Cybersecurity categories

Tools that control who can sign in to which systems and what they can do once inside.

Tools that guard admin and other high-risk accounts, often by vaulting and rotating their passwords.

Software that grants, reviews and removes staff access as people join, move and leave.

Sign-up and login systems for a company's own customers.

Ways to prove who you are beyond a password, from push prompts to passkeys and hardware tokens.

Shared vaults where staff store and share the passwords for work accounts.

Stores for the tokens, certificates and API credentials that software uses to reach other software.

Tools that spot attackers using stolen accounts or abusing Active Directory and cloud identity.

Platforms that check cloud accounts for risky settings and protect what runs in them.

Protection for containers, Kubernetes and cloud servers while they run.

Tools that check the settings and connected apps of SaaS products such as Microsoft 365 and Salesforce.

Hardware and virtual firewalls that inspect and block traffic at the edge of a network.

Network and security controls delivered from the cloud, so remote staff connect through one service.

Remote access that connects a user to one app at a time instead of the whole network.

Tools that watch network traffic to find attackers who are already inside.

Services that absorb floods of junk traffic so websites and networks stay online.

Filtering and monitoring of DNS lookups to block malicious domains.

Agents on laptops and servers that record activity, detect attacks and let teams respond.

Antivirus and its successors, which stop malware on laptops, servers and phones.

Protection for phones and tablets against malicious apps, phishing and risky networks.

Platforms that collect security logs in one place so analysts can search them and raise alerts.

Tools that automate the routine steps of investigating and closing security alerts with playbooks.

AI agents that triage and investigate security alerts the way an analyst would, and hand back their findings for a person to check.

Scanners and platforms that find missing patches and weak settings, then help teams fix them in order.

Tools that map everything a company exposes to the internet, including assets it has forgotten.

Software that runs safe copies of real attacks to test whether defences catch them.

Tools that test code and running applications for security flaws before release.

Tools that track the open source and third-party parts inside software, often as an SBOM.

Tools that find a company's APIs and block attacks and data leaks through them.

Filters in front of websites that block web attacks and unwanted bots.

Tools that stop sensitive data leaving a company by email, upload or copying.

Tools that find where sensitive data sits across cloud stores and who can reach it.

Products that encrypt data and look after the encryption keys, including hardware security modules.

Backup built to survive ransomware, with copies attackers cannot alter and fast restores.

Filters that catch phishing, malware and impersonation before they reach the inbox.

Services that set up DMARC, SPF and DKIM so others cannot send email in a company's name.

Training and phishing tests that teach staff to spot and report attacks.

Tools that spot fraudulent payments, account takeovers and fake sign-ups.

Data and research on attackers, their tools and their targets, fed into defences.

Monitoring of the open web, social media and the dark web for fake domains, leaked data and brand abuse.

Tools that collect and analyse public information for investigations.

Tools that protect AI models and LLM apps, and control how staff use AI tools.

Tools that route, filter and reshape security logs before they reach a SIEM or data lake.

Software that tracks controls and gathers evidence for frameworks such as SOC 2 and ISO 27001.

Tools that assess the security of suppliers, including outside-in security ratings.

Firms that audit companies against SOC 2, ISO 27001 and similar standards.

Security for factories, utilities and other industrial control systems.

Security for connected devices and the firmware inside them, from design to deployment.

Security testing and protection for vehicles and the software in them.

Firms that attack a company's systems with permission to find weaknesses before criminals do.

Providers that watch a customer's systems around the clock and respond to threats for them.

Providers that run security tools and monitoring for customers as an outsourced service.

Firms that help contain, investigate and recover from breaches and ransomware attacks.

Advisers who assess security, write strategy and act as a part-time CISO.

Platforms that pay outside researchers for reporting security flaws.