Incremental Innovator
Improves on existing approaches (50-69).
Evolutia Tecnologia
São Paulo cybersecurity services firm delivering 24/7 SentinelOne-based MDR and SOC monitoring to Brazilian companies.
Privacy Analytics
An IQVIA-owned, Ottawa-based platform that automates de-identification and anonymization of structured and unstructured patient-level healthcare data for research…
OpenText NetIQ
OpenText NetIQ is a legacy identity governance and administration (IGA) suite, now part of OpenText following its 2023…
Centraleyes
An AI-powered cyber GRC platform, formerly known as CyGov, that automates risk and compliance data collection to help…
Invisinet Technologies
A Houston zero-trust vendor using patented First Packet Authentication to cloak OT and IoT networks at the protocol…
SureCloud
A UK-based GRC platform vendor offering configurable, no-code risk, compliance, and third-party risk management software.
Phoenix Cyber
A Scottsdale-based cybersecurity services firm embedding senior security engineers into incident response, threat hunting, and SOC programs for…
Simplesense
Simplesense's Installation Resilience Platform combines emergency situational awareness, breach and attack simulation, and MSSP services for defense and…
WaveStrong
Vendor-agnostic information security consulting and managed security services firm operating since 2001, offering risk assessment, MDR, and incident…
SafeGuard Privacy
Privacy compliance management platform combining assessment workflows, vendor risk tracking, and an AI assistant, used as the backbone…
CriticalStart
CriticalStart (Critical Start) is a Plano, Texas-based managed detection and response provider built around its CORR platform and…
AegisAI
A New York agentic anti-phishing and BEC startup founded by former Google security executives.
Cyclops Security
A Tel Aviv GenAI security-search platform with 150+ integrations, reportedly acquired by Check Point for about $85M.
Reken
On-device AI platform defending against AI-powered phishing, deepfakes and fraud, led by a former Google click-fraud head.
Rapid7 InsightCloudSec
Agentless, real-time multi-cloud CSPM/CIEM/KSPM platform from public vendor Rapid7, built on its 2020 acquisition of DivvyCloud.
HEAL Security
HEAL Security is a healthcare-focused cyber threat intelligence company that aggregates and analyzes breach, ransomware, and medical-device risk…
Syhunt
A veteran Brazilian application security vendor offering hybrid DAST, SAST, API, and mobile security scanning under the Syhunt…
ZenGRC
A cloud GRC platform (originally launched by Reciprocity, briefly rebranded RiskOptics, and reverted to the ZenGRC name in…
UNDERDEFENSE Inc
A bootstrapped New York MDR provider whose MAXI platform unifies SOC, pentesting, incident response, and compliance.
Soverli
ETH Zurich spin-off running an isolated, patent-pending sovereign OS layer alongside stock Android and iOS to protect high-risk…
ID Agent
Dark web credential and identity-risk monitoring product line (Dark Web ID) operated as a business unit of Kaseya,…
Compyl
AI-guided governance, risk, and compliance platform automating control testing and evidence collection across 70+ frameworks including SOC 2,…
IO River
A Boston multi-CDN orchestration startup reducing edge-vendor lock-in, which raised a $20M Series A in January 2026.
Strobes Security
Continuous threat exposure management platform unifying attack surface management, penetration-testing-as-a-service and risk-based vulnerability management.