Cybersecurity vendors

GuardDuty is always a great cost effective tool for baseline protections. It's EKS integration is no different. It's a great option if you're looking to just get started with runtime security in K8s (Kubernetes).

BalkanID is a platform for SaaS access management. They have the standard features of detecting overpermissioned users and creating workflows for adding and removing users automatically, but they have a surprisingly robust playbook functionality for creating custom workflows.

Beacon provides a data storage, data pipelines and an agent runtime that normalizes and enriches telemetry from 150+ sources so AI agents and analysts can detect, hunt, and respond at machine speed.

Bedrock Systems has created a hypervisor that can watch for malicious interactions with the Linux kernel, and other suspicious read/write operations. This makes them an extremely powerful tool for detecting container escapes and attackers getting funky with core Linux systems, but it comes at the cost of having a custom deployment for your node infrastructure - which may or may not be worth it depending on your security posture.

Check Point's CNAPP offering was closed down in favor of a partnership with Wiz. The platform was actually more competitive than most, but fell just short of competitive offerings.

ClearVector has built identity focused runtime defense across workloads and clouds.

CloudSploit is a great tool to run a quick scan to check your permissions at a high level.

Cloudyrion provides hands on security testing and consulting designed to help organizations implement secure by design processes.

Cobalt has quickly become the leader in penetration testing due to their combination of HackerOne like bug bounty programs with more standard pen testing. They are a great and consistent middle choice for penetration testing, that will go deeper than many, but not as deep as boutique firms.

ConductorOne provides a management platform for okta user assignments and PAM.

Cygnostic provides holistic application and cloud security services via partner products and management. They assist with everything from patch management to detection and response.

Cyrebro offers EDR, SaaS, and SIEM for re-sale by MSSPs and MDRs. They have a strong data backend for flexible log ingestion and SOAR capabilities.

Due to their foundations in the gaming industry, Cyrex they have built a large variety of custom tooling and take a developer first approach to pentesting that sets them apart by looking at the code alongside your app.

Centralized Privileged Access Management across a wide variety of tooling and technology providers.

Dependency Track is an open source option for creating vulnerability dashboards and notification workflows.