Maze: cybersecurity software

Maze uses agentic AI to find the exploitability of vulnerabilities in cloud environments, increasing the risk score for true positives, while giving demonstrable proof when false positives cannot be exploited.

What Maze is

Maze uses agentic AI to find the exploitability of vulnerabilities in cloud environments, increasing the risk score for true positives, while giving demonstrable proof when false positives cannot be exploited. The vendor site is mazehq.com. This profile is an entry in the oneNorma directory, not a vendor landing page.

What Maze covers

Maze is in the catalog for these capabilities. Categories: Vulnerability Management, Agentic Development Security, SAST, and SCA. Technologies covered: Applications, Cloud, Containers, and Kubernetes. Catalog tags: Hands-on, Best for MidMarket, and Best for Enterprise.

How to evaluate Maze in a security program

Use Maze as a stack candidate, not as diligence evidence. The oneNorma score for Maze is 5.8/10 (percentile 75). If the real gap is in Vulnerability Management, Agentic Development Security, SAST, and SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what mazehq.com publishes. Contrast it with pentesting and Security Cloud & Compliance.

Classification

Categories

Vulnerability ManagementAgentic Development SecuritySASTSCA

Tags

Hands-onBest for MidMarketBest for Enterprise

Technologies covered

ApplicationsCloudContainersKubernetes

Capabilities by category

Vulnerability Management

AIRemediationThird Party IngestionCode to Cloud

Agentic Development Security

AI SAST

SAST

ReachabilityAIAutofix

SCA

AutofixStatic Function Level

Product overview

Maze helps security teams get cloud vulnerabilities under control. By using AI Agents to run in-depth investigations into every finding, Maze filters out false positives, identifies the few vulnerabilities that matter, and streamlines the remediation process.

Frequently asked questions

What is Maze?

Maze uses agentic AI to find the exploitability of vulnerabilities in cloud environments, increasing the risk score for true positives, while giving demonstrable proof when false positives cannot be exploited. Site: mazehq.com.

Which categories does Maze fall into?

Maze appears in the oneNorma directory under Vulnerability Management, Agentic Development Security, SAST, and SCA. Use those labels to compare it with other vendors for the same problem, not as an official ranking.

Does oneNorma resell or implement Maze?

No. The Maze profile (mazehq.com) is for inventory and comparison. oneNorma delivers offensive and compliance evidence (pentesting, cloud compliance), not a vendor license.

Other cybersecurity vendors

More profiles from the vendor directory.