Cybersecurity vendors

Pillar provides complete coverage as a developer first AI security solution. They integrate with your SCM, detect & diagram your AI agents, test them for vulnerabilities, and provide real-time protection and guardrails.

Teleport works by giving end users certificates that allow them to enforce access policies across numerous cloud resources that are typically difficult to manage. The user experience is better than any alternatives I've seen.

Trufflehog is the best open source secrets scanner available, and easily integrates as a GitHub action.

Zenity has a holistic security offering for AI security, especially for common workforce use cases like Claude, Microsoft 365, and ChatGPT. They are especially strong at tracking permissioning across a workforce.

AI Strike is combining LLMs with traditional SIEM and CSPM to provide a holistic LLM based approach to security incident response. They're combining robust asset data with log sources to give the LLM enough context to make accurate alerting decisions.

Artemis provides numerous services under a single platform - from MDR to AI SOC to Detection Engineering. Their key differentiator is intelligently storing and searching data within their own platform or other platforms depending on the context. This enables AI incident response, detection engineering management, or SIEM replacement use cases.

Chainguard uses distroless Linux (Wolfi) images that will require a non-trivial instrumentation to ask your devs to stand up. It's a bit like, "compliance hates this one easy trick" - they provide minimal container images to use in your applications, but you'll still need to patch them over time.

Checkmarx has adapted well to the DevSecOps model, offering a lighter weight scanner in the Checkmarx One platform, that integrates well into the larger stack. They don't have all the latest features of some newer companies, but they certainly get the job done for diverse enterprises. I would not suggest venturing off Checkmarx One though.

Daylight offers end-to-end MDR services powered by an AI data platform, but with a commitment to the human aspects of being a service provider. Daylight’s primary differentiation goes beyond AI or data lookup capabilities to focus on the quality of the human analysts and threat hunters behind the product. Teams get the speed benefits of an AI first pass, with the confidence of human expertise backing them up.

Acquired by Wiz. Dazz aggregates your security vulnerabilities into a single dashboard which allows easy assignment and risk based prioritization. Their approach to this problem does a lot of automated lookup work and has some advanced ability to find where container images are coming from. Dazz differentiates by being focused on remediation, rather than just prioritization.

Drata had the advantage of starting after Vanta, and they quickly built a greater depth of automation. They were less focused on their endpoint solution, and more focused on powerful evidence automation. That said, these tools have struggled providing the depth needed for enterprise risk teams.

Via their oneagent, Dynatrace provides highly competitive ADR capabilities with function level reachability, RASP style blocking, and the ability to query most logs. Their agent also extends into processes and hosts. Their CADR offering has the complete offering from a feature perspective, but the UX struggles to tie it together for security.

I think Edera is incredibly dope - they offer a simple deployment that offers robust runtime protection for your cloud environments. They introduce a hypervisor to kubernetes nodes that isolates containers as virtual machines instead of as processes. It provides an elegant solution to the specific problem of container isoonenorman.

Huntress has established themselves as a trustworthy brand in the MDR space through their contribution of open source tools and analysis to the larger security community. They re-sell their huntress tool, which is essentially an XDR platform, to other security vendors.

JupiterOne is fundamentally a data platform for managing all of your assets and security integrations. They can create custom dashboards, queries, and graphs across assets and vulnerability data.