All companies
Every cybersecurity vendor and service firm on the list. Tick the filters to build a shortlist, then open a profile to see who owns the company and what it does. You can also browse by category or country, or see recent deals.
Results
See also Software supply chain security vendors and companies based in the United States.
| Company | Category | Based in | Founded | Ownership |
|---|---|---|---|---|
 AISLE AISLE provides AI-native vulnerability management that finds, fixes, and verifies software vulnerabilities. | Vulnerability management | San Francisco, United States | Owned by Cohere | |
 Black Duck Black Duck provides application security testing tools for software development. | Application security testing | Burlington, Massachusetts, United States | 2002 | Owned by Clearlake Capital and Francisco Partners |
 Chainguard Chainguard builds hardened, verified open source container images, libraries and packages to reduce vulnerabilities. | Software supply chain and SBOM | Seattle, United States | Private | |
 Checkmarx Checkmarx provides application security testing software that scans code for vulnerabilities. | Application security testing | Tel Aviv, United States | 2006 | Owned by Hellman & Friedman |
 Doppler Doppler provides a secrets management platform for developers, AI agents, and automated workflows. | Secrets management | San Francisco, United States | 2018 | Private |
 Eclypsium Eclypsium provides continuous assurance of critical hardware, firmware, and software across enterprise infrastructure. | IoT, embedded and product security | Portland, United States | 2017 | Private |
 Endor Labs Endor Labs provides an agentic application security platform for AI-generated and open source code. | Application security testing | Palo Alto, United States | 2021 | Private |
 Finite State Finite State provides a product security platform for connected devices, automating SBOM generation, vulnerability analysis, and compliance evidence. | Software supply chain and SBOM | Columbus, United States | 2017 | Private |
 GitHub GitHub is a software development platform where developers, agents, and code come together. | Application security testing | San Francisco, United States | 2007 | Part of Microsoft |
 Harness Harness provides an AI-native software delivery platform for DevOps, testing, security, and cost optimization. | Application security testing | San Francisco, United States | 2017 | Private |
 JFrog Software supply chain security and artifact management platform that blocks risky open source packages, scans for exploitable vulnerabilities and governs releases and AI models. | Software supply chain and SBOM | Sunnyvale, United States | Private | |
 Keyfactor Keyfactor provides software for managing machine identities and cryptographic keys. | Encryption and key management | Independence, United States | Private | |
 Legit Security Legit Security provides application security for AI-generated code and software development. | Application security testing | Boston, United States | Private | |
 Manifest SBOM and vulnerability management platform that helps carmakers and suppliers track risk in vehicle software. | Software supply chain and SBOM | United States | 2021 | Private |
 Mend.io Mend.io provides application security and AI security software for code and AI systems. | Application security testing | Burlington, United States | 2011 | Private |
 NetRise NetRise analyses compiled software to create an inventory of components and identify supply chain risks. | Software supply chain and SBOM | Austin, United States | 2020 | Part of Dragos |
 Nowsecure NowSecure provides mobile app security and AI governance. | Mobile security | Chicago, United States | 2009 | Private |
 ReversingLabs ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software. | Software supply chain and SBOM | Cambridge, United States | Private | |
 RunSafe Security Generates SBOMs for embedded code and hardens vehicle ECU software against memory-based exploits at runtime. | Software supply chain and SBOM | McLean, United States | Private | |
 Safeguard Safeguard is a software supply chain security platform. | Software supply chain and SBOM | California, United States | 2025 | Private |
 Second Front Systems Second Front Systems provides a DevSecOps suite that helps software providers and government agencies build, secure, and deploy software to government and regulated networks. | GRC and compliance automation | Wilmington, United States | 2014 | Private |
 Semgrep Semgrep provides a platform for scanning code and dependencies to find security issues. | Application security testing | San Francisco, United States | 2017 | Private |
 Snyk Snyk provides a security platform that finds and fixes vulnerabilities in code, dependencies, containers, and cloud infrastructure. | Application security testing | Boston, United States | 2015 | Private |
 Sonatype Sonatype provides tools to manage and secure open source components and AI models in software development. | Software supply chain and SBOM | Fulton, United States | Private | |
 Trail of Bits Elite security research firm specializing in source code review, blockchain auditing, and building industry-standard open-source security tools. | Penetration testing | New York, United States | 2012 | Private |
 Veracode Veracode provides a platform that identifies and fixes security flaws in software. | Application security testing | Burlington, United States | 2006 | Owned by TA Associates |