Cybersecurity vendors

Acquired by Cato Networks. Aim has built a flexible offering in the LLM space. They offer a browser plugin, copilot wrappers, can connect to third party network logs, create privacy policies, their own chat, anonymizers, and an API for proxying application level calls.

Astrix doesn't go to market as a SaaS security company, but their ability to protect OAuth credentials is incredibly unique and powerful security for an area that's traditionally been a blind spot for many teams. They've expanded to general NHI protection.

Every organization using AWS should absolutely turn on GuardDuty as their first cloud security step. They provide awesome base level protections and detections at a low price. An especially amazing check the box runtime protection tool.

Axonius provides holistic asset management for cloud and on-premise that extends deeply into the vulnerability management space. They have a strong focus on integrations and a robust API.

Brava uses an attack simuonenorman engine to maximize the value of every log - providing data pipeline, storage, search, and AI response capabilities. First, their agents identify blind spots across your ecosystem by simulating various attacks and testing your detection logic. They then utilize the findings to optimize your log ingestion by reducing unnecessary logs. Finally, they provide an optimized data storage and searching layer to empower agentic incident response.

Clover provides a platform for doing continuous AI threat modeling and design review. By connecting to organizational data sources, they can help map your application architecture and accelerate your threat modelling process. They then continuously enforce these decisions through AI code review of pull requests and AI code generation.

Corridor provides a holistic approach to securing AI generated code by helping secure developer endpoints, bringing organizational security context to coding agents, and doing in pipeline security code review.

Endor Labs stands out in their granularity and reachability analysis for open source packages. They've also added back ported patches and automatic fix suggestions based on function changes between patch versions. They offer basic SAST capabilities via opengrep for companies that need it.

Escape is doing amazing things with their approach to DAST. They thoroughly discover your APIs and schemas by searching your frontend code, and then test those APIs from the outside. They have great scanning support for modern languages, and also in depth testing configurations.

Formal is a complete PAM solution based on deploying flexible binaries that allow complete control of data access. They offer unique data aliasing to make them especially strong at controlling sensitive data access.

Invicti provides a unified suite application security testing tools. Their history is in robust dynamic testing capabilities, which have modernized to support AI red teaming and API testing. Most recently, they've acquired Kondukto to deliver all in one application security testing capabilities, alongside broader ASPM tools.

Monad is an extremely flexible data pipeline solution for normalizing, enriching, and routing data. They provide a straightforward user interface with some of the most robust flexibility in the category.

Noma's AI Security solution focuses on a broad range of implementations and use cases across posture and runtime protection. They're especially strong for companies looking to secure the work of machine learning or AI engineering teams more broadly.

Ox provides an all-in-one application security solution that provides their own scanners combined with the ability to import third party findings. They also have a robust API for managing the data in the tool.

P0 has built a fully featured identity solution for developer access. They support posture scanning for misconfiguration, but go beyond by also providing ways for developers to connect to those workloads in the first place.