Incremental Innovator
Improves on existing approaches (50-69).
CyberVadis
CyberVadis provides standardized, evidence-based third-party cybersecurity and data-privacy risk ratings, letting enterprises assess suppliers once and share the…
Infodas
German cross-domain security vendor, now an Airbus subsidiary, providing NATO- and EU SECRET-accredited hardware gateways for moving data…
Impart Security
San Francisco API and application security vendor built by former CDN and WAF engineers, offering runtime enforcement across…
Stytch
Passwordless and passkey-first authentication API platform for developers, now part of Twilio, offering fraud- and bot-detection signals alongside…
Vicarius
A vulnerability remediation platform whose flagship product vRx combines vulnerability assessment with automated patching capabilities (including patches for…
FireMon
Lenexa, Kansas-based creator of the network security policy management category, unifying firewall and cloud policy across 120+ platforms.
TypingDNA
Romania-founded, Brooklyn-headquartered vendor of keystroke-dynamics behavioral biometrics used for passive account-takeover and exam-fraud detection layered on existing authentication.
YesWeHack
Paris-based crowdsourced security platform coordinating bug bounty, vulnerability disclosure, and pentest management programs for enterprises and public-sector agencies,…
Singulr AI
Enterprise AI and agentic control plane for discovering, governing, and enforcing runtime security policy across in-house agents, public…
Autonomous Plane
Autonomous Plane was a cloud-native application security startup founded by Kyle Quest, creator of the widely used open-source…
StrongDM
StrongDM, based in Burlingame, California, provides a cloud-native privileged access management (PAM) platform that gives organizations centralized, auditable…
ForAllSecure
Pittsburgh-based creator of Mayhem, an autonomous fuzzing engine born from DARPA's Cyber Grand Challenge, now securing DoD and…
Stellar Cyber
Open XDR platform unifying detection across network, endpoint, cloud, and identity telemetry, built to work with a customer's…
Optiv
A large, pure-play cybersecurity solutions integrator and managed security services provider offering strategy consulting, MSSP/SOC services, identity, and…
Prevalent AI
Prevalent AI builds a security data fabric that unifies fragmented enterprise data — asset, vulnerability, identity, and exposure…
Cymulate
Cloud-based breach and attack simulation (BAS) and exposure-validation platform that continuously tests security controls with simulated attack techniques.
Living Security
Living Security is an Austin-based human risk management platform that quantifies individual and organizational human cyber risk and…
Daxa
AI governance and security platform, formerly the CNAPP vendor CloudDefense.io, that controls how AI agents access and act…
imper.ai
imper.ai detects deepfake and AI-generated impersonation in real time across enterprise communication platforms like Zoom, Teams, Slack, WhatsApp,…
Aim Security (now part of Cato Networks)
Platform governing and securing enterprise adoption of generative AI applications, acquired by Cato Networks at a reported $350M…
SecureW2
Cloud PKI and passwordless network access vendor that replaces shared Wi-Fi passwords and legacy RADIUS with certificate-based, phishing-resistant…
Qwiet AI (a Harness company)
Qwiet AI provides AI-powered application security testing — combining SAST, SCA, IaC, container, and secrets scanning in one…
Ditto
Formerly Uniken, Ditto provides patented split-key cryptography and zero-knowledge-proof identity verification for banks, telecoms and other regulated enterprises.
Deepwatch
A managed detection and response provider using a named-analyst "Squad" delivery model and deep Splunk-ecosystem ties, backed by…