All companies

Armis provides cyber exposure management and security for connected devices and operational technology.

Asimily provides a platform to discover, assess, and mitigate risks for IoT, OT, and IoMT devices.

AttackIQ provides a platform for continuous threat exposure management and adversarial exposure validation.

Asset intelligence platform that builds one inventory of every asset from connected IT and security tools to find coverage gaps and prioritise exposures.

Tempe, Arizona-headquartered offensive security firm and Black Hat / DEF CON regulars, makers of the Cosmos continuous attack surface management platform.

Bitsight provides a cyber risk intelligence platform.

Cloud-based Penetration Testing as a Service platform combining AI-driven automation with expert manual testing at accessible price points.

Crowdsourced bug bounty pioneer founded in 2012 by Casey Ellis, offering managed programs and crowd-powered penetration testing from hundreds of thousands of ethical hackers.

Canima provides an AI-powered penetration testing platform.

Censys maps internet infrastructure and provides intelligence for security operations and exposure management.

Pioneer of Pentest as a Service, delivering fast, platform-based penetration testing with a vetted global community of security researchers.

Codename Sonar provides defensive reconnaissance for blue-team testing, including host discovery and network exposure assessment.

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Cyble provides AI-native threat intelligence and cybersecurity platforms for enterprises and governments.

CyCognito provides a platform that discovers and tests external attack surfaces to identify security exposures.

Cyderes provides managed cybersecurity services including identity, threat detection, and exposure management.

Forescout provides a platform for managing cyber risk and mitigating threats across IT, OT, IoT, and IoMT devices.

HiddenLayer provides a security platform for AI applications, protecting against adversarial threats.

Horizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.

Infoblox provides networking and security software for DNS, DHCP and IP address management.

Intel 471 provides cyber threat intelligence focused on adversary tracking, malware intelligence and underground marketplace coverage.

Invicti provides web application and API security testing software for enterprises.

Microsoft sells software, cloud services, hardware, and gaming products.

Penetration testing firm trusted by nine of the top ten US banks, with the Resolve platform for continuous attack surface management.

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Third-party cyber risk management platform with vendor security questionnaires, external attack surface ratings, continuous monitoring and remediation workflows for suppliers.

Picus Security provides a platform that validates exposures and security controls by simulating cyber attacks.

Offensive security firm founded by former DoD professionals. Combines deep offensive testing with the Chariot attack surface management platform and its Exploit validation engine.

ProjectDiscovery builds open-source security tools and infrastructure for mapping, probing, crawling, and detecting vulnerabilities.

Qualys provides an enterprise cyber risk and security platform.

US penetration testing firm founded in 2011, running 600+ engagements a year with a fully remote, US-based team. Manual, expert-led testing across web, network, cloud, mobile, wireless, OT/ICS, and AI/LLM. Gartner Sample Vendor for PTaaS.

Recorded Future provides a threat intelligence platform that indexes open, dark and technical sources. Acquired by Mastercard for $2.65bn.

ReliaQuest provides an AI security operations platform for enterprises to detect and respond to threats.

RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk.

runZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks.

SafeBreach provides a platform that validates security controls and manages cyber exposure for enterprises.

SecurityScorecard provides a platform for managing third-party and supply chain cyber risk.

Siemba provides autonomous and expert-led penetration testing for security teams.

FedRAMP-authorized crowdsourced penetration testing platform combining the vetted SRT researcher community with AI-powered Hydra technology for continuous security testing.

Tanium provides a platform for managing and securing endpoints across large networks.

Team Cymru provides global threat intelligence from internet traffic for proactive defence.

Tenable provides an exposure management platform that unifies security visibility, insight, and action across the attack surface.

UpGuard provides a platform for managing cyber risk across vendors, attack surface, and workforce.

ZeroFox provides external cybersecurity services to discover, validate, and disrupt digital threats.