Threat & Vulnerability Management
Threat intelligence, vulnerability assessment, exposure validation, and advanced persistent threat detection.
Picus Security
Security validation platform that continuously simulates real adversary techniques mapped to MITRE ATT&CK to test whether an organization's…
NetRise
An Austin binary-level firmware and software supply-chain security specialist acquired by Accenture in 2026.
Xeol
Y Combinator-backed platform that finds and remediates end-of-life, unmaintained open-source components that traditional vulnerability scanners miss.
Nightwing
A Blackstone-backed Raytheon cyber spin-out with SIGINT and space-domain roots serving government and defense.
Red Sentry
Red Sentry combines human-led penetration testing with a Penetration-Testing-as-a-Service platform to uncover business-logic flaws and chained vulnerabilities that…
Liferaft
Liferaft (operated by Social Navigator Inc.) is a Halifax, Canada-based provider of SaaS open-source intelligence (OSINT) threat solutions,…
Assured Information Security
A Rome, New York-based cyber R&D firm doing vulnerability research, hypervisor/cross-domain security, and applied cyber capability development under…
Finite State
A Columbus, Ohio firm using binary-level firmware analysis to catch undocumented vulnerabilities in IoT, medical device, and industrial…
Karamba Security
Karamba Security provides embedded runtime protection and vulnerability management for automotive, industrial IoT, and enterprise-edge devices, backed by…
Mondoo
Mondoo builds an agentic vulnerability and exposure management platform that continuously scans cloud, on-prem, SaaS, and endpoint environments…
SimSpace
An Orlando cyber range vendor with Cyber Command and MIT Lincoln Lab roots, replicating customers' real environments for…
Group-IB
Threat intelligence and cybercrime investigation firm originally founded in Moscow, now headquartered in Singapore following its 2019 relocation.
Anomali
Threat intelligence platform aggregating and correlating intel feeds with SIEM, XDR, UEBA, and SOAR capabilities to give SOC…
Osavul
Luxembourg-based AI platform used by NATO and governments to detect hybrid threats spanning cyber, physical, and disinformation domains.
aDolus
aDolus's FACT Platform reverse-analyzes software binaries and firmware to generate SBOMs and flag vulnerabilities and malware in OT,…
EclecticIQ
EclecticIQ is an Amsterdam-based Cyber Threat Intelligence Platform vendor, backed by Series C funding and a European Investment…
Searchlight Cyber
A UK-based dark web intelligence company that monitors marketplaces, forums, and leak sites to give enterprises, MSSPs, and…
Root
A Boston AI vulnerability-patching startup (originally Slim.AI) acquired by Aikido Security for an estimated $70M-$100M.
Outpost24
Unified vulnerability management, attack surface management, and threat intelligence platform from Sweden, expanding via acquisition into device-trust and…
AISLE
San Francisco startup building an AI-native 'Cyber Reasoning System' that autonomously discovers, remediates and verifies software vulnerabilities end…
Nisos
Nisos is a managed intelligence firm that investigates platform abuse, supply-chain integrity issues, and nation-state-level threats using human…
Syxsense (an Absolute Security company)
Unified endpoint and vulnerability management combining patch management, security scanning, and real-time remediation, now integrated into Absolute Security.
Tenable
Publicly traded vulnerability management pioneer behind the Nessus scanner and the Tenable One exposure management platform.
AttackIQ
Breach and attack simulation platform that continuously validates security controls against MITRE ATT&CK-aligned adversary techniques in production environments.