Incremental Innovator
Improves on existing approaches (50-69).
Crypto4A Technologies
An Ottawa-based maker of quantum-safe hardware security modules that run NIST post-quantum algorithms with FIPS 140-3 Level 3…
ForAllSecure
Pittsburgh-based creator of Mayhem, an autonomous fuzzing engine born from DARPA's Cyber Grand Challenge, now securing DoD and…
Black Kite
Third-party cyber risk rating platform (formerly NormShield) providing continuous, automated vendor risk assessment across technical, financial, and compliance…
Kiteworks
FedRAMP-authorized private content network unifying secure file sharing, managed file transfer, and email data communications for compliance-heavy industries.
Nokod Security
Nokod Security governs and secures low-code/no-code applications, detecting vulnerabilities and malicious activity in a fast-growing app-development category traditional…
Spin.AI
SaaS security platform combining backup, ransomware detection, browser security, and data security posture management for Google Workspace, Microsoft…
Relyance AI
A data governance platform that maps data lineage in real time from code and infrastructure to power privacy…
NowSecure
Automated mobile application security testing platform used across DevSecOps pipelines and by numerous US federal agencies for NIAP-compliant…
Security Compass
Toronto-based application security firm whose SD Elements platform automates secure development requirements and maps them directly into developer…
ETHIACK
A Portuguese vendor running continuous, AI-driven autonomous pentesting alongside human ethical hackers to validate exploitable vulnerabilities across an…
Onyxia
Onyxia gives CISOs a unified operational view across 40+ security tools to identify coverage gaps, benchmark performance, and…
Feroot Security
Client-side web security platform that monitors browser JavaScript for skimming, script injection, and supply chain threats, aligned to…
V-Key
A Singapore-based digital identity and mobile app security vendor whose FIPS 140-2 validated software-based secure element authenticates banking…
Cyberhaven
AI-native data security platform that traces the full lifecycle of data to power DLP, insider-risk management, and shadow-AI…
SentinelOne
AI-driven EDR/XDR vendor whose Singularity platform uses on-agent machine learning and automated storyline correlation for autonomous detection and…
OPSWAT
OPSWAT protects critical infrastructure with prevention-first technology — deep content disarm and reconstruction, removable media control, and air-gapped…
Harness (Application Security Testing)
Pipeline-native DevSecOps module from CI/CD platform Harness that unifies SAST, SCA, and vulnerability triage in the delivery pipeline.
Didomi
A Paris-based consent and preference management platform that helps organizations collect, manage, and prove GDPR/CCPA-compliant user consent across…
Todyl
Todyl provides a unified, single-agent SASE, SIEM, EDR, MXDR, SOAR, and GRC security platform built specifically for managed…
AIR Security
AI agent firewall that vets skills, plugins, and MCP servers for malicious instructions and supply-chain risk before agents…
LibraCyber
LibraCyber (formed from the 2026 combination of email security vendor Libraesva and security-awareness company Cyber Guru) is a…
Securosys
Swiss maker of Primus hardware security modules and cloud HSM services protecting banking and digital-asset keys.
SonarSource
A Geneva-based code quality and security company whose SonarQube/SonarCloud platform is embedded in CI/CD pipelines at a large…
SailPoint
Identity governance and administration platform managing who has access to what, with automated certification, provisioning, and policy enforcement.