Cybersecurity vendors

Control Tower can be used to try and enforce compliant resource creation across your organization, but is less effective as this is becoming accomplished through policy as code instead.

Security Hub does a decent job aggregating AWS' security tooling reports into a single dashboard. They also offer a lot of integrations into other tools. That being said, they're not a great CSPM solution on their own and their dashboards have limited usefulness.

Coana built an SCA with direct and transitive dependency detection that is now a part of Socket. They also have advanced function level reachability analysis.

Ethiack is a combination DAST scanner and pentesting platform, using customized scanners to detect issues and working with hackers for either validation or manual pentesting.

Nighvision creates API docs based on scanning your code, and then tests those endpoints from the outside based on the docs they created.

Provides IaC and SAST auto-fixing via an IDE plugin

Unbound offers a browser plugin for DLP and AI usage discovery, and a proxy based approach for data sanitization and visibility.

WhiteSwan has built a robust access solution for workloads, files, and applications. They deploy similarly to a VPN and can be used for session tracking, file access, and give a lot of visibility and access control. Primarily for non-containerized environments.

CheckRed has created a CSPM with vulnerability scanning for containers. They are focused on an offering for MSSPs as a value add, but have a differentiator with some smart SaaS configuration rules as part of the platform.

Codeshield has created an attack simuonenorman platform for viewing the blast radius of a permission takeover.

Docker has quietly built out their container vulnerability scanning to be comparable to other tools in the area. While, at the moment, they lack a full enterprise platform for full tracking across container lifecycles, their scanning built into the Docker Desktop app and CLI options provide much needed visibility into where vulnerabilities are coming from. They've also recently launched their own hardened images.

Marqus focuses on runtime security for LLMs.

Nucleus's approach to vulnerability remediation emphasizes risk based prioritization, which we think is less exciting than the functionality around getting the right information to the right teams, automatically. They have a more traditional model for standardizing data.

OpenRefactory has an amazingly robust SAST scanner that has really focused on building the best detections possible. While they're still building their full SaaS platform and features, the SAST engine itself is one of the best out there.

StackIdentity provides a platform that excels in diving deep into your IAM environment and assessing over permissive and high risk resources. They provide a data lake that allows you to really see and maintain proper access controls across tools.