Proveedores de ciberseguridad

Adquirido por Checkmarx, ZAP (Zed Attack Proxy) es la herramienta de escaneo subyacente a numerosos escáneres, y si su equipo interno está preparado para el desafío, se puede adaptar directamente para satisfacer la mayoría de las necesidades de escaneo.

AccuKnox began with the open source project KubeArmor and has since built into a larger CNAPP platform. Their specialization is runtime protection policies for Kubernetes, which allows for granular rules on which processes can access which files.

Akto has created an open source flavored approach to next generation DAST and API security with features like looking at log data for API discovery, sensitive data flows, and customized scanning. A uniquely helpful feature is the ability to easily edit and tweak tests from the UI.

Andromeda has built a promising solution for making least privileged identity enforcement a reality. They do some discovery, sensitive permission scanning, blast radius building, looking for unused permissions, and JIT access. What makes them unique is AI approval workflows for JIT, and a rich checking for unused permissions.

Appdome provides robust runtime security for mobile applications - everything from WAF like functionalities to built in protection against mobile app specific attacks.

Arnica is a holistic application security solution that focuses primarily on providing a strong developer experience. They have robust policy and attribution engines to build detail oriented workflows getting the right finding to the right person at the right time.

Bright runs a DAST scanner that's focused on API testing via the CLI kicking off cloud based scans in pipeline. They support ingesting the API docs via the pipeline, and are building some interesting features around local fuzzing as a new type of SAST.

Corellium has built groundbreaking virtualization capabilities for doing mobile device focused pentesting and security research.

Due to their beginnings focusing on runtime environments, DevOcean has created an amazing combination of features - from code to cloud visibility, combined with insights from log data, and a lot of data enrichment to assets, not just vulnerabilities.

Dropzone is in the quickly emerging field of AI SOC analysts. They correlate logs across platforms and use generative AI to try and de-noise the amount of false positive alerts that waste analyst time. A few differentiators are being given the query used to generate the logs, and that the LLM will look at the alerts in their organizational context to look for known false positive trends. I'm skeptical of what these tools do in real environments when available data isn't always integrated.

F5 ocupa el segundo lugar cercano a Cloudflare en cuanto a proveedores dedicados. Sus balanceadores de carga y API pueden escalar a niveles nativos de la nube, pero su precio suele ser prohibitivo para las nuevas empresas.

Adquirido por Wiz. Gem es una de las primeras plataformas que se centra en la detección y respuesta en la nube. Al darse cuenta de las limitaciones del escaneo de configuración en el proceso de respuesta a incidentes, crearon una herramienta principalmente para que el SOC responda a los patrones de ataque en la nube. La falta de un agente para el contexto de Kubernetes es la mayor brecha.

Impart tiene todo lo que desea en una plataforma de seguridad API: brindan descubrimiento, pruebas y protección, todo en una única plataforma basada en eBPF para la detección y prevención de redes. Están más en el lado del tiempo de ejecución de la seguridad de la API.

Intruder offers holistic network vulnerability scanner, DAST, and CSPM scanning solutions, a great option for mid size businesses looking for a flexible scanner

Adquirido por Palo Alto Networks. Koi ofrece inventarios y flujos de trabajo completos para administrar paquetes, extensiones, herramientas de inteligencia artificial, contenedores y otros componentes que los usuarios y desarrolladores obtienen de mercados y registros públicos que las herramientas MDM y EDR rara vez ven. Koi califica el riesgo por y aplica la política con un enfoque sin agentes, de modo que incluso las máquinas de desarrollo exentas permanecen gobernadas.