Find, Compare, and Choose the Best Vendors

Cloudsmith is a cloud-native, fully managed artifact management platform that positions itself as the secure system of record for an organization’s software artifacts. Delivered entirely as SaaS,…

Aikido Security is a developer-first, all-in-one application security platform provider founded in 2022 and headquartered in Ghent, Belgium, offering a consolidated AppSec solution that bundles…

Apiiro provides an application security platform focused on risk visibility and remediation across applications and software delivery pipelines, combining posture management and inventory with…

Chainguard is a software supply chain security company founded in 2021 and headquartered in Kirkland, Washington, that focuses on a prevention-first strategy by providing minimal, hardened container…

Checkmarx is a leading application security vendor focused on providing automated solutions for code review and identification of software vulnerabilities across the development life cycle. Founded…

Endor Labs is a software supply chain security company founded in 2021 and headquartered in Palo Alto, California, that builds its platform around function-level reachability analysis, combining…

JFrog is a DevOps and software supply chain platform company founded in 2008 and headquartered in Sunnyvale, California, best known for its Artifactory universal artifact repository and the Xray…

Socket is a developer-first software supply chain security platform provider founded around 2020–2021 and headquartered in San Francisco, California, focusing on detecting malicious and unsafe open…

JupiterOne is a cyber asset attack surface management (CAASM) platform provider, enabling organizations to manage, inventory, and analyze the security posture of their entire IT estate, both cloud…

Cymulate is a breach and attack simulation provider delivering a SaaS platform that enables companies to test and track their security posture. Its extended posture management capabilities cover…

Fidelis Cybersecurity is a company specializing in extended detection and response (XDR), deception, and network security solutions. The firm addresses both enterprise and critical infrastructure…

Tenable, Inc., established in 2002 in Columbia, Maryland, USA, specializes in vulnerability management and cyber exposure solutions. Its platform, Tenable.io, includes Tenable.io Container Security,…

InCyber Forum, officially known as the Forum International de la Cybersécurité (FIC), is a major European conference and community platform dedicated to cybersecurity, digital trust, and digital…

Skyhawk Security is a cloud security company focused on advanced threat and anomaly detection for cloud environments; the paper lists Skyhawk as a vendor to watch because its approach emphasizes…

CipherCloud is a cloud security company focused on helping enterprises securely adopt and govern cloud services (SaaS, PaaS, and IaaS). Its portfolio centers on Cloud Access Security Broker (CASB)…

McAfee is a prominent cybersecurity company offering security software and services for consumers and businesses. Its portfolio includes endpoint protection, antivirus solutions, and network security…

Trend Micro, founded in 1988 in Tokyo, is a major global player in endpoint, email, web, and IoT security, as well as cloud protection, supporting both traditional and next-gen workloads. Regular…

Mailinblack, headquartered in Marseille, France, is a European-focused provider of advanced email security, with its Protect Advanced solution offering AI-powered spam and threat detection, BEC…

xorlab, based in Zurich, Switzerland, is an innovative, European-centric email security provider focusing on advanced AI and behavior analysis. The xorlab Email Security solution is available as…

Abnormal Security is a US-based cloud-native, API-based email security company focused on AI-driven behavioral anomaly detection and protection across multiple channels, particularly tailored to…