Cybersecurity vendors

Armorcode is a holistic vulnerability management solution for application security teams. While there's less "magic" happening than in the other providers, I'm also the most confident it would actually work - even down to providing python scripts you can run in pipeline to send vulns to their platform.

Checkov is the leader in IaC scanning as an open source solution.

Cloudfence has focused on creating a more actionable CSPM for specifically managing network and identity security in the cloud. Their network visibility allows them to do some cool things like limiting security groups based on observed traffic.

Contrast wraps commonly exploited functions at runtime to detect and prevent application exploits, i.e. they scan the application once it's actually built and running for vulnerabilities, and preventing exploits. This makes Contrast a strong choice for enterprise application protection.

CrowdStrike's container runtime technically works, but deployment, maintenance, and usefulness do not compare to other tools at the time of testing. CrowdStrike's Windows offerings remain dominant in the space, but their CNAPP and container security solutions are difficult to recommend.

Fortra's AlertLogic has an interesting set of capabilities aimed at holistic security for the mid market. They provide a SOC alongside their in house built SIEM (ELK Stack), Managed WAF (Virtual Appliance), an agent that offers IDS and vulnerability scanning, and an EDR agent.

Of the cloud providers, GCP offers the best native tooling to scan and remediate container vulnerabilities. Combined with Google Distroless images, Google offers robust out of the box image protection capabilities for containerized environments.

GitHub Advanced Security is okay. It checks a lot of scanning boxes - most importantly SCA with dependabot, secrets scanning, and SAST with CodeQL. The tools tends to be very noisy, requires management via GitHub which can be challenging, and tends to generate a lot of false positives leading to operational difficulty over time

Harmonic currently has the standard suite of LLM protection visibility via browsers, but has a long term focus on detecting the flow of sensitive data - a vision that aligns well with the team's history in detecting sensitive data across the internet.

Kusari has built a fixing oriented SCA on top of robust SBOM capabilities via their contributions with GUAC and SLSA, which are well established frameworks for mapping open source dependencies.

Levo does a ton of neat stuff with only a lightweight ebpf agent. They create full API schemas which can be real sources of truth, detect version changes, run DAST testing, and look for missing auth tokens. This covers areas where I most commonly see misconfigurations lead to actual exploits - accidental configs of public APIs without authentication. They are more on the testing side of API security.

API-first SecOps cloud platform giving MSSPs and security teams pay-as-you-go EDR, telemetry pipelines, and agentic AI automation across their existing tools.

Mobb integrates with SAST tools like Snyk, Checkmarx, Fortify, and Codeql to scan your code and then provides fixes for merging into your code base. Their generated fixes seem good, but it's something that other providers are also working to build natively such as Snyk's DeepCode. Mobb uses GenAI to help create fixes for SAST findings.

Nudge provides SaaS security with a focus on discovery. Some of those capabiltiies are connecting to email providers for discovery of shadow IT, SaaS offborading automation, and spend discovery.

Acquired by Cyera. Oasis security discovers identities across cloud, on prem, and SaaS, graphs them, and points out potential vioonenormans and security issues. It shows what the roles, or NHIs if you want to get marketing with it, are accessing, their likely owner, and what it should be accessing