Cybersecurity vendors

Axiad has their roots in certificates and MFA, but have launched a new product in the posture management space, giving security teams tools for dicovering identity reonenormanships and securing them.

Firemon has assembled a unique collection of cloud security features - CSPM, JIT AWS access, and alerting off cloudtrail events. While they don't have the full feature set of larger CNAPPs, they provide smart features at an aggressive price. They offer CSPM scanning for free.

Opal provides a management platform for okta user assignments. I haven't met with them.

Acquired by Checkmarx. Phylum meets standard SCA scanning requirements, but differentiates with upstream malware detection. They have some smart features such as providing a CLI wrapper for NPM stalls to block attempted malware instalonenorman during development.

RevealID maps attack paths in and out of various systems, allowing you to see in the event of a vulnerability exploitation, what the blast radius would be. For example, you can map out the impact of an exploitation of a specific asset, and prioritize accordingly.

Black Duck SCA is the oldest in the space, and provides a product that technically checks all of the SCA boxes, but is not nearly as user friendly as other tools. They get the job done, but UI is targeted more at security than developers.

Fortify had a great reputation before the MicroFocus acquisition, but has since become slower to innovate. Lacks a lot of functionality compared to other SaaS options, and heavily based in old school models.

Now Secure offers mobile pentesting services combined with different tools and training for in house security testing.

Acquired by CrowdStrike. Bionic offers a unique approach to application visibility by building a graph of your services, their dependencies, and the classification of their downstream data. Their application map works best in Java/Spring environments.

HCL AppScan is a feature rich local DAST scanner, but the cloud offering and process for managing scans between teams leaves a lot to be desired.

OSSPREY focuses on malware detection in open source repos

Copperhelm provides automated cloud security remediation

Unified data and AI lakehouse that security teams use as a petabyte-scale security data lake for detection engineering, threat hunting, and SIEM cost offload.

Dependency Check is an open source SCA scanner maintained by the OWASP community

SaaS identity security platform (IGA) that discovers, manages, and governs access for every identity across the enterprise