Emerging / Unranked
Not enough independent evidence for a confident score yet — or a scaled public incumbent (Splunk, Cisco, IBM, Microsoft, and similar category giants) whose innovation pace has gone stale relative to the market it once defined, however large its install base or revenue.
Prescient Security
Prescient Security is a Nashville-based audit and penetration-testing firm delivering SOC 2, ISO, FedRAMP, and CREST-accredited compliance services.
Spirion
St. Petersburg, Florida-based sensitive data discovery and classification platform (formerly Identity Finder), acquired by archTIS in September 2025.
Turnkey
A New York embedded-wallet and key-management infrastructure provider for crypto applications, expanding into verifiable computing.
Pervade Software
Cardiff, Wales-based vendor whose OpView and OpAudit platforms combine SIEM-style monitoring, vulnerability tracking and compliance evidence management, and…
CYFIRMA
CYFIRMA is a Singapore-headquartered external threat landscape management company, offering products spanning cyber threat intelligence (DeCYFIR), digital risk…
Ultra Cyber Ltd
A 200-plus-staff UK sovereign secure-communications and datalink security firm being acquired by Airbus Defence and Space.
IDenfy
Lithuanian identity verification and fraud-prevention platform combining document, biometric, and AML checks for onboarding regulated and online businesses.
Responsible Cyber
Singapore-based cyber risk and third-party risk management vendor offering CISO-as-a-service consulting alongside its RiskImmune vendor-risk platform.
Ncontracts
A Nashville-area GRC platform built specifically for banks, credit unions, and other financial institutions, combining risk and compliance…
Klocwork (Perforce)
Long-established static application security testing tool for safety-critical embedded software, originally a Nortel spinoff, now owned and developed…
Midship
A Y Combinator-backed San Francisco AI SOX-automation startup being folded into Optro's GRC platform.
Kazimi
Berlin startup using privacy-preserving cryptographic proofs to help mobile apps tell real users from bots.
NetQuest Corporation
Employee-owned New Jersey firm building packet brokers and optical network monitoring hardware that feeds threat-hunting and lawful-intercept systems…
Antigen
Antigen is a Y Combinator-backed continuous offensive security platform that runs nightly automated attack simulations against an organization's…
FortifyData
Cyber risk management platform combining attack surface management, third-party risk ratings, and compliance management, using active weekly scanning…
Beazley Security
An insurer-backed MSSP formed from Lloyd's insurer Beazley's cyber unit and Lodestone, offering managed detection, response, and advisory…
IPQualityScore
Fraud-prevention and IP/device risk-scoring API providing proxy/VPN/bot detection, device fingerprinting, and threat intelligence to security and fraud teams.
Cyberday
A Finnish information security management system (ISMS) and compliance platform, formerly Agendium, that helps European small and mid-sized…
Nebulock
A Boston hunt-first, AI-native SecOps platform with Fortune 500 customers less than a year out of stealth.
EigenQ
An Austin quantum-technology company going public via a SPAC merger with Silicon Valley Acquisition Corp.
Dam Secure
AI-native AppSec platform built to catch logic-level security flaws in AI/LLM-generated code that traditional scanners miss.
ESNC
Specialized SAP security vendor providing vulnerability scanning and real-time attack detection for SAP NetWeaver environments, a niche generalist…
Aiuken Cybersecurity
Madrid-based MDR and managed security services provider founded in 2012, now operating within the Allurity European MSSP group.
LogicManager
A Boston-based enterprise risk management (ERM) platform, founded and grown without outside venture funding, that helps organizations tie…