| Vendor | Founded | Country | Status | Recognition | Coverage | Summary | |
|---|---|---|---|---|---|---|---|
|
Sonatype | 2008 | 🇺🇸 US | Active | Leadership Compass +1 Software Supply Chain Security July 30, 2026 · Jonathan Care |
Sonatype is a Software Supply Chain Management (SSCM) company that helps development teams build, manage, and secure their open-source software and AI-generated code. They empower developers to ship… |
|
|
Veracode | 2006 | 🇺🇸 US | Active | Leadership Compass +6 Software Supply Chain Security July 30, 2026 · Jonathan Care |
Veracode is a global provider of application security solutions, specializing in cloud-based software security testing. Its portfolio includes static, dynamic, and software composition analysis tools… |
|
|
Microsoft | 1975 | 🇺🇸 US | Active | Buyer's Compass +213 Identity and Access Governance August 13, 2026 · Nitish Deshpande |
Microsoft is a global technology corporation primarily known for its software, services, and platforms, including the Windows operating system, Azure cloud computing, and Office productivity suite.… |
|
|
PlainID | 2014 | 🇮🇱 IL | Active | Buyer's Compass +21 Identity and Access Governance August 13, 2026 · Nitish Deshpande |
PlainID is a policy-based access management vendor specializing in dynamic, context-aware, externalized authorization for APIs and microservices, supporting centralized policy management and… |
|
|
AWS | 2006 | 🇺🇸 US | Active | Buyer's Compass +82 EU Sovereign Cloud Services March 25, 2026 · Mike Small |
Amazon Web Services (AWS) is a subsidiary of Amazon providing on-demand cloud computing platforms and APIs to individuals, companies, and governments, on a metered pay-as-you-go basis. AWS offers a… |
|
|
Xiting | 2008 | 🇩🇪 DE | Active | Leadership Compass +6 Business Application Risk Management March 25, 2026 · Martin Kuppinger |
Xiting provides XAMS (Xiting Authorizations Management Suite), an SAP add-on for managing roles, analyzing authorizations and ABAP code, delivering focused solutions for SAP role management, code… |
|
|
|
SafePaaS | 2003 | 🇺🇸 US | Active | Leadership Compass +6 Business Application Risk Management March 25, 2026 · Martin Kuppinger |
SafePaaS is a governance, risk, and compliance platform provider delivering solutions that include SAP access controls, compliance automation, and risk detection. Its platform approach aims to unify… |
|
|
GitGuardian | 2017 | 🇫🇷 FR | Active | Leadership Compass +4 Software Supply Chain Security July 30, 2026 · Jonathan Care |
GitGuardian is a cybersecurity company specializing in secrets detection and remediation, focusing particularly on protecting code repositories, CI/CD pipelines, and DevOps environments from the… |
|
|
Lineaje | 2022 | 🇺🇸 US | Active | Leadership Compass +1 Software Supply Chain Security July 30, 2026 · Jonathan Care |
Lineaje, headquartered in Saratoga, California, provides software supply chain security with a focus on SBOM management and deep code decomposition. Its SBOM 360 product offers multi-format SBOM… |
|
|
Orca Security | 2019 | 🇺🇸 US | Active | Leadership Compass +14 Software Supply Chain Security July 30, 2026 · Jonathan Care |
Orca Security is a cloud security vendor providing an agentless, context-aware cloud security platform that combines CSPM and workload protection capabilities; in this report it is reviewed for the… |
|
|
ARCON | 1974 | 🇵🇱 PL | Active | Whitepaper +41 ARCON Secrets Management December 9, 2025 · Jonathan Care |
Arcon is a leading provider of Privileged Access Management (PAM) solutions, focused on securing and managing privileged accounts in enterprise IT environments. Headquartered in Mumbai, India, Arcon… |
|
|
1998 | 🇺🇸 US | Active | Buyer's Compass +70 Cloud Infrastructure Entitlement Management (CIEM) February 4, 2026 · Alejandro Leal |
Google Cloud offers Apigee, a leading API management and security platform acquired in 2016. Apigee is deeply integrated into Google Cloud, supporting hybrid, multi-cloud, and AI-enhanced API… |
||
|
NSFOCUS | 2000 | 🇨🇳 CN | Active | Leadership Compass +2 Software Supply Chain Security July 30, 2026 · Jonathan Care |
NSFOCUS is a public cybersecurity company founded in 2000 and based in Beijing, China, providing network security, threat detection, vulnerability management, and managed security services to… |
|
|
BigID | 2016 | 🇺🇸 US | Active | Leadership Compass +10 Data Governance February 21, 2024 · Paul Fisher |
BigID is a leading data intelligence company that specializes in data discovery, privacy, security, and governance. The company offers solutions to help organizations locate, classify, and manage… |
|
|
Netwrix | 2006 | 🇺🇸 US | Active | Leadership Compass +13 Data Governance February 21, 2024 · Paul Fisher |
Netwrix, established in 2006, is an Irvine, California-based security and compliance vendor, now offering Netwrix SbPAM for PAM following its Stealthbits acquisition. SbPAM emphasizes ephemeral JIT… |
|
|
OneTrust | 2016 | 🇺🇸 US | Active | Leadership Compass +8 Data Governance February 21, 2024 · Paul Fisher |
OneTrust is a leading provider of data privacy, security, and governance solutions, specializing in trust, risk, and compliance management for enterprises worldwide. Its portfolio includes privacy… |
|
|
Commvault | 1996 | 🇺🇸 US | Active | Leadership Compass +11 Data Governance February 21, 2024 · Paul Fisher |
Commvault is a publicly traded data protection and data management software company. It provides solutions for backup & recovery, cloud and infrastructure management, data retention, and ransomware… |
|
|
OvalEdge | 2013 | 🇺🇸 US | Active | Leadership Compass +1 Data Governance February 21, 2024 · Paul Fisher |
OvalEdge specializes in data governance and cataloging, providing an integrated Data Catalog and Data Governance Suite. Built upon a metadata graph and delivering both automated and manual discovery,… |
|
|
Quest Software | 1987 | 🇺🇸 US | Active | Leadership Compass +6 Data Governance February 21, 2024 · Paul Fisher |
KACE by Quest, part of Quest Software headquartered in California, offers a suite of UEM products designed for SMBs and mid-market customers, providing device, application, patch, asset, and content… |
|
|
Ergon Informatik | 1984 | 🇨🇠CH | Active | Buyer's Compass +30 API Security - Airlock March 2, 2026 · Alexei Balaganski |
Ergon Informatik AG is a Swiss software engineering company with a long history in cybersecurity. Its Airlock Secure Access Hub integrates IAM and application/API protection, offering unified policy… |
See All Locations
See All Locations