Emerging / Unranked
Not enough independent evidence for a confident score yet — or a scaled public incumbent (Splunk, Cisco, IBM, Microsoft, and similar category giants) whose innovation pace has gone stale relative to the market it once defined, however large its install base or revenue.
Spirion
St. Petersburg, Florida-based sensitive data discovery and classification platform (formerly Identity Finder), acquired by archTIS in September 2025.
Turnkey
A New York embedded-wallet and key-management infrastructure provider for crypto applications, expanding into verifiable computing.
Natoma
An MCP-focused AI-agent governance startup acquired by Snowflake alongside Observe and Select Star.
Vision Cybersecurity
A January 2026 spin-off of ISH Tecnologia serving 4,600+ Brazilian private-sector clients, backed by up to R$400M from…
Prescient Security
Prescient Security is a Nashville-based audit and penetration-testing firm delivering SOC 2, ISO, FedRAMP, and CREST-accredited compliance services.
Pervade Software
Cardiff, Wales-based vendor whose OpView and OpAudit platforms combine SIEM-style monitoring, vulnerability tracking and compliance evidence management, and…
CYFIRMA
CYFIRMA is a Singapore-headquartered external threat landscape management company, offering products spanning cyber threat intelligence (DeCYFIR), digital risk…
Ultra Cyber Ltd
A 200-plus-staff UK sovereign secure-communications and datalink security firm being acquired by Airbus Defence and Space.
IDenfy
Lithuanian identity verification and fraud-prevention platform combining document, biometric, and AML checks for onboarding regulated and online businesses.
Responsible Cyber
Singapore-based cyber risk and third-party risk management vendor offering CISO-as-a-service consulting alongside its RiskImmune vendor-risk platform.
Ncontracts
A Nashville-area GRC platform built specifically for banks, credit unions, and other financial institutions, combining risk and compliance…
Klocwork (Perforce)
Long-established static application security testing tool for safety-critical embedded software, originally a Nortel spinoff, now owned and developed…
Midship
A Y Combinator-backed San Francisco AI SOX-automation startup being folded into Optro's GRC platform.
SecurEnvoy
Long-running UK multi-factor authentication vendor, owned by publicly listed Shearwater Group, that turns existing devices into MFA tokens…
ThreatMate
MSP-focused platform combining attack surface discovery, automated penetration testing, and CISA-aligned configuration auditing into one risk-identification tool.
Apexa iQ
An agentless asset assurance and attack surface management platform that unifies IT asset visibility with vulnerability, compliance, and…
TopHat Security
TopHat Security is a small Atlanta OT/ICS security vendor building digital-twin range and internet-scale ICS scanning tools for…
QryptoCyber
Post-quantum cryptography audit firm building automated Cryptographic Bills of Materials to help enterprises inventory and migrate vulnerable encryption.
Arcabit
Warsaw-based antivirus and endpoint security vendor running a hybrid in-house/Bitdefender detection engine for SMB, education, and home users…
IndyKite
Identity-powered data platform that uses a knowledge-graph architecture to unify siloed identity and business data, aimed at making…
Cyjax
Cyjax is a UK-founded cyber threat intelligence provider offering investigative analysis, payment fraud detection, and physical security intelligence…
APCON
Privately held network packet broker and visibility fabric maker whose IntellaView hardware feeds clean, deduplicated traffic to security…
Infotex
A Lafayette, Indiana-based managed security service provider delivering SOC/SIEM monitoring and FFIEC-aligned compliance support built specifically for community…
SNS Security
Montpellier-based French MSSP running a 24/7 SOC, CERT incident response, and penetration testing for mid-market enterprises across France…