Emerging / Unranked
Not enough independent evidence for a confident score yet — or a scaled public incumbent (Splunk, Cisco, IBM, Microsoft, and similar category giants) whose innovation pace has gone stale relative to the market it once defined, however large its install base or revenue.
Midship
A Y Combinator-backed San Francisco AI SOX-automation startup being folded into Optro's GRC platform.
NetQuest Corporation
Employee-owned New Jersey firm building packet brokers and optical network monitoring hardware that feeds threat-hunting and lawful-intercept systems…
Antigen
Antigen is a Y Combinator-backed continuous offensive security platform that runs nightly automated attack simulations against an organization's…
Kazimi
Berlin startup using privacy-preserving cryptographic proofs to help mobile apps tell real users from bots.
FortifyData
Cyber risk management platform combining attack surface management, third-party risk ratings, and compliance management, using active weekly scanning…
IPQualityScore
Fraud-prevention and IP/device risk-scoring API providing proxy/VPN/bot detection, device fingerprinting, and threat intelligence to security and fraud teams.
Cyberday
A Finnish information security management system (ISMS) and compliance platform, formerly Agendium, that helps European small and mid-sized…
Beazley Security
An insurer-backed MSSP formed from Lloyd's insurer Beazley's cyber unit and Lodestone, offering managed detection, response, and advisory…
Nebulock
A Boston hunt-first, AI-native SecOps platform with Fortune 500 customers less than a year out of stealth.
ESNC
Specialized SAP security vendor providing vulnerability scanning and real-time attack detection for SAP NetWeaver environments, a niche generalist…
Aiuken Cybersecurity
Madrid-based MDR and managed security services provider founded in 2012, now operating within the Allurity European MSSP group.
LogicManager
A Boston-based enterprise risk management (ERM) platform, founded and grown without outside venture funding, that helps organizations tie…
EigenQ
An Austin quantum-technology company going public via a SPAC merger with Silicon Valley Acquisition Corp.
Dam Secure
AI-native AppSec platform built to catch logic-level security flaws in AI/LLM-generated code that traditional scanners miss.
Bastion
AI-driven compliance and security automation platform for startups, built by former Palantir engineers to get companies SOC 2,…
IPKeys Technologies
Federal cybersecurity contractor whose CLaaS platform automates NIST Risk Management Framework compliance and continuous monitoring for the Department…
Sotero
Data-security-as-a-service platform that centralizes encryption of data at rest, in transit, and in use, aiming to give organizations…
SecureFlag
Hands-on secure coding training platform using virtualized, real-world development environments to teach developers, DevOps and QA engineers to…
Detexian
Melbourne-based SaaS security posture management startup helping mid-market organizations find shadow IT and SaaS misconfigurations.
ObjectSecurity
A San Diego firm specializing in binary-level vulnerability analysis for software and firmware where source code isn't available.
Thales (CipherTrust Data Security Platform)
Thales's enterprise encryption, tokenization, and key-management platform, built from the Vormetric and SafeNet KeySecure acquisitions into a unified…
Solidrange
A Riyadh-based, Sharaka Capital-backed GRC automation startup whose EasyCompliance platform has landed government and publicly listed customers across…
GhostEye
GhostEye is a Y Combinator-backed continuous red-team service that simulates real-world social-engineering attacks — help-desk vishing, deepfaked executive…
TovenAI
AI agents that automate manual, data-intensive compliance surveillance and evidence work for institutional trading firms.