Incremental Innovator
Improves on existing approaches (50-69).
SafeBreach
One of the earliest breach and attack simulation vendors, continuously executing attack playbooks to validate security controls without…
American Binary
Deep-tech cybersecurity company building the first enterprise VPN fully compliant with the NSA's CNSA 2.0 post-quantum cryptography standard.
Auth0
Developer-first customer identity and access management (CIAM) platform, acquired by Okta in 2021 and still operated as a…
CyberFOX
Privileged access and password management platform built specifically for MSPs and lean IT teams protecting millions of endpoints.
SentiLink
A San Francisco synthetic-identity and first-party fraud specialist founded by ex-Affirm risk leaders, backed by published fraud-benchmarking research.
Norm AI
New York startup whose AI agents convert regulations into executable compliance logic, now valued at $1.2 billion.
Panorays
Third-party cyber risk management platform combining continuous external attack-surface scanning with context-based, AI-assisted vendor questionnaires.
DataBahn
Agentic data pipeline platform that automates collection, optimization, and governance of security, observability, and OT telemetry.
Ocean Security
Israeli startup using AI agents that read sender intent and context to catch AI-generated phishing emails that pattern-matching…
Infinidat (InfiniSafe Cyber Resilience)
Enterprise storage vendor Infinidat's InfiniSafe technology delivers immutable snapshots, air-gapping, and near-instant ransomware recovery for primary storage.
Mitek Systems
Mitek Systems (NASDAQ: MITK) is a publicly traded identity verification company that matches government IDs against live selfies…
ConductorOne
ConductorOne (rebranded C1) is an AI-native identity governance platform that manages access and entitlements for human, non-human, and…
iProov
A London-based biometric identity verification vendor whose face-based Genuine Presence Assurance technology is used by government agencies and…
Eclypsium
Portland-based firmware and hardware supply-chain security platform continuously monitoring device integrity from laptops to servers.
Oligo
Oligo uses eBPF-based runtime analysis to catch active exploits and prioritize only the vulnerabilities actually reachable during execution,…
Red Sift
Cloud email security and brand protection platform automating DMARC/BIMI enforcement, now expanding into attack surface management.
C2A Security
C2A Security builds a risk-driven DevSecOps platform, EVSec, that automotive OEMs and Tier-1 suppliers use to secure connected-vehicle…
Securiti.ai
Unified 'Data Command Center' platform combining data security, privacy, governance, and AI compliance across hybrid multicloud environments, now…
Badge
Privacy-preserving authentication platform that derives private cryptographic keys on the fly without storing personally identifiable information or biometric…
MazeBolt
Continuous, non-disruptive DDoS vulnerability testing platform (RADAR) that identifies exploitable gaps in DDoS defenses on live production environments.
RADICL
A Boulder, Colorado-based cybersecurity-as-a-service provider built specifically for small and mid-sized Defense Industrial Base contractors, combining managed detection…
Upwind Security
A cloud-native application protection platform that layers runtime context onto traditional CNAPP capabilities to prioritize and stop real…
Absolute Security
Firmware-embedded endpoint resilience platform that detects and automatically restores security agents and device configurations across a device fleet,…
Sentra
Cloud-native DSPM vendor evolving into a broader data security platform, focused on data hygiene and identity/access controls at…