Cybersecurity vendors

Google SecOps' SIEM offering is a good option for organizations looking for robust SIEM capabilities hosted on top of Google Cloud's infrastructure. They're a straightforward choice for a modern SIEM, with especially robust threat intelligence capabilities

HoundDog is the kind of solution that uniquely solves an interesting problem in AppSec - logging or accidentally sharing PII. They use a combination of regex and AI to scan for data leak scenarios. They've since expanded to looking for data flows and leakage for AI data.

Acquired by SentinelOne. Prompt Security offers comprehensive solutions for LLM security. They have both corporate IT visibility with their browser plugin, alongside application visibility with API, SDK, and reverse proxy options. You can also trace user sessions and detect/redact/block numerous types of data and attacks.

Acquired by Palo Alto Networks. QRadar offers robust protection and logging features, but without the steep learning curve of Splunk. Their methodology for filtering is simple and gets the job done, but your team will work more slowly over time without the query language.

RapidFort focuses on removing vulnerabilities by creating slimmed down container images for your applications, and scans for vulnerabilities as well.

Greymatter is an AI SOC platform that's composed of agentic investigations, detection management, data pipelines, and threat hunting capabilities.

Runtime-first CNAPP and CADR platform that uses eBPF sensors to validate which vulnerabilities are actually exploitable, detect app-layer attacks in real time, and reveal what AI workloads are doing in production.

Secberus creates a data lake of your cloud configuration similar to CloudQuery and then allows you to easily save and enforce custom policies against that infrastructure.

Seemplicity's take on the remediation market heavily emphasizes workflow building via their GUI. Their workflow builder offers robust dispatching of the relevant tickets to the right teams.

SkyHawk is betting big that they can provide just as much runtime response protection as agent based CDRs, but without an agent. This means that certain detection gaps exist, but in the examples I've seen from them, it makes me wonder if those gaps really matter.

SonarCloud has the benefit of winning your developer's hearts due to its initial product focus on bug squashing and the ability to ingest a wide variety of reports. While the SAST functionalities are newer, they robust enough to warrant the add-on to their code health scanning. Great choice for developer only teams with low risk products.

Spyderbat is doing some wonderful work with eBPF and proactive configuration protection in the form of specifying what processes can run on a container. They have a clear emphasis on providing actionable process and network level data to indicate when threats exist on a system.

Agentic AI offensive security platform running continuous, human-overseen penetration testing across web apps, APIs, networks, and AI systems.

TrojAI deploys on premise and provides end to end LLM security - providing DAST type testing for LLMs and realtime protection via either a reverse proxy or SDK.

Zest provides contextual IaC fixes for your deployed cloud infrastructure.