Cybersecurity vendors

SonaType was one of the first organizations doing SDLC tooling; however, until recently, they did not have a cloud platform. Their platform is still catching up to the intuitiveness of the SaaS competition, but their product checks all the boxes.

Teleskope discovers all of your sensitive data across SaaS or enrolled database tables and allows you to take action controlling access or obfuscating data with their SDK.

Abira Security provides numerous security services like DevSecOps assessments and implementations, but one piece of their services is pentesting.

Anvillogic provides a unified detection engineering plane for writing federated searches and detections across multiple SIEMs and data stores.

Arctic Wolf is built like many older style providers, but has maintained a strong focus on providing meaningful guidance to their customers. They're behind from a platform perspective, but do a great job servicing their customers.

AWS ECR has vulnerability scanning that works, but much like other tools has "CVE dump" problems. They also don't provide clear guidance on how to remediate issues, but can be a good extension of an AWS native security approach.

Bifrost profiles application behaviors in Kubernetes and creates enforcement policies based on the observed behavior.

BlueRock has created a hypervisor that can watch for malicious interactions with the Linux kernel, and other suspicious read/write operations. This makes them an extremely powerful tool for detecting container escapes and attackers getting funky with core Linux systems, but it comes at the cost of having a custom deployment for your node infrastructure - which may or may not be worth it depending on your security posture.

Conviso provides a vulnerability management platform that integrates with numerous providers. They also provide services for assistance along the way.

Cytix monitors different integrations points such as Jira and Github for high risk changes and provides on demand pentesting of the new services or endpoints.

Dam Secure combines AI SAST capabilities with natural language guardrails for AI generated code.

Edgescan wraps up a lot of services around scanning your endpoints for security issues - from traditional web app crawling, to network scanning, to API scanning.

Elastio offers rich snapshot scanning for cloud environments, looking in depth for ransomware indicators of compromise. Their focus on ransomware and support for S3 scanning differentiate them from Wiz and other snapshot scanning solutions.

Firetail offers API discovery via cloud logs or code scanning, can do log enrichment and anomaly detection, and a library that can wrap your application.

Lacework built on top of an alert based approach rather than more traditional scanning models. That has the benefit of reduced noise and a faster reactive approach, but at the cost of surfacing a lot of alerts to security that they don't have the ability to fix.