Cybersecurity vendors

Breez provides identity based threat detections, primarily for cloud resources.

DiscrimiNAT has built a unique way to enforce egress network security by controlling outgoing traffic via security groups. They take advantage of VPC endpoints to create a lighter touch way to scale egress control, which is one of the most difficult challenges in cloud environments.

GCP offers a robust web security scanner, or DAST equivalent. They've recently augmented the platform with AI Red teaming capabilities as well.

Gomboc promises a unique approach to IaC in that it goes beyond traditional regex based rules.

Grip Security provides SaaS posture management and identity management

Infield offers both a product and services for handling complex migration efforts for common application upgrades. They have a robust history of success and combining the service with the SaaS should be appealing to customers who don't find the product value in upgrades.

KICS is another solid open source solution; however, they're more easily adopted into traditional security review models.

Kiuwan offers some uniquely good SAST detection results, at the price of an unintuitive UI/UX. Kiuwan's scanning offered some of the most robust true positives we've seen, but they really dragged in terms of their implementation processes, UI, and integration/maintenance of developer workflows.

Kloudle provides a simple credit based scanner that's a good alternative for companies looking for quick and easy on demand scan, they're also differentiated by supporting Digital Ocean.

Proprietary offensive-security AI model that continuously pentests web apps, mobile apps, APIs, and external attack surfaces.

We're pending hands on time with the tool for more information.

Quokka provides robust static and dynamic analysis for mobile applications. They have simple upload mechanisms for binary analysis, and then surface strong vulnerability testing and posture type findings.

Rad has deep roots in contributing to kubernetes security developments and provides dedicated services to help customers secure their cloud environments. They have in depth policy, audit log, RBAC, and runtime capabilities protection capabilities, now augmented with an AI first approach to accessing and using the data.

Acquired by Anysphere (Cursor). Resourcely provided Terraform guardrails.

ScoutSuite is another useful tool to run a quick scan of your cloud environment to check for any issues.