and exposure-validation platform that continuously tests security controls with simulated attack techniques.
HCL Software (BigFix)
HCLSoftware's AI-driven endpoint management and patch remediation platform for large, heterogeneous device fleets.
BreachLock
Hybrid AI-plus-human Penetration-Testing-as-a-Service platform delivering continuous, on-demand security testing.
Sprocket Security
Continuous penetration testing service pairing human offensive-security experts with a platform for always-on attack surface testing, rather than…
Reach Security
Reach Security is an AI-native security controls operating system that finds and fixes misconfigurations across an organization's existing…
RunSybil
AI-native continuous penetration testing platform built around an autonomous offensive security agent, backed by a $40M Khosla Ventures-led…
Zafran
Exposure management platform that validates which vulnerabilities are actually exploitable given deployed security controls, to cut remediation noise.
SimSpace
An Orlando cyber range vendor with Cyber Command and MIT Lincoln Lab roots, replicating customers' real environments for…
Palo Alto Networks (Cortex Xpanse)
Global cybersecurity platform vendor whose Cortex Xpanse product performs continuous, agentless internet-wide external attack surface scanning.
NetRise
An Austin binary-level firmware and software supply-chain security specialist acquired by Accenture in 2026.
Bishop Fox
Large private offensive-security services firm whose Cosmos platform combines continuous automated attack surface testing with human-led penetration testing.
Silent Push
Threat intelligence platform using its Indicators of Future Attack (IOFA) technology to spot malicious infrastructure before it is…
Spektion
Continuous runtime exposure management platform that filters tens of thousands of vulnerability findings down to what is actually…
Red Sentry
Red Sentry combines human-led penetration testing with a Penetration-Testing-as-a-Service platform to uncover business-logic flaws and chained vulnerabilities that…
Karamba Security
Karamba Security provides embedded runtime protection and vulnerability management for automotive, industrial IoT, and enterprise-edge devices, backed by…
Picus Security
Security validation platform that continuously simulates real adversary techniques mapped to MITRE ATT&CK to test whether an organization's…
Assured Information Security
A Rome, New York-based cyber R&D firm doing vulnerability research, hypervisor/cross-domain security, and applied cyber capability development under…
Mondoo
Mondoo builds an agentic vulnerability and exposure management platform that continuously scans cloud, on-prem, SaaS, and endpoint environments…
Q6 Cyber
Dark web and cybercrime intelligence vendor that gives banks and credit unions early warning of compromised cards and…
Vicarius
A vulnerability remediation platform whose flagship product vRx combines vulnerability assessment with automated patching capabilities (including patches for…
Nightwing
A Blackstone-backed Raytheon cyber spin-out with SIGINT and space-domain roots serving government and defense.
TRM Labs
A San Francisco blockchain-intelligence unicorn that doubled its valuation to $2B through a Series C extension.
Liferaft
Liferaft (operated by Social Navigator Inc.) is a Halifax, Canada-based provider of SaaS open-source intelligence (OSINT) threat solutions,…
Dux
Agentic exposure management platform using AI workers to determine which vulnerabilities are truly exploitable and mitigate them faster…
Finite State
A Columbus, Ohio firm using binary-level firmware analysis to catch undocumented vulnerabilities in IoT, medical device, and industrial…
Xeol
Y Combinator-backed platform that finds and remediates end-of-life, unmaintained open-source components that traditional vulnerability scanners miss.
Tenable
Publicly traded vulnerability management pioneer behind the Nessus scanner and the Tenable One exposure management platform.
XM Cyber
Attack path management pioneer that continuously maps how an attacker could realistically chain misconfigurations and vulnerabilities to reach…
Group-IB
Threat intelligence and cybercrime investigation firm originally founded in Moscow, now headquartered in Singapore following its 2019 relocation.
Syxsense (an Absolute Security company)
Unified endpoint and vulnerability management combining patch management, security scanning, and real-time remediation, now integrated into Absolute Security.
Nisos
Nisos is a managed intelligence firm that investigates platform abuse, supply-chain integrity issues, and nation-state-level threats using human…
Anomali
Threat intelligence platform aggregating and correlating intel feeds with SIEM, XDR, UEBA, and SOAR capabilities to give SOC…
Searchlight Cyber
A UK-based dark web intelligence company that monitors marketplaces, forums, and leak sites to give enterprises, MSSPs, and…
Outpost24
Unified vulnerability management, attack surface management, and threat intelligence platform from Sweden, expanding via acquisition into device-trust and…
AttackIQ
Breach and attack simulation platform that continuously validates security controls against MITRE ATT&CK-aligned adversary techniques in production environments.
aDolus
aDolus's FACT Platform reverse-analyzes software binaries and firmware to generate SBOMs and flag vulnerabilities and malware in OT,…
HarfangLab
A Paris-based, ANSSI-certified endpoint detection and response vendor founded by former French Navy and cybersecurity-agency personnel, positioned as…
EclecticIQ
EclecticIQ is an Amsterdam-based Cyber Threat Intelligence Platform vendor, backed by Series C funding and a European Investment…
Root
A Boston AI vulnerability-patching startup (originally Slim.AI) acquired by Aikido Security for an estimated $70M-$100M.
AISLE
San Francisco startup building an AI-native 'Cyber Reasoning System' that autonomously discovers, remediates and verifies software vulnerabilities end…
Osavul
Luxembourg-based AI platform used by NATO and governments to detect hybrid threats spanning cyber, physical, and disinformation domains.
Strike
Latin America-founded continuous penetration testing platform combining AI-driven attack simulation with a network of ethical hackers.
Intezer
Malware analysis vendor using 'genetic' code-reuse comparison to classify threats and link samples to known families based on…
ThreatMon
An AI-driven cyber threat intelligence platform combining attack surface, dark web, fraud, and supply chain intelligence into one…
NetBrain (Security Validation)
NetBrain's map-driven network automation platform now includes continuous security control validation, checking that firewall rules, segmentation, and CVE…
ESET
Bratislava-founded endpoint security veteran offering antivirus, EDR, XDR, and threat intelligence with roots in the original NOD antivirus…
CodeHunter
Automated malware analysis platform that models what software is programmed to do to uncover evasive, obfuscated malware at…
Silobreaker
London-headquartered threat intelligence and OSINT analytics platform used by government, defense, and financial-sector customers to correlate open-source and…
Hudson Rock
Turns data harvested from infostealer malware logs into searchable threat intelligence via its Cavalier platform, detecting compromised credentials…
CyViation
CyViation is an aviation-focused cybersecurity company, spun out of Israel Aerospace Industries, whose SkyRay platform uses digital-twin technology…
VMRay
German malware and phishing sandbox that uses hypervisor-level monitoring instead of in-guest agents, aimed at SOC teams and…
Tuskira
AI-powered security mesh from the founders of Accurics (acquired by Tenable) that unifies data across 150+ existing security…
Automox
Automox is a cloud-native patch and endpoint hardening platform that automates OS and third-party software updates, configuration enforcement,…
PCA Cyber Security
Embedded and automotive product security firm combining penetration testing with continuous vehicle and product security operations monitoring.
RedWolf Security
Waterloo, Ontario-based threat simulation vendor that runs production-traffic DDoS and insider-threat testing against firewalls, WAFs, IDS/IPS, and SOC…
FAZE Security
Israeli offensive-security platform using autonomous AI agent swarms for continuous breach-and-attack simulation and pentesting.
Novee
AI-driven continuous penetration testing platform that simulates real attacker tactics to find business-logic flaws.
Bolster
A Santa Clara AI-driven brand protection company (formerly RedMarlin) that detects and automatically takes down phishing sites, fake…
RapidFort
A Sunnyvale software-supply-chain security company that closed a $42M Series A and claims 60-90% attack-surface reduction.
Devicie
Sydney-based platform that automates Intune-native device configuration, patching and security baselines aligned to CIS benchmarks.
Interpres Security
Threat exposure management platform mapping defensive controls against real adversary capabilities to prioritize what actually reduces risk.
SecPod
Bootstrapped vendor behind the Saner Platform, unifying vulnerability, exposure, and compliance management with automated remediation across endpoints and…
DirectDefense
Denver-based security services firm specializing in penetration testing, ICS/SCADA security, and managed detection for critical infrastructure.
BrandShield
AI-powered digital risk protection platform that detects and takes down phishing sites, fake domains, and brand impersonation.
QuellSecure
QuellSecure's Active Containment technology monitors encryption behavior in real time to stop ransomware after only a handful of…
Kandji
An Apple-only device management platform, now valued at $850 million, that has expanded from MDM into built-in EDR…
Cyberwatch
French vulnerability and compliance management platform, now part of Framatome's cybersecurity division, offering agentless, agent-based, and air-gapped scanning…
DomainTools
Long-established DNS and domain threat intelligence platform built on one of the industry's largest passive DNS databases, now…
SCYTHE
Adversarial exposure validation platform that continuously emulates real-world attacker tradecraft mapped to MITRE ATT&CK to test whether security…
GLIMPS
Rennes-based, Ministry of Armed Forces-founded startup applying AI-driven binary code analysis to detect zero-day and evasive malware, incubated…
Lynx Software Technologies
San Jose-based maker of the LynxSecure separation-kernel hypervisor and MOSA.ic software platform, used to build secure, isolated, safety-certifiable…
Kaseya
A Miami, PE-backed MSP software incumbent consolidating IT management and security (Datto, RocketCyber, ID Agent).
Hackuity
A Lyon-based vulnerability operations platform that aggregates data from 130+ security tools to prioritize and coordinate remediation of…
PeakMetrics
A Series A Los Angeles narrative-intelligence platform detecting coordinated disinformation and media manipulation.
Qualys
One of the original cloud-delivered vulnerability management and compliance scanning vendors, publicly traded since 2012.
Canary Trap Inc.
Boutique Canadian offensive-security firm delivering penetration testing and cybersecurity advisory services.
PlexTrac
A Boise, Idaho-based continuous threat exposure management platform that aggregates pentest, red-team, and vulnerability-scan findings into a single…
ThreatBook
A Beijing-based threat intelligence and detection vendor, and the only Chinese company recognized in Gartner's threat intelligence market…
ITrust
A Toulouse-based, Iliad Group-backed vendor combining vulnerability management (IKare) and AI-driven SIEM/XDR (Reveelium) into a fully French-hosted, data-sovereign…
Strike
A Uruguay-based continuous penetration testing platform, founded by Santiago Rosenblatt, combining AI-driven execution with expert human validation to…
NETSCOUT
A four-decade, NASDAQ-listed network-visibility and DDoS-defense incumbent (Arbor, Omnis).
Spur Intelligence
A Florida IP-intelligence vendor detecting VPN, proxy, and AI-bot traffic, with strong retention and a large new round.
Vega
A two-year-old Tel Aviv SecOps startup running detection in place instead of centralizing data in a SIEM, with…
MDSec
A roughly 65-person UK offensive-security consultancy being acquired by Bank of America, expected to close in Q4 2026.
Acalvio Technologies
Dynamic deception platform that cloaks production assets and lays evolving honeypaths to disrupt lateral movement.
QuoIntelligence
QuoIntelligence combines an AI platform with human analysts to deliver contextualized threat, geopolitical, and supply-chain risk intelligence for…
Bynario
Milan-based startup whose AI validates which software vulnerabilities are actually exploitable, cutting through CVE noise.
Agger Labs
UK endpoint security vendor whose signature-less agent detects and kills active ransomware encryption in milliseconds, independently of cloud…
Hive Pro
Continuous threat exposure management platform, Uni5 Xposure, that unifies asset, vulnerability, and threat-intel data with built-in breach-and-attack simulation.
ThreatQuotient
A decade-plus threat intelligence platform vendor, acquired by Securonix in 2025.
Ivanti
Unified endpoint management and IT/security vendor whose VPN and edge products suffered a string of high-severity exploited vulnerabilities…
OnSecurity
A CREST-accredited UK penetration-testing-as-a-service platform that bootstrapped to 400+ customers before taking its first outside funding round in…
SOC Prime
Threat detection content marketplace built on the open Sigma rule format, delivering MITRE ATT&CK-mapped detections translated across 28+…
Onit Security
Israeli exposure management startup founded in 2025 whose AI agents investigate, prioritize, and remediate vulnerabilities based on business…
Keysight (Ixia Network Security Test)
Breach and attack simulation and network security testing product line (Ixia BreakingPoint, Threat Simulator) within Keysight, letting organizations…
Invary
Invary is a Kansas-based startup building runtime integrity verification for Linux and Windows kernels using technology exclusively licensed…
Escape
A Paris-based API and application security testing platform, founded by Tristan Kalos and Antoine Carossio, using AI agents…
Intelligent Waves
A Reston, VA defense integrator with in-house autonomous pentesting (SHADOW) and zero trust (GRAYPATH) products.
Kusari
Software supply chain security platform that builds a live dependency graph to show which vulnerabilities are actually reachable…
Zenyard
Tel Aviv startup whose AI agent analyzes full software binaries to verify third-party code safety and patch known…
Rezilion
Vulnerability management platform that uses runtime reachability analysis and a dynamic SBOM to prioritize which open-source CVEs actually…
StealthMole
A Singapore-based AI-powered dark web threat intelligence company serving government and enterprise clients across 17 countries.
Rapid7
Publicly traded vulnerability management and detection vendor combining InsightVM scanning with Metasploit-derived offensive research.
StrongestLayer
Early-stage email security startup using LLM-based reasoning to assess the intent behind a message, aimed at catching AI-generated…
Threatray
Swiss malware code-search and binary intelligence platform, spun off from Bern University of Applied Sciences, that indexes over…
Webroot
Cloud-based endpoint protection and DNS filtering vendor, now part of OpenText Cybersecurity, built around a lightweight agent and…
Resecurity
Los Angeles-based threat intelligence and digital risk protection platform combining CTI feeds, dark web monitoring, external attack surface…
Smart Protection
Smart Protection is a Madrid-based, Series B-funded brand protection platform that uses AI to detect and take down…
Monarx
Monarx is a Salt Lake City company building AI-powered behavioral malware detection and remediation software for shared hosting,…
alphaMountain.ai
alphaMountain.ai is a Salt Lake City-based AI threat-intelligence vendor providing domain and IP reputation feeds, seed-funded and integrated…
HackNotice
Austin, Texas threat intelligence platform focused on human-centric exposure -- monitoring the dark web, breach dumps, and infostealer…
Tidal Cyber
A Virginia-based threat-informed defense platform, co-founded by three former MITRE ATT&CK leaders (Rick Gordon, Richard Struse, and Frank…
Empirical Security
A Chicago-based predictive exposure-management startup building AI models that forecast which vulnerabilities are actually likely to be exploited,…
SECAI
A Singapore AI threat-detection vendor with a threat-intelligence API and digital risk protection service.
Milou
Milou is an AI-first platform that orchestrates penetration-testing workflows end to end — centralizing raw scanner and tester…
Moonlock (by MacPaw)
Mac-specific antivirus and anti-malware product from Ukrainian software company MacPaw, complementing Apple's built-in protections against Mac-targeted threats.
Xcape
Continuous, automated penetration testing that adapts to constantly changing cloud infrastructure instead of the traditional annual point-in-time security…
Heimdal Security
Copenhagen-based, PE-backed vendor of a modular XDR-style suite combining DNS threat prevention, next-gen antivirus/EDR, and automated vulnerability patching.
McAfee
McAfee is the consumer-focused security brand left after the 2022 Trellix split, selling antivirus, VPN, and identity-protection subscriptions…
AppGuard
Kernel-level, isolation-based endpoint protection that blocks malicious process execution without relying on malware signatures or behavioral detection.
Qualysec Technologies
Qualysec Technologies is a CREST-accredited penetration testing firm based in India offering web, mobile, cloud, and IoT security…
HEAL Security
HEAL Security is a healthcare-focused cyber threat intelligence company that aggregates and analyzes breach, ransomware, and medical-device risk…
DarkOwl
Darknet intelligence provider that indexes dark web, deep web, and high-risk surface web content into a searchable database…
Simplesense
Simplesense's Installation Resilience Platform combines emergency situational awareness, breach and attack simulation, and MSSP services for defense and…
Senteon
Marietta, Georgia-based endpoint hardening platform that automates CIS Benchmark configuration and drift correction across workstations, servers, and browsers.
NopSec
A New York-based Cyber Threat Exposure Management (CTEM) platform, founded by white-hat hackers, that aggregates vulnerability data across…
Malanta
Pre-attack prevention platform built by former CyberArk executives that aims to disrupt attacker infrastructure before an intrusion begins.
Fleuret AI
Paris startup using two AI agents to run continuous, affordable penetration tests in place of one-off manual engagements.
Valiant Solutions
A 20-year federal cybersecurity specialist, Bluestone-backed, adding red-team capability via Abile Group and BreakPoint Labs.
PC Matic
PC Matic is a US-built endpoint security vendor for consumers and SMBs, combining malware/ransomware protection, phishing and scam…
Kratikal
Noida-based VAPT and phishing-simulation training provider that completed a BSE SME IPO in 2026 on the back of…
TriagingX
Malware sandbox and endpoint forensics vendor providing automated, real-time triage and zero-day protection for enterprise and government networks.
Hedgehog Security
CREST-accredited UK penetration testing and offensive security firm, part of UK Cyber Defence Group, offering infrastructure, web application,…
Enginsight
German all-in-one cybersecurity platform for SMEs combining vulnerability scanning, monitoring, and ISMS/compliance tooling, sold mainly through MSPs.
Celerium
El Segundo, California-based threat intelligence infrastructure provider whose CTI Router automates STIX/TAXII-based threat indicator sharing across ISAOs, alongside…
Ikarus Security Software
Austrian antivirus and content-security vendor operating since 1986, running its own in-house malware scan engine and data centers…
Holm Security
A Stockholm-based vulnerability management platform offering unified scanning across network, cloud, web application, API, and human/phishing-simulation attack surfaces,…
Greenbone
A German vulnerability management vendor and steward of the open-source OpenVAS scanning engine, operating as Greenbone AG and…
Network Intelligence LLC
A Mumbai global MSSP and consulting firm with CREST and PCI QSA credentials and clients including Airtel and…
Gambit Security
A 2025-founded Tel Aviv resilience-validation platform that continuously tests whether recovery plans would survive ransomware.
Hispasec Sistemas
A 27-year-old Malaga cybersecurity firm that created VirusTotal in 2004, acquired by MSSP consolidator ReeVo.
ado.security
A Copenhagen MDR and offensive-security specialist acquired by Bridgepoint-backed DataExpert in July 2026.
Beephish
Security awareness SaaS platform offering phishing simulation campaigns, interactive training, and multi-channel communications for employee cyber-risk reduction.
Nucleon Cyber
Threat intelligence vendor using patented polymorphic decoy sensors that mimic vulnerable networks to generate first-party intelligence on active…
Komodo Consulting
Herzliya, Israel-based penetration testing and TIBER-EU-aligned red team firm serving Fortune 500 clients across banking, energy, healthcare and…
AWARE7
German boutique offering penetration testing, security awareness training, and BSI/BMBF/EU-funded security research from Gelsenkirchen.
IPQualityScore
Fraud-prevention and IP/device risk-scoring API providing proxy/VPN/bot detection, device fingerprinting, and threat intelligence to security and fraud teams.
Blackwired
Blackwired is a Singapore-based cyber threat intelligence firm offering pre-attack threat detection and AI-driven proactive threat hunting through…
K7 Computing
Chennai-based endpoint security vendor with 30-plus years of history, offering AI-assisted antivirus and enterprise endpoint protection across 27…
Ampcus
The cyber subsidiary of IT-consulting group Ampcus, building OT security and AI compliance depth via Orbit Cyber and…
Aviel Intelligence
Pre-seed London startup that deploys AI 'honeybot' personas to engage scammers directly and feed banks real-time mule-account intelligence.
Infrawatch
London startup building an internet infrastructure intelligence layer to track and disrupt the infrastructure behind attacks, fraud and…
Furl
A seed-stage Los Angeles startup using agentic AI to engineer and deploy vulnerability fixes end to end.
BreakPoint Labs
A national-security red-team and DevSecOps firm acquired by Bluestone-backed Valiant Solutions.
Redbot Security
Redbot Security is a boutique, bootstrapped penetration testing and red team firm delivering MITRE ATT&CK-informed manual testing across…
Malwation
Malwation builds Threat.Zone, a malware analysis and sandboxing platform combining static, dynamic, and network analysis with content disarm…
Arcabit
Warsaw-based antivirus and endpoint security vendor running a hybrid in-house/Bitdefender detection engine for SMB, education, and home users…
GFI Software
Austin-based, Aurea-owned network security vendor whose GFI LanGuard vulnerability scanner and patch manager target small and midsize businesses.
Applus+
A global testing and certification company expanding its Common Criteria and FIPS 140 evaluation network by acquiring Australia's…
TopHat Security
TopHat Security is a small Atlanta OT/ICS security vendor building digital-twin range and internet-scale ICS scanning tools for…
TAC Security
A Jaipur small-cap vulnerability-management vendor broadening its ESOF platform through Web3 and mobile-security acquisitions.
Nanitor
Icelandic continuous threat exposure management (CTEM) platform combining real-time asset discovery, vulnerability management, configuration hardening, and patch management.
Malware Patrol
A Florida-based threat intelligence provider that has fed real-time malware, ransomware, phishing, and DNS-firewall block lists to security…
Abira Security
A Chicago-based boutique cybersecurity consultancy focused on continuous penetration testing and cloud security assessment.
Panda Security
A pioneering Spanish antivirus vendor founded in 1990, now operated as WatchGuard Technologies' endpoint protection product line following…
Pulsedive
Community-driven threat intelligence platform aggregating OSINT feeds to let analysts search, scan, and enrich IPs, domains, URLs, and…
BonjourCyber
A Paris-based penetration testing and cyber audit firm offering web, mobile, and network security assessments for SMBs.
Athena Dynamics
Singapore-based critical infrastructure protection specialist offering content disarm and reconstruction, zero-trust micro-segmentation, and deep vulnerability assessment for OT/ICS/SCADA…
iZOOlogic
iZOOlogic is a London-based threat intelligence provider specializing in phishing takedown, brand abuse monitoring, and digital risk protection…
Driftnet
A UK internet-scanning pioneer founded by a former government researcher, acquired by SecurityScorecard.
Beetles Cyber Security
Beetles Cyber Security is a Bangladesh-based offensive security firm delivering CREST-accredited penetration testing and PenTest-as-a-Service through its proprietary…
Melius Cyber
Newcastle, UK-based vendor of Cyber Safe, a continuous vulnerability scanning and automated penetration testing SaaS platform built for…
G DATA CyberDefense
Bochum, Germany-based creator of the world's first commercial antivirus software, now a privately-held European endpoint security and EDR…
Memetica
A Cambridge, MA OSINT consultancy founded by a former New York Times journalist, acquired by FGS Global in…
iCOUNTER
A Dallas cyber-risk-intelligence company that adds edge-collection depth to its Counter Threat Operating System via its April 2026…
Pathfynder
A veteran-owned offensive and defensive cybersecurity firm based in Bozeman, Montana, acquired by compliance leader A-LIGN in September…
Cyber Innovation
Brazilian security-as-a-service boutique offering offensive security testing, application security, and virtual CISO consulting.
WeSecureApp
Offensive security firm providing application, network, and cloud penetration testing, red teaming, and vulnerability assessment services to mid-market…
AlertFusion
A UK-based early-stage startup building an alert-triage and vulnerability-management workbench that unifies output from multiple security tools into…
Millennium Corporation
A roughly 400-person defense threat-emulation and federal cyber-training contractor acquired by Markon in February 2026.
FullProxy
A Glasgow penetration-testing and security consultancy acquired by Viatel Technology Group in July 2026.
Secure Decisions
Secure Decisions is the government-funded cybersecurity research division of Applied Visions that originally developed Code Dx and builds…
eScan
Mumbai-based MicroWorld Technologies' endpoint security suite bundling antivirus, DLP, email security, and network intrusion prevention, whose update infrastructure…
Cyver
An Amsterdam-based, self-funded Pentest-as-a-Service (PTaaS) platform, originally launched as PentestHero, that gives cybersecurity service providers and their clients…
Doctor Web
Russian antivirus vendor behind the Dr.Web product line, privately held since 1992, with a customer base concentrated in…
Cythereal
Small malware-analysis vendor whose MAGIC technology correlates malware samples genomically to predict and investigate related attack campaigns.
Carson & SAINT
Bethesda, Maryland-based vulnerability management and compliance firm selling the long-running SAINT Security Suite scanner alongside consulting, penetration testing,…
Yogosha
A decade-old French invite-only bug-bounty pioneer rescued from receivership by IT group Creative in 2026.
Pligence
Pligence is an AI-driven cyber security and privacy company offering mobile threat protection, a threat intelligence platform, and…
CyberAGI
Dallas-based, US-owned offensive security company running an on-premises AI system (Excalibur) that discovers, validates and remediates exposures.
Creative
A Rennes IT services group that rescued bug-bounty platform Yogosha from liquidation and absorbed its team.