Cybersecurity vendors

Acquired by Checkmarx, ZAP (Zed Attack Proxy) is the scanning tool underlying numerous scanners, and if your internal team is up for the challenge, it can be adapted directly to provide most scanning needs.

AccuKnox began with the open source project KubeArmor and has since built into a larger CNAPP platform. Their specialization is runtime protection policies for Kubernetes, which allows for granular rules on which processes can access which files.

Akto has created an open source flavored approach to next generation DAST and API security with features like looking at log data for API discovery, sensitive data flows, and customized scanning. A uniquely helpful feature is the ability to easily edit and tweak tests from the UI.

Andromeda has built a promising solution for making least privileged identity enforcement a reality. They do some discovery, sensitive permission scanning, blast radius building, looking for unused permissions, and JIT access. What makes them unique is AI approval workflows for JIT, and a rich checking for unused permissions.

Appdome provides robust runtime security for mobile applications - everything from WAF like functionalities to built in protection against mobile app specific attacks.

Arnica is a holistic application security solution that focuses primarily on providing a strong developer experience. They have robust policy and attribution engines to build detail oriented workflows getting the right finding to the right person at the right time.

Bright runs a DAST scanner that's focused on API testing via the CLI kicking off cloud based scans in pipeline. They support ingesting the API docs via the pipeline, and are building some interesting features around local fuzzing as a new type of SAST.

Corellium has built groundbreaking virtualization capabilities for doing mobile device focused pentesting and security research.

Due to their beginnings focusing on runtime environments, DevOcean has created an amazing combination of features - from code to cloud visibility, combined with insights from log data, and a lot of data enrichment to assets, not just vulnerabilities.

Dropzone is in the quickly emerging field of AI SOC analysts. They correlate logs across platforms and use generative AI to try and de-noise the amount of false positive alerts that waste analyst time. A few differentiators are being given the query used to generate the logs, and that the LLM will look at the alerts in their organizational context to look for known false positive trends. I'm skeptical of what these tools do in real environments when available data isn't always integrated.

F5 is a close second to Cloudflare for dedicated providers. Their load balancers and API's are able to scale to cloud native levels, but their pricing is often prohibitive for startups.

Acquired by Wiz. Gem is one of the first platforms to focus on cloud detection & response. Realizing the limitations of configuration scanning in the incident response process, they've built a tool primarily for the SOC to respond to cloud attack patterns. The lack of an agent for kubernetes context is the biggest gap.

Impart has everything you'd want in an API security platform - they provide discovery, testing, and protection all in a single platform based on eBPF for network detection and prevention. They are more on the runtime side of API security.

Intruder offers holistic network vulnerability scanner, DAST, and CSPM scanning solutions, a great option for mid size businesses looking for a flexible scanner

Acquired by Palo Alto Networks. Koi offers full inventories and workflows for managing packages, extensions, AI tools, containers and other components that users and developers pull from public marketplaces and registries that MDM and EDR tools rarely see. Koi scores risk per and enforces policy with an agentless approach so even exempt developer machines stay governed.