All companies
Every cybersecurity vendor and service firm on the list. Tick the filters to build a shortlist, then open a profile to see who owns the company and what it does. You can also browse by category or country, or see recent deals.
Results
See also Application security vendors and companies based in the United States.
| Company | Category | Based in | Founded | Ownership |
|---|---|---|---|---|
 AISLE AISLE provides AI-native vulnerability management that finds, fixes, and verifies software vulnerabilities. | Vulnerability management | San Francisco, United States | Owned by Cohere | |
 Appdome Appdome provides a no-code platform for building security and anti-fraud defenses into mobile apps. | Mobile security | Redwood City, United States | Private | |
 Black Duck Black Duck provides application security testing tools for software development. | Application security testing | Burlington, Massachusetts, United States | 2002 | Owned by Clearlake Capital and Francisco Partners |
 Checkmarx Checkmarx provides application security testing software that scans code for vulnerabilities. | Application security testing | Tel Aviv, United States | 2006 | Owned by Hellman & Friedman |
 Contrast Security Contrast Security provides runtime application security that detects and blocks attacks from inside running applications. | Application security testing | Pleasanton, United States | Private | |
 Data Theorem Data Theorem provides application security for mobile, API, cloud, and AI-driven applications. | API security | Palo Alto, United States | 2013 | Private |
 Endor Labs Endor Labs provides an agentic application security platform for AI-generated and open source code. | Application security testing | Palo Alto, United States | 2021 | Private |
 GitHub GitHub is a software development platform where developers, agents, and code come together. | Application security testing | San Francisco, United States | 2007 | Part of Microsoft |
 Harness Harness provides an AI-native software delivery platform for DevOps, testing, security, and cost optimization. | Application security testing | San Francisco, United States | 2017 | Private |
 Invicti Invicti provides web application and API security testing software for enterprises. | Application security testing | Austin, United States | 2005 | Private |
 JFrog Software supply chain security and artifact management platform that blocks risky open source packages, scans for exploitable vulnerabilities and governs releases and AI models. | Software supply chain and SBOM | Sunnyvale, United States | Private | |
 Legit Security Legit Security provides application security for AI-generated code and software development. | Application security testing | Boston, United States | Private | |
 Mend.io Mend.io provides application security and AI security software for code and AI systems. | Application security testing | Burlington, United States | 2011 | Private |
 Nowsecure NowSecure provides mobile app security and AI governance. | Mobile security | Chicago, United States | 2009 | Private |
 Offensive Security Creators of OSCP, Kali Linux, and Exploit-DB, offering penetration testing services from the team that trains the world's ethical hackers. | Penetration testing | New York, United States | 2007 | Owned by Leeds Equity Partners |
P Puma Security Puma Security provides .NET static analysis tools and application security services. | Application security testing | Des Moines, United States | 2017 | Private |
 Qualys Qualys provides an enterprise cyber risk and security platform. | Vulnerability management | Foster City, United States | 1999 | Public, QLYS |
 ReversingLabs ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software. | Software supply chain and SBOM | Cambridge, United States | Private | |
R Rhino Security Labs Cloud security penetration testing specialists known for the Pacu AWS exploitation framework and deep expertise across AWS, Azure, and GCP environments. | Penetration testing | Seattle, United States | 2013 | Private |
 Safeguard Safeguard is a software supply chain security platform. | Software supply chain and SBOM | California, United States | 2025 | Private |
 Semgrep Semgrep provides a platform for scanning code and dependencies to find security issues. | Application security testing | San Francisco, United States | 2017 | Private |
 Snyk Snyk provides a security platform that finds and fixes vulnerabilities in code, dependencies, containers, and cloud infrastructure. | Application security testing | Boston, United States | 2015 | Private |
 Sonatype Sonatype provides tools to manage and secure open source components and AI models in software development. | Software supply chain and SBOM | Fulton, United States | Private | |
 Trail of Bits Elite security research firm specializing in source code review, blockchain auditing, and building industry-standard open-source security tools. | Penetration testing | New York, United States | 2012 | Private |
 Veracode Veracode provides a platform that identifies and fixes security flaws in software. | Application security testing | Burlington, United States | 2006 | Owned by TA Associates |
 Zimperium Zimperium provides mobile security for devices and applications. | Mobile security | Tel Aviv, United States | 2010 | Owned by Liberty Strategic Capital |