Threat & Vulnerability Management
Threat intelligence, vulnerability assessment, exposure validation, and advanced persistent threat detection.
Censys
Internet-wide asset and attack-surface intelligence platform spun out of University of Michigan research, indexing internet-connected devices and infrastructure…
Team Cymru
Global network telemetry and threat intelligence provider whose Total Insights Feed scores tens of millions of IPs daily,…
Dataminr (Cyber Risk)
Real-time AI platform that detects early signals of cyber threats and high-impact events from over a million public…
Malwarebytes
The two-decade incumbent anti-malware and endpoint remediation vendor with tens of millions of users, now under private equity…
Brinqa
AI-driven exposure management platform that unifies vulnerability and risk data across infrastructure, cloud, and applications.
Stairwell
A Palo Alto threat-hunting platform built by Chronicle's former CSO, continuously indexing every file for retroactive 'ground truth'…
Flashpoint
Threat intelligence firm specializing in deep and dark web collection, providing risk intelligence on cybercrime, fraud, and physical…
Morphisec
Prevention-first endpoint security vendor using Automated Moving Target Defense to stop ransomware and memory-based exploits at the point…
A Security
Autonomous offensive security platform that continuously validates which attack paths are exploitable before AI-driven attackers can chain them.
Cymulate
Cloud-based breach and attack simulation (BAS) and exposure-validation platform that continuously tests security controls with simulated attack techniques.
HCL Software (BigFix)
HCLSoftware's AI-driven endpoint management and patch remediation platform for large, heterogeneous device fleets.
Zafran
Exposure management platform that validates which vulnerabilities are actually exploitable given deployed security controls, to cut remediation noise.
Sprocket Security
Continuous penetration testing service pairing human offensive-security experts with a platform for always-on attack surface testing, rather than…
RunSybil
AI-native continuous penetration testing platform built around an autonomous offensive security agent, backed by a $40M Khosla Ventures-led…
Reach Security
Reach Security is an AI-native security controls operating system that finds and fixes misconfigurations across an organization's existing…
BreachLock
Hybrid AI-plus-human Penetration-Testing-as-a-Service platform delivering continuous, on-demand security testing.
Palo Alto Networks (Cortex Xpanse)
Global cybersecurity platform vendor whose Cortex Xpanse product performs continuous, agentless internet-wide external attack surface scanning.
Bishop Fox
Large private offensive-security services firm whose Cosmos platform combines continuous automated attack surface testing with human-led penetration testing.
Dux
Agentic exposure management platform using AI workers to determine which vulnerabilities are truly exploitable and mitigate them faster…
Spektion
Continuous runtime exposure management platform that filters tens of thousands of vulnerability findings down to what is actually…
Picus Security
Security validation platform that continuously simulates real adversary techniques mapped to MITRE ATT&CK to test whether an organization's…
NetRise
An Austin binary-level firmware and software supply-chain security specialist acquired by Accenture in 2026.
Xeol
Y Combinator-backed platform that finds and remediates end-of-life, unmaintained open-source components that traditional vulnerability scanners miss.
Nightwing
A Blackstone-backed Raytheon cyber spin-out with SIGINT and space-domain roots serving government and defense.