Cybersecurity vendors

Lasso offers a combination of solutions to offer governance over AI solutions - from plugins to endpoint agents for monitoring and blocking.

Leen is building a unified API for security integration data - a great product for product teams or people building their own tooling!

Legit Security offers a holistic ASPM platform that focuses more on pipeline discovery, security, and third party data ingestion than native scanning solutions.

Linx is an identity security tool focused on governance capabilities for all kinds of identities - agents, NHI, humans, and more. It's especially strong at understanding identity reonenormanships and missing security controls.

Acquired by Akamai. noname built an API security tool the way a network engineer would, and the Akamai acquisition makes sense. They build maps of API's based on network logs, and alert with anomaly detection. That puts them in an awkward middle position compared to eBPF based solutions like Impart, or more developer focused tools like StackHawk or Escape. The response actions are building WAF rules and they're building testing functionality.

Operant has focused their application defense solution on securing AI workloads, providing features like runtime detection and redaction for production applications. They excel at securing Kubernetes workloads, and are especially strong at network detections.

Orca offers the standard suite of CNAPP features with a focus on agentless scanning. They're a good all around CNAPP offering mostly focused on the posture side.

Panther is the SIEM tool truly doing things differently. Their unique approach to detection rules makes things much easier to manage in that they can be written in Python. This makes it easier to write and maintain rules, and also makes it easier to integrate with other tools. They allow some awesome flexibility via Python based rules.

Prowler is built on top of the most robust open source cloud scanner there is. It's a great option for organizations that want to get started with CSPM scanning, but aren't sure where to start. I'd recommend anyone use it at least once to get an idea of what's in your environment.

Qualys offers just about every vulnerability scanner you could want from a single vendor - from cloud to on premise to code. They have great vulnerability insights and scanning capabilities in a holistic place, but the platform UX can be difficult compared to more specialized vendors.

Socket has great malware detection capabilities as part of their SCA solution, alongside function reachability from their acquisition of Coana. They have especially robust support within the JavaScript ecosystem.

AI-driven detection engineering platform that automates authoring, testing, deploying, and maintaining detections across your existing SIEM, EDR, and data lakes.

StackHawk is a developer-first DAST, and it shows every step of the way. They're built to scan quickly, in pipeline, and make it easy to attempt to reproduce issues. They're a major player in reshaping modern DAST and have really paved a way for the future with features like fuzzing API specific data.

Vega rolls up a wide scope of workflows into what they call a Security Analytics Mesh - a unified data system for humans and agents to query data wherever it lives. These capabilities enable several core outcomes for the SOC: analytics, detection engineering, autonomous triage, and threat hunting. The platform sits across existing SIEMs, data lakes, and cloud storage and can operate as either a full SIEM replacement or an augmentation layer, with the data staying in place either way.

Veza has created a unique graph querying tool associating users to the data they have access to - this extends beyond basic Okta user assignments to include things like sensitive S3 buckets or databases. Alerting can also be configured based on the searches. They also include onboarding/offboarding automations.